[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Dark Reading:
FragAttacks Foil 2 Decades of Wireless Security
Researchers Call for 'CVE' Approach for Cloud Vulnerabilities
HTTP/2 Implementation Errors Exposing Websites to Serious Risks
CISA Launches JCDC, the Joint Cyber Defense Collaborative
Incident Responders Explore Microsoft 365 Attacks in the Wild
Researchers Find Significant Vulnerabilities in macOS Privacy Protections
A New Approach to Securing Authentication Systems' Core Secrets
Organizations Still Struggle to Hire & Retain Infosec Employees: Report
Why Supply Chain Attacks Are Destined to Escalate
New Normal Demands New Security Leadership Structure
Threatpost
Epik Confirms Hack, Gigabytes of Data on Offer
Hackers Are Going ‘Deep-Sea Phishing,’ So What Can You Do About It?
Turla APT Plants Novel Backdoor In Wake of Afghan Unrest
BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom
46% of On-Prem Databases Globally Contain Vulnerabilities: Is Yours Safe?
Amazon Driver-Surveillance Cameras Roll Out, Sparking Debate
Europol Breaks Open Extensive Mafia Cybercrime Ring
Payment API Bungling Exposes Millions of Users’ Payment Data
Bring Your APIs Out of the Shadows to Protect Your Business
Porn Problem: Adult Ads Persist on US Gov’t, Military Sites
CyberScoop
Treasury sanctions cryptocurrency platform for working with ransomware payments
Key lawmakers to CISA: Let us send you more money, power
Democrats urge FTC to make privacy rules while fight over a federal law drags on
Ransomware gang strikes Iowa agriculture business New Cooperative, the latest hack on food supply chain
Police say scammers who used email fraud, SIM swapping are connected to Italian mafia
Momentum builds to strengthen FTC's role as privacy enforcer, though hurdles remain
Anonymous says it's leaking hacked data from Epik, a right-wing hosting service
Facebook says it will step up efforts to stop coordinated campaigns that cause harm
Bitdefender releases REvil decryptor as ransomware gang shows signs of return
FTC threatens fines for health apps that fail to report compromised data
HITBSecNews - Keeping Knowledge Free for Over a Decade
OWASP updates top 10 vulnerability ranking for first time since 2017
The iPhone 13 is thicker and heavier than the iPhone 12
Theranos burned through $2M a week as investors were given rosy projections
iOS 15 brings new FaceTime and AI features on September 20
Hacker discovers serious iCloud flaws
Phishers impersonate US DOT to target contractors after Senate passed $1 trillion infrastructure bill
Shocking Pixel 6 rumor lists Google SoC with two ARM X1 CPU cores
TrickBot gang member arrested after getting stuck in South Korea due to COVID-19 pandemic
Russia's Yandex says it repelled biggest DDoS attack in history
Fujitsu confirms stolen data not connected to cyberattack on its systems
BleepingComputer
New macOS zero-day bug lets attackers run commands remotely
Microsoft PC Health Check adds detailed Windows 11 compatibility info
VMware warns of critical bug in default vCenter Server installs
US sanctions cryptocurrency exchange used by ransomware gangs
Russian state hackers use new TinyTurla malware as secondary backdoor
Atlassian Trello is down — second outage this week
Netgear fixes dangerous code execution bug in multiple routers
Marketron marketing services hit by Blackmatter ransomware
How to fix the Windows 0x0000011b network printing error
Hacked sites push TeamViewer using fake expired certificate alert
CPO Magazine
Phishing Attacks More Sophisticated, Malicious Emails Timed To Coincide With Periods of Low Energy and Inattentiveness
Mass Leak of Fitness Tracking Data Hits Fitbit, Apple, Microsoft, Google; 60 Million Records Exposed by Improperly Configured Third-Party Database
North American Organizations Struggle to Comply with Privacy Laws
Zero-Click Exploit Used by Pegasus Spyware Patched for Apple Devices With Security Update
Azurescape Microsoft Azure Container Vulnerability Allows Attackers to Compromise Other Accounts on Public Cloud Services
Your Organization May Need a Cybersecurity Advisor: Here’s What To Consider
Threat Actor Leaks Login Credentials Of About 500,000 Fortinet VPN Accounts
Working From Home Brings New Cybersecurity Challenges as Workers Commonly Bypass Inconvenient Measures
Avoiding Dark Patterns: Critical Tools for Privacy Legal Counsel
FTC Sets Its Sights on Big Tech: $1 Billion Proposed to Create Digital Privacy & Cybersecurity Division
GBHackers On Security
Europol Knock Down 100+ Organized Cybercriminals Who Involved SIM Swapping & Other Online Frauds
Top 10 Reasons to Invest in Web Security
Hackers Attack Aviation Industry With AsyncRAT to Steal Login Credentials
Introducing the World’s First Free Cloud WAF to Secure Your Web Applications
DDoS Attack Service Admin Behind 200,000 Attacks Face 35 Years in Prison
Capoae Malware Attacking Linux systems & Web Apps Using Multiple Vulnerabilities
Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation
MikroTik Shared a Mitigation to Secure Routers From Massive Mēris DDoS Botnet Attack
Now You Can log in to your Microsoft Account Without a Password
Safeguarding Your Computer Against Malware
The Register - Security
Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware
Database containing personal info on 106m people who traveled to Thailand found open to the internet – report
Suex to be you: Feds sanction cryptocurrency exchange for handling payments from 8+ ransomware variants
Fix network printing or keep Windows secure? Admins would rather disable PrintNightmare patch
UK Ministry of Defence apologises after Afghan interpreters' personal data exposed in email blunder
Mafia works remotely, too, it seems: 100+ people suspected of phishing, SIM swapping, email fraud cuffed
You’ve trained at the cutting edge, here’s how to keep your DFIR skills razor sharp
Apache OpenOffice can be hijacked by malicious documents, fix still in beta
Ransomware recovery: Start getting back up before you’re even hit
Tick, tick, tick … TikTok China just limited kids to 40 minutes' use each day
The Hacker News
New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures
How Cynet's Response Automation Helps Organizations Mitigate Cyber Threats
US Sanctions Cryptocurrency Exchange SUEX for Aiding Ransomware Gangs
The Gap in Your Zero Trust Implementation
High-Severity RCE Flaw Disclosed in Several Netgear Router Models
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters
Unpatched High-Severity Vulnerability Affects Apple macOS Computers
Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug
New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin
Network World Security
Tape backup as a defense vs. ransomware
Palo Alto shapes SASE package for hybrid enterprises
What to expect from SASE certifications
Gartner: IT skills shortage hobbles cloud, edge, automation growth
Palo Alto launches an enterprise-grade security pack for remote workers
5 steps for modernizing enterprise networks
Juniper software triggers network response to threats
Cisco preps now for the hybrid workforce
Feds' demand for software standards could boost enterprise security
IBM upgrades its Big Iron OS for better cloud, security, and AI support