[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Dark Reading:
Pandemic Drives Greater Need for Endpoint Security
High-Level Admin of FIN7 Cybercrime Group Sentenced to 10 Years in Prison
Security Gaps in IoT Access Control Threaten Devices and Users
How the Biden Administration Can Make Digital Identity a Reality
Software Developer Arrested in Computer Sabotage Case
Google Brings 37 Security Fixes to Chrome 90
US Formally Attributes SolarWinds Attack to Russian Intelligence Agency
Pandemic Pushes Bot Operators to Redirect Efforts
6 Tips for Managing Operational Risk in a Downturn
How to Create an Incident Response Plan From the Ground Up
Threatpost
BazarLoader Malware Abuses Slack, BaseCamp Clouds
iOS Kids Game Morphs into Underground Crypto Casino
NSA: 5 Security Bugs Under Active Nation-State Cyberattack
Mandiant Front Lines: How to Tackle Exchange Exploits
Google Project Zero Cuts Bug Disclosure Timeline to a 30-Day Grace Period
Biden Races to Shore Up Power Grid Against Hacks
Gafgyt Botnet Lifts DDoS Tricks from Mirai
Attackers Target ProxyLogon Exploit to Install Cryptojacker
Security Bug Allows Attackers to Brick Kubernetes Clusters
Ransomware Attack Creates Cheese Shortages in Netherlands
CyberScoop
FIN7 'technical guru' sentenced to 10 years in prison
Codecov dev tool hit in another supply chain hack
How (and why) cyber specialists hacked a North American utility's smart meter
A push for cybersecurity philanthropic giving launches
U.S. government accuses Russian companies of recruiting spies, hacking for Moscow
White House slaps sanctions on Russian cyber activities while blaming SVR for SolarWinds campaign
NSA, FBI, DHS expose Russian intelligence hacking tradecraft
Lawmakers press spy leaders on lagging efforts to block foreign hackers
Unpatched Microsoft Exchange Servers hit with cryptojacking
With court order, FBI removes hundreds of Exchange Server web shells from US organizations
CPO Magazine
Clubhouse Joins Facebook and LinkedIn as Target of Data Scraping; Cumulative One Billion User Profiles Have Been Leaked
Developers, Security and Operations Walk into a Bar…
Hackers Exploit Known Sap Security Vulnerabilities With a Typical Cyber Attack Succeeding In Record Time
New Tripwire Survey: IoT Security Still in Shambles, Most Security Pros Struggling To Make Devices Fit Safely Into Business Networks
Key Questions Answered for Data Privacy in a Pandemic
ACLU Privacy Policy Update Reveals Data Sharing With Facebook; Names, Email Addresses and Phone Numbers Included
When Certificate Management Becomes Daunting, Automate It
UK Seeks To Discourage Facebook Rollout of End-to-End Encryption, Citing Risks to the Safety of Children
The Evolution of Ransomware: Four Predictions to Shape Your Security Strategy
New noyb Complaint Takes On Android Ad Tracking; Privacy Group Compares Google’s AAID to Apple’s IDFA
GBHackers On Security
Most Important Computer Forensics Tools for Hackers and Security Professionals
Operation Overtrap – Hackers Attack Online Banking Users Via Bottle Exploit Kit & Banking Malware
Critical Zero-day Vulnerability in Desktop Window Manager (DWM) Let Attackers to Escalate Privilege
Indicator Of Attack(IoA’s) And Activities – SOC/SIEM – A Detailed Explanation
Critical Microsoft Exchange Server Vulnerabilities Could Allow Hackers to Control of Enterprise Networks
6 Cybersecurity Trends To Expect In 2021
Yuki Chan – Automated Penetration Testing and Auditing Tool
Unpatched zero-day vulnerability Affecting Current Versions of Google Chrome & Microsoft Edge Published Online
Hackers Abuse Website Contact Forms To Deliver Sophisticated IcedID Malware
500,000 Huawei Users Infected with Joker Android Malware From Own Apps Store
HITBSecNews - Keeping Knowledge Free for Over a Decade
The FBI Takes a Drastic Step to Fight China’s Hacking Spree
What to expect from Apple’s “Spring Loaded” event on April 20
Here’s how the FBI managed to get into the San Bernardino shooter’s iPhone
The Biggest Security Threats to the US Are the Hardest to Define
Coinbase Makes Its Debut—and Bitcoin Arrives on Wall Street
FBI launches operation to remotely remove Microsoft Exchange server backdoors
J&J COVID vaccine use paused due to one-in-a-million complication
This is Intel’s plan to dominate driverless car technology
Spring Loaded: Apple announces April 20 event
Detroit man sues police for wrongfully arresting him based on facial recognition
The Register - Security
Russian infosec firm Positive Technologies trying to stay positive after US sanctions
Microsoft received almost 25,000 requests for consumer data from law enforcement over the past six months
Watchdog thinks Google tricked Australians into giving up data, sues. Judge semi-agrees
Mobile app security standard for IoT, VPNs proposed by group backed by Big Tech
It was Russia wot did it: SolarWinds hack was done by Kremlin's APT29 crew, say UK and US
University of Hertfordshire pulls the plug on, well, everything after cyber attack
Is it still possible to run malware in a browser using JavaScript and Rowhammer? Yes, yes it is (slowly)
Nigerian email scammer sent down for 40 months in the US, ordered to pay back $2.7m to victims
Report: Aussie biz Azimuth cracked San Bernardino shooter’s iPhone, ending Apple-FBI privacy standoff
What the FLoC? Browser makers queue up to decry Google's latest ad-targeting initiative as invasive tracking
The Hacker News
SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence
What are the different roles within cybersecurity?
Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems
US Sanctions Russia and Expels 10 Diplomats Over SolarWinds Cyberattack
1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them
Malware Variants: More Sophisticated, Prevalent and Evolving in 2021
YIKES! Hackers flood the web with 100,000 pages offering malicious PDFs
New WhatsApp Bugs Could've Let Attackers Hack Your Phone Remotely
NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers
New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks
Network World Security
TCP/IP stack vulnerabilities threaten IoT devices
Cisco streamlines, upgrades its SASE bundle
Report: 5G network slicing could leave flaws for bad actors to exploit
Cloudflare wants to be your corporate network backbone with centralized management and security
VMware bolsters cloud app security with Mesh7 buy
Ransomware: How to make sure backups are ready for a real attack
Top enterprise data center trends you need to know
5 free network-vulnerability scanners
Cybersecurity in 2021: Stopping the madness
WAN challenges steer auto-rental firm to SASE