-
Five things security pros want from CNAPP
PRIVACY PRIVACY According to new research from ESG and the Information Systems Security Association (ISSA), 58% of organizations are consolidating or considering consolidating the number of security vendors they do business with. Security technology consolidation is bigger than simply winnowing down vendor count. Organizations are shifting from traditional best-of-breed security technologies to tightly integrated security technology…
-
A Parent’s Guide To The Metaverse – Part Two
PRIVACY PRIVACY Welcome back to part 2 of my Metaverse series. If you are after tips and strategies to help your kids navigate the Metaverse safely then you’re in the right place. In this post I’ll share with you how your kids are likely already accessing the Metaverse, the benefits plus how to ensure they…
-
Encrypted Messaging Service Hack Exposes Phone Numbers
PRIVACY PRIVACY Many people opt for encrypted messaging services because they like the additional layers of privacy they offer. They allow users to message their closest friends, family, and business partners without worrying about a stranger digitally eavesdropping on their conversation. The same people who message over encrypted services and apps are likely also diligent…
-
Google Cloud blocks largest HTTPS DDoS attack ever
PRIVACY PRIVACY Google Cloud has claimed to have blocked the largest Layer 7 (HTTPS) DDoS attack to date after a Cloud Armor customer was targeted by a series of attacks that peaked at 46 million requests per second (rps). Google stated the attack, which occurred on June 1, was at least 76% larger than the…
-
Hackers Deploy Bumblebee Loader to Breach Target Networks
PRIVACY PRIVACY Most Bumblebee infections started by end-users executing LNK files Read More
-
PayPal Phishing Scam Uses Invoices Sent Via PayPal
PRIVACY PRIVACY Scammers are using invoices sent through PayPal.com to trick recipients into calling a number to dispute a pending charge. The missives — which come from Paypal.com and include a link at Paypal.com that displays an invoice for the supposed transaction — state that the user’s account is about to be charged hundreds of…
-
ATMZOW JS Sniffer Campaign Linked to Hancitor Malware
PRIVACY PRIVACY ATMZOW infected at least 483 websites across four continents since the beginning of 2019 Read More
-
Quarter of All Gambling Sites Hit by DDoS Attacks in June
PRIVACY PRIVACY The attacks reportedly increased in conjunction with the start of the Wimbledon tennis tournament Read More
-
USB “Rubber Ducky” Attack Tool
PRIVACY PRIVACY The USB Rubber Ducky is getting better and better. Already, previous versions of the Rubber Ducky could carry out attacks like creating a fake Windows pop-up box to harvest a user’s login credentials or causing Chrome to send all saved passwords to an attacker’s webserver. But these attacks had to be carefully crafted…
-
NIST CSF 2.0 Workshop emphasizes global appeal, metrics and assessment
PRIVACY PRIVACY The U.S. National Institute of Standards and Technology (NIST) hosted its first workshop yesterday on the Cybersecurity Framework (CSF) 2.0, an update to the CSF 1.1 released in 2018, which was itself an update to the original CSF released in 2014. Many cybersecurity professionals, and some NIST experts, consider the framework to be…