-
A formula for measuring real-world email security efficacy
PRIVACY PRIVACY The skeptic in my head has been saying for years, “How can I measure security efficacy in the real world?” Here’s how. First, it is important to know that efficacy is measured by calculating the “proportionate reduction in risk.” In the case of COVID-19 vaccines, for example, that occurs when assessing the outcome…
-
How to choose the best VPN for security and privacy
PRIVACY PRIVACY Enterprise choices for virtual private networks (VPNs) used to be so simple. You had to choose between two protocols and a small number of suppliers. Those days are gone. Thanks to the pandemic, we have more remote workers than ever, and they need more sophisticated protection. And as the war in Ukraine continues,…
-
Google: Record Year for Zero Days in 2021
PRIVACY PRIVACY Figures were elevated due to more detections and disclosures Read More
-
Five Eyes Agencies Issue Detailed Russian Cyber-Threat Warning
PRIVACY PRIVACY Alert lists cybercrime and state-backed groups’ TTPs Read More
-
Vicarius releases free Nmap scanning tool
PRIVACY PRIVACY Nmap is a popular and versatile tool for port scanning, network discovery, and security auditing, but its scan results can be complex to interpret. Vulnerability remediation platform maker Vicarius wants to change that. It began offering Wednesday a free tool—Nmap Scan Analysis—that security professionals, IT administrators and pentesters can use to get a…
-
Cyber-Attackers Hit Sunwing Airlines
PRIVACY PRIVACY Thousands of passengers of Canadian low-cost airline face delays after third-party system was hacked Read More
-
Oracle April 2022 Critical Patch Update Addresses 221 CVEs
PRIVACY PRIVACY Oracle addresses 221 CVEs in its second quarterly update of 2022 with 520 patches, including 27 critical updates. Background On April 19, Oracle released its Critical Patch Update (CPU) for April 2022, the second quarterly update of the year. This CPU contains fixes for 221 CVEs in 520 security updates across 31 Oracle…
-
US Government: North Korean Threat Actors Are Targeting Cryptocurrency Organizations
PRIVACY PRIVACY Joint advisory reveals Lazarus APT is targeting cryptocurrency organizations using trojanized applications Read More
-
Clever Cryptocurrency Theft
PRIVACY PRIVACY Beanstalk Farms is a decentralized finance project that has a majority stake governance system: basically people have proportiona votes based on the amount of currency they own. A clever hacker used a “flash loan” feature of another decentralized finance project to borrow enough of the currency to give himself a controlling stake, and…
-
Apple iCloud account attack results in man losing $650,000 from his cryptocurrency wallet
PRIVACY PRIVACY Cryptocurrency wallet maker MetaMask has warned its 21 million monthly users to be wary of Apple iCloud backing up their app’s data by default, after attackers successfully stole $650,000 of funds and NFTs. Read more in my article on the Hot for Security blog. Read More