News
-
"Web Application Attacks Increases 8x in H1 2020"According to a report from the cloud security provider CDNetworks, the number of Distributed Denial-of-Service (DDoS), web application, and botnet attacks increased significantly in the first half of 2020 compared to that of 2019. The "State of the Web…
-
"Automation to Shape Cybersecurity Activities in 2021"WatchGuard predicts that automation will shape cybersecurity attack and defense activities in 2021. According to the global leader in network security and intelligence, manual techniques will be replaced by automation tools to launch spear-phishing…
-
"Up to 350,000 Spotify Accounts Hacked in Credential Stuffing Attacks"Researchers at vpnMetro have recently found an unsecured internet-facing database containing over 380 million individual records, including login credentials leveraged to break into 300,000 to 350,000 Spotify accounts. The exposed records were stored on…
-
"85% of Cyber Espionage Is State-Affiliated, Only 4% Tied To Organized Crime"Verizon's 2020 Cyber Espionage Report pulls information from other annual reports, including seven years of the Verizon Data Breach Investigations Report (DBIR) and fourteen years of research from the Verizon Threat Research Advisory Center (VTRAC).…
-
"Baltimore County Schools Forced to Cancel Classes Following Ransomware Attack"A ransomware attack disabled the Baltimore County Public School system's entire network. The attack occurred on the network Tuesday night. The form of ransomware used was not disclosed, but some researchers believe it is Ryuk ransomware.…
-
"FBI Warns of Spoofed FBI-Related Domains"The Federal Bureau of Investigation (FBI) has issued an alert to the public about the registration of domains designed to spoof legitimate FBI-related websites. The agency also warns of the use of spoofed email accounts to trick victims into revealing…
-
"Around 18,000 Fraudulent Sites Are Created Daily"Researchers at Bolster have discovered that in Q2 of 2020, there was an alarming, rapid increase of new phishing and fraudulent sites being created. The researchers detected 1.7 million phishing and scam websites, which is a 13.3% increase from Q1…
-
"Security Researchers Sound Alarm on Smart Doorbells"Researchers from the security company NCC Group and the UK consumer organization Which? analyzed 11 video doorbells sold on Amazon and eBay and discovered high-risk vulnerabilities in all of the devices. One of the vulnerabilities shared among them was…
-
"Organizations Should Use Psychology to Promote Secure Behavior Among Staff"The Information Security Forum (ISF) encourages organizations to improve employees' security behavior through the use of psychology. The group's report titled Human-Centered Security: Positively Influencing Security Behavior guides organizations on the…
-
"Baidu Apps in Google Play Leak Sensitive Data"Researchers at Palo Alto Unit 42 discovered that multiple Android mobile apps found in Google Play, including Baidu Search Box and Baidu Maps, leak data that could be used to track users, even if they switch devices. The apps in question expose a range…
-
SoS Musings #43 - Crowdsourcing Security with Bug Bounty ProgramsSoS Musings #43 - Crowdsourcing Security with Bug Bounty Programs
-
Cybersecurity Snapshots #12 - Open Source Code: Is It Secure?Cybersecurity Snapshots #12 - Open Source Code: Is It Secure?