News
-
"Tel Aviv University and IDC Herzliya Researchers Thwart Large-Scale Cyberattack Threat"Researchers at Tel Aviv University and the Interdisciplinary Center (IDC) of Herzliya say that vulnerabilities in the Domain Name System (DNS) could have been used to execute a much more massive attack than that of the infamous Mirai botnet. A study…
-
"NSA Warns About Sandworm APT Exploiting Exim Flaw"The NSA has warned in a security advisory published on Thursday that the Russian APT group Sandworm has been exploiting a critical Exim flaw (CVE-2019-10149) to compromise mail servers since August 2019. When this flaw is successfully exploited,…
-
"Vulnerability Disclosures Drop in Q1 for First Time in a Decade"An analysis recently published by Risk Based Security reveals a decrease in the number of vulnerabilities reported in the first quarter of 2020 by 20%. Although the decline in reported vulnerabilities occurred in the same quarter as the surge of remote…
-
"External Attacks on Cloud Accounts Grew 630 Percent From January to April"In a new survey by Macafee, researchers found that overall enterprise adoption of cloud services spiked by 50 percent between January and April, including manufacturing and financial services that typically rely on legacy on-premises applications and…
-
"External Threats Outpace Insider-Related Breaches in Healthcare"According to the latest Verizon Data Breach Investigations Report (DBIR), the healthcare sector faced an increase in attacks last year with external threats exceeding the number of incidents caused by insiders. Verizon's DBIR highlights findings…
-
"Qatar: 'Huge' Security Weakness in COVID-19 Contact-Tracing App"Amnesty International discovered critical vulnerabilities in Qatar's mandatory coronavirus contact-tracing app, which have now been fixed. The app is intended to help slow down the spread of COVID-19 by alerting users when they are near someone who has…
-
"Florida Tech Student Finds Privacy Flaws in Connected Security and Doorbell Cameras"Florida Tech computer science student Blake Janes discovered systematic design flaws in internet-connected doorbells and security cameras manufactured by Ring, Nest, SimpliSafe, and eight other manufacturers. Janes found that a shared account can still…
-
"A New Android bug, Strandhogg 2.0, Lets Malware Pose as Real Apps and Steal User Data"Researchers at a security firm called Promon, have discovered a new vulnerability, called Strandhogg 2.0. This vulnerability affects all devices running Android 9.0 and earlier. This vulnerability lets malware imitate legitimate apps to steal…
-
"Android Security Vulnerabilities Differ by Country, Say Researchers"According to researchers at F-Secure, Android devices manufactured by Huawei, Samsung, Xiaomi, and others are being shipped and sold with significantly different levels of on-board security in different regions. The differences in Android security…
-
"Malware Opens RDP Backdoor Into Windows Systems"Researchers at SentinelOne have discovered a new version of the Sarwent malware. Sarwent is a malware that started as a loader for other malware but has recently been updated with more functionalities. The new variant of Sarwent can open…
-
SoS Musings #37 - The Double-Edged Sword of AI and MLSoS Musings #37 - The Double-Edged Sword of AI and ML
-
Cyber Scene #44 - Tracing Tracks: So Near Yet So Far AwayCyber Scene #44 - Tracing Tracks: So Near Yet So Far Away