November 2021 – Security

BrandPost: BlackMatter Ransomware Quickly Fills Void Left by Darkside, REvil

November 30, 2021 by Brand Post

Brand Post

In late July, a new Ransomware as a Service (RaaS), called BlackMatter, appeared on the scene. After the apparent retirement of previously devastating ransomware-as-a-service (RaaS) groups like Darkside and REvil, BlackMatter claims to fill the void left by these two services – adopting the best tools and techniques from each…

BrandPost: Cybersecurity Steps for the Energy and Utilities Industry

November 30, 2021 by Brand Post

Brand Post

Without a doubt, one of the most game-changing innovations is the Internet of Things (IoT). Industry analyst firm IDC expects there will be over 41 billion connected IoT devices by 2025.The exponential growth of IoT devices in the energy and utilities industry has greatly increased the need to focus on…

BrandPost: Securing IoT: Best Practices for Retailers

November 30, 2021 by Brand Post

Brand Post

We see innovation on a daily basis. Without a doubt, one of the most game-changing innovations is the Internet of Things (IoT). Industry analyst firm IDC expects there will be over 41 billion connected IoT devices by 2025.In particular, the retail sector is increasingly using IoT technology to personalize the…

BrandPost: Protecting Critical Public Infrastructure: The Role of Threat Intelligence

November 30, 2021 by Brand Post

Brand Post

It is increasingly common to hear about cyber threats to energy and utility industries – our critical infrastructure. These are malicious acts by adversaries that target data, intellectual property, or other digital assets.All too often it seems as though energy and utility companies are put in a defensive position to…

CredManifest: Azure AD Information Disclosure Leading to Privilege Escalation & Free Tool Released

November 30, 2021 by Francisco Donoso

Francisco Donoso

Summary On November 17th, 2021 Microsoft disclosed the existence of a high severity information disclosure vulnerability impacting Azure Active Directory (Azure AD) that could allowContinue reading

Thanksgiving’s biggest online shopping day was Cyber Monday, but other days were close behind

November 30, 2021 by João Tomé

João Tomé

November comes, the temperatures start to get colder for most of the planet's population (87% live in the Northern Hemisphere) and many are also starting to prepare for the festive season. That also brings significant changes in Internet traffic, most notably the online shopping kind of traffic.So, what were the…

Panasonic Suffers Data Breach After attackers access internal network

November 30, 2021 by Priyanshu Vijayvargiya

Priyanshu Vijayvargiya

Tech manufacturing giant Panasonic has confirmed that its network was accessed illegally this month during a cyberattack. Panasonic has disclosed a security breach wherein an unauthorized third party broke into its network and potentially accessed data from one of its file servers. The Japanese consumer electronics giant acknowledged the breach in a…

UK ICO to fine Clearview AI £17 million for data protection law breaches

November 30, 2021 by Michael Hill

Michael Hill

The UK Information Commissioner’s Office (ICO) has announced its provisional intent to impose a potential fine of just over £17 million (about $22.7 million USD) on facial recognition firm Clearview AI, Inc., for failing to comply with data protection laws. The announcement follows a joint investigation by the ICO and…

What Is DDI (DNS, DHCP, IPAM), And Do You Need One?

November 30, 2021 by Daniel Segun

Daniel Segun

Here, we will answer the question – what is DDI (DNS, DHCP, IPAM), and do you need one? DDI does not have a single definition. Collectively DNS-DHCP-IPAM is referred to as DDI in networking. To better understand the DDI definition, we must first understand the meaning of its three legs…

New HP MFP vulnerabilities show why you should update and isolate printers

November 30, 2021 by Lucian Constantin

Lucian Constantin

Security researchers have published details about two serious vulnerabilities that impact over 150 different HP multifunction printer models with FutureSmart firmware going back at least nine years. The attack vectors associated with the flaws and their impact serve as a reminder that printers can pose significant security risks to enterprise…

6 Strategies To Make Your Model Serving API More Robust With Testing & Analysis

November 30, 2021 by Christian Schmitz

Christian Schmitz

This post will show you 6 strategies to make your model serving API more robust with testing and analysis. Putting your API through its paces is a crucial part of ensuring it is resilient and reliable as well as purely functional. You can go about API testing and analysis in…

Introducing VirusTotal Collections

November 30, 2021November 30, 2021 by Juan Infantes

Juan Infantes

TL;DR: Threat researchers use Pastebin and similar sites to share sets of IoCs among themselves. We believe there is a more actionable and contextualized way to perform this task, enter VirusTotal Collections. Help us shape the future of IoC collections with the what’s next form.Collective knowledge is key for the…

GoDaddy WordPress data breach: A timeline

November 30, 2021 by Michael Hill

Michael Hill

Security incidents affecting WordPress have been of notable prevalence in recent years as more companies rely on the hugely popular content management system to power their websites. The latest organizations to fall foul of WordPress security vulnerabilities is domain registrar GoDaddy, which recently went public on unauthorized third-party access to…

5 tips for reducing false positive security alerts

November 30, 2021 by Jaikumar Vijayan

Jaikumar Vijayan

False positives—or alerts that incorrectly indicate a security threat is present in a specific environment—are a major problem for security operations centers (SOCs). Numerous studies have shown that SOC analysts spend an inordinate amount of time and effort chasing down alerts that suggest an imminent threat to their systems that…

Intel is Maintaining Legacy Technology for Security Research

November 30, 2021 by Bruce Schneier

Bruce Schneier

Interesting: Intel’s issue reflects a wider concern: Legacy technology can introduce cybersecurity weaknesses. Tech makers constantly improve their products to take advantage of speed and power increases, but customers don’t always upgrade at the same pace. This creates a long tail of old products that remain in widespread use, vulnerable…

1 2 3 … 31 Next »