What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2020-02-18 03:42:33 | Cynet Offers Free Threat Assessment for Mid-sized and Large Organizations (lien direct) | Visibility into an environment attack surface is the fundamental cornerstone to sound security decision making. However, the standard process of 3rd party threat assessment as practiced today is both time consuming and expensive.
Cynet changes the rules of the game with a free threat assessment offering (click here to learn more) based on more than 72 hours of data collection, enabling |
Threat | ||
|
2020-01-20 04:22:32 | Evaluating Your Security Controls? Be Sure to Ask the Right Questions (lien direct) | Testing security controls is the only way to know if they are truly defending your organization. With many different testing frameworks and tools to choose from, you have lots of options.
But what do you specifically want to know? And how are the findings relevant to the threat landscape you face at this moment?
"Decide what you want to know and then choose the best tool for the job." |
Tool Threat | ||
|
2019-12-25 08:44:16 | How Organizations Can Defend Against Advanced Persistent Threats (lien direct) | Advanced persistent threats (APTs) have emerged to be legitimate concerns for all organizations. APTs are threat actors that breach networks and infrastructures and stealthily lurk within them over extended spans of time.
They typically perform complex hacks that allow them to steal or destroy data and resources.
According to Accenture, APTs have been organizing themselves into groups that |
Threat | ||
|
2019-11-27 02:22:58 | Over 12,000 Google Users Hit by Government Hackers in 3rd Quarter of 2019 (lien direct) | As part of its active efforts to protect billions of online users, Google identified and warned over 12,000 of its users who were targeted by a government-backed hacking attempt in the third quarter of this year.
According to a report published by Google's Threat Analysis Group (TAG), more than 90 percent of the targeted users were hit with "credential phishing emails" that tried to trick |
Threat | ||
|
2019-11-15 01:32:52 | Two Arrested for Stealing $550,000 in Cryptocurrency Using Sim Swapping (lien direct) | It appears that at least the United States has started taking the threat of Sim Swapping attacks very seriously.
Starting with the country's first-ever conviction for 'SIM Swapping' this February, U.S. Department of Justice has since then announced charges against several individuals for involving in the scheme to siphon millions of dollars in cryptocurrency from victims.
In the latest |
Threat | ||
|
2019-11-14 06:01:49 | Hackers Impersonating Financial Agencies Target German, Italian, US Firms (lien direct) | Security researchers have tracked down activities of a new group of financially-motivated hackers that are targeting several businesses and organizations in Germany, Italy, and the United States in an attempt to infect them with backdoor, banking Trojan, or ransomware malware.
Though the new malware campaigns are not customized for each organization, the threat actors appear to be more |
Ransomware Malware Threat | ||
|
2019-11-07 03:58:44 | Rogue TrendMicro Employee Sold Customer Data to Tech Support Scammers (lien direct) | Do you always uncomfortable trusting companies with your data? If so, you're not alone.
While companies do much to protect themselves from external threats, insiders always pose the highest risk to a company's data.
Unfortunately, when we say companies can't eliminate insider threat completely, cybersecurity firms, who are meant to protect others, are not an exception.
Cybersecurity firm |
Threat | ||
|
2019-10-02 05:00:02 | A Look Into Continuous Efforts By Chinese Hackers to Target Foreign Governments (lien direct) | Phishing is still one of the widely used strategies by cybercriminals and espionage groups to gain an initial foothold on the targeted systems.
Though hacking someone with phishing attacks was easy a decade ago, the evolution of threat detection technologies and cyber awareness among people has slowed down the success of phishing and social engineering attacks over the years.
Since phishing |
Threat | ||
|
2019-09-30 06:06:27 | Pay What You Wish - 9 Hacking Certification Training Courses in 1 Bundle (lien direct) | The greatest threat facing most nations is no longer a standing army. It's a hacker with a computer who can launch a crippling cyber attack from thousands of miles away-potentially taking down everything from server farms to entire power grids with a few lines of code.
So it should come as no surprise that virtually every major company in both the public and private sector-as well as national |
Threat | ||
|
2019-09-24 00:48:06 | Microsoft Releases Emergency Patches for IE 0-Day and Windows Defender Flaw (lien direct) | It's not a Patch Tuesday, but Microsoft is rolling out emergency out-of-band security patches for two new vulnerabilities, one of which is a critical Internet Explorer zero-day that cyber criminals are actively exploiting in the wild.
Discovered by Clément Lecigne of Google's Threat Analysis Group and tracked as CVE-2019-1367, the IE zero-day is a remote code execution vulnerability in the |
Vulnerability Threat | ||
|
2019-09-18 03:29:53 | The Definitive RFP Templates for EDR/EPP and APT Protection (lien direct) | Advanced Persistent Threats groups were once considered a problem that concerns Fortune 100 companies only. However, the threat landscape of the recent years tells otherwise-in fact, every organization, regardless of vertical and size is at risk, whether as a direct target, supply chain or collateral damage.
The vast majority of security decision-makers acknowledge they need to address the |
Threat | ||
|
2019-09-12 02:28:40 | (Déjà vu) CISO Kit - Breach Protection in the Palm of Your Hand (lien direct) | CISOs and CIOs need to know better than anyone the security pulse of their organizations. On the other hand, they cannot be flooded with every changing detail.
Finding the right balance that enables them to clearly grasp the big picture required in making sound decisions is a task many security executives find challenging. Threat actors do not acknowledge off-hours or weekends, introducing the |
Threat | ||
|
2019-09-11 04:54:04 | Breach Protection in the Palm of Your Hand (lien direct) | CISOs and CIOs need to know better than anyone the security pulse of their organizations. On the other hand, they cannot be flooded with every changing detail.
Finding the right balance that enables them to clearly grasp the big picture required in making sound decisions is a task many security executives find challenging. Threat actors do not acknowledge off-hours or weekends, introducing |
Threat | ||
|
2019-08-12 01:25:02 | Canon DSLR Cameras Can Be Hacked With Ransomware Remotely (lien direct) | The threat of ransomware is becoming more prevalent and severe as attackers' focus has now moved beyond computers to smartphones and other Internet-connected smart devices.
In its latest research, security researchers at cybersecurity firm CheckPoint demonstrated how easy it is for hackers to remotely infect a digital DSLR camera with ransomware and hold private photos and videos hostage |
Ransomware Threat | ||
|
2019-07-03 08:54:00 | 17-Year-Old Weakness in Firefox Let HTML File Steal Other Files From Device (lien direct) | Except for phishing and scams, downloading an HTML attachment and opening it locally on your browser was never considered as a severe threat until a security researcher today demonstrated a technique that could allow attackers to steal files stored on a victim's computer.
Barak Tawily, an application security researcher, shared his findings with The Hacker News, wherein he successfully |
Threat | ||
|
2019-06-19 14:00:00 | Gain the Trust of Your Business Customers With SOC 2 Compliance (lien direct) | In today's business environment, data is what matters most. It matters to organizations that monetize it into operational insights and optimisations, and it matters the threat actors that relentlessly seek to achieve similar monetisation by compromising it.
In the very common scenario in which organisation A provides services to organization B, it's imperative for the latter to be absolutely |
Threat | ||
|
2019-06-12 07:28:00 | When Time is of the Essence – Testing Controls Against the Latest Threats Faster (lien direct) | A new threat has hit head the headlines (Robinhood anyone?), and you need to know if you're protected right now. What do you do?
Traditionally, you would have to go with one of the options below.
Option 1 – Manually check that IoCs have been updated across your security controls.
This would require checking that security controls such as your email gateway, web gateway, and endpoint |
Threat | ||
|
2019-05-21 06:46:01 | WEBINAR: How to Get Enterprise Cyber Security for your Mid-Sized Organization (lien direct) | High-quality cybersecurity posture is typically regarded as the exclusive domain of the large and heavy resourced enterprises – those who can afford a multi-product security stack and a skilled security team to operate it.
This implies a grave risk to all organizations who are not part of this group, since the modern threat landscape applies to all, regardless of size and vertical.
What is |
Threat | ||
|
2019-04-03 03:51:05 | Cynet Offers Free Threat Assessment for Mid-Sized and Large Organizations (lien direct) | Visibility into an environment attack surface is the fundamental cornerstone to sound security decision making.
However, the standard process of 3rd party threat assessment as practiced today is both time consuming and expensive.
Cynet changes the rules of the game with a free threat assessment offering based on more than 72 hours of data collection and enabling organizations to benchmark |
Threat | ★★ | |
|
2019-03-28 09:00:03 | Advanced Breach Protection Demystified – Untold Truths On Security Beyond AV (lien direct) | Doing business in today's connected world means dealing with a continually evolving threat landscape.
With potential losses due to downtime following a breach, plus valuable client and proprietary information at risk, most organizations realize they cannot afford to be complacent.
This puts extra onus on security IT teams, who are continuously left scrambling, looking for the best way to |
Threat | ||
|
2019-03-12 06:12:05 | Cynet is offering unhappy competitors\' customers a refund for the time remaining on existing contracts (lien direct) | Cynet goes head-to-head with CrowdStrike, DarkTrace, Cylance, Carbon Black & Symantec, offering their unhappy customers a refund for the time remaining on their existing contracts.
Cynet, the automated threat discovery and mitigation platform was built to address the advanced threats that AV and Firewalls cannot stop.
Today, Cynet announced that any organization currently deploying an |
Threat | ||
|
2019-03-06 01:52:05 | New Google Chrome Zero-Day Vulnerability Found Actively Exploited in the Wild (lien direct) | You must update your Google Chrome immediately to the latest version of the web browsing application.
Security researcher Clement Lecigne of Google's Threat Analysis Group discovered and reported a high severity vulnerability in Chrome late last month that could allow remote attackers to execute arbitrary code and take full control of the computers.
The vulnerability, assigned as |
Vulnerability Threat | ||
|
2019-03-05 00:13:05 | Google Launches Backstory - A New Cyber Security Tool for Businesses (lien direct) | Google's one-year-old cybersecurity venture Chronicle today announced its first commercial product, called Backstory, a cloud-based enterprise-level threat analytics platform that has been designed to help companies quickly investigate incidents, pinpoint vulnerabilities and hunt for potential threats.
Network infrastructures at most enterprises regularly generate enormous amounts of network |
Tool Threat | ||
|
2019-01-31 00:03:04 | FBI Mapping \'Joanap Malware\' Victims to Disrupt the North Korean Botnet (lien direct) | The United States Department of Justice (DoJ) announced Wednesday its effort to "map and further disrupt" a botnet tied to North Korea that has infected numerous Microsoft Windows computers across the globe over the last decade.
Dubbed Joanap, the botnet is believed to be part of "Hidden Cobra"-an Advanced Persistent Threat (APT) actors' group often known as Lazarus Group and Guardians of
|
Threat Medical | APT 38 | |
|
2018-12-19 23:35:00 | (Déjà vu) Microsoft Issues Emergency Patch For Under-Attack IE Zero Day (lien direct) | Microsoft today issued an out-of-band security update to patch a critical zero-day vulnerability in Internet Explorer (IE) Web browser that attackers are already exploiting in the wild to hack into Windows computers.
Discovered by security researcher Clement Lecigne of Google's Threat Analysis Group, the vulnerability, tracked as CVE-2018-8653, is a remote code execution (RCE) flaw in the IE
|
Hack Vulnerability Threat | ★★★★★ | |
|
2018-12-14 04:57:00 | Fake Bomb Threat Emails Demanding Bitcoins Sparked Chaos Across US, Canada (lien direct) | "Pay $20,000 worth of bitcoin, or a bomb will detonate in your building"
A massive number of businesses, schools, government offices and individuals across the US, New Zealand and Canada on Thursday received bomb threats via emails that caused nationwide chaos, forcing widespread evacuations and police response.
The bomb threat emails were apparently sent by spammers, threatening people that
|
Threat | ||
|
2018-08-15 11:12:00 | Email Phishers Using New Way to Bypass Microsoft Office 365 Protections (lien direct) | Phishing works no matter how hard a company tries to protect its customers or employees.
Security researchers have been warning of a new phishing attack that cybercriminals and email scammers are using in the wild to bypass the Advanced Threat Protection (ATP) mechanism implemented by widely used email services like Microsoft Office 365.
Microsoft Office 365 is an all-in-solution for users
|
Threat | ||
|
2018-08-09 07:20:03 | Researchers Developed Artificial Intelligence-Powered Stealthy Malware (lien direct) | Artificial Intelligence (AI) has been seen as a potential solution for automatically detecting and combating malware, and stop cyber attacks before they affect any organization.
However, the same technology can also be weaponized by threat actors to power a new generation of malware that can evade even the best cyber-security defenses and infects a computer network or launch an attack only
|
Malware Threat | ||
|
2018-07-25 04:54:05 | iPhone Hacking Campaign Using MDM Software Is Broader Than Previously Known (lien direct) | India-linked highly targeted mobile malware campaign, first unveiled two weeks ago, has been found to be part of a broader campaign targeting multiple platforms, including windows devices and possibly Android as well.
As reported in our previous article, earlier this month researchers at Talos threat intelligence unit discovered a group of Indian hackers abusing mobile device management (MDM)
|
Malware Threat | ||
|
2018-07-10 07:30:05 | Gaza Cybergang Returns With New Attacks On Palestinian Authority (lien direct) | Security researchers from Check Point Threat Intelligence Team have discovered the comeback of an APT (advanced persistent threat) surveillance group targeting institutions across the Middle East, specifically the Palestinian Authority.
The attack, dubbed "Big Bang," begins with a phishing email sent to targeted victims that includes an attachment of a self-extracting archive containing two
|
Threat |
To see everything:
Our RSS (filtrered)
