SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2019-12-04 17:00:00	Explained: What is containerization? (lien direct)	Containerization is gaining traction as a method to improve consistency, portability, and scalability without the investments required for virtualization. But is it secure? Categories: Explained Tags: cloud containerization containers instances management security virtualization (Read more...)
	2019-12-04 16:00:00	There\'s an app for that: web skimmers found on PaaS Heroku (lien direct)	Read more...)
	2019-12-03 18:06:13	New version of IcedID Trojan uses steganographic payloads (lien direct)	We take a deep dive into the IcedID Trojan, describing the new payloads of this advanced malware. Categories: Threat analysis Tags: backdoor banking Trojan banking Trojans credential stealing downloader hooking browsers IcedID Trojan malware malware analysis man-in-the-browser attacks passwords stealer stealer functionality stealing passwords stealthy malware trickbot Trojans (Read more...)
	2019-12-02 16:23:55	A week in security (November 25 – December 1) (lien direct)	A roundup of cybersecurity news from November 25 – December 1, including the concept of "data as property", the increasing creativity of sextortion scammers, and the security risks of switching to "healthcare for all" policies in the US. Categories: A week in security Tags: a week in security ad blockers awis data as property dexphot energy sector security issues iphone phishing iphone phishing scam nursing home ransomware sextortion scammers trickbot universal healthcare security venezuela cybercrime (Read more...)
	2019-11-26 20:30:10	Would \'Medicare for All\' help secure health data? (lien direct)	Beyond the usual arguments on this subject, we wanted to ask the question: Are there any security risks we need to be worried about if the United States were to switch to 'Healthcare for All' policies? Categories: Government Privacy Security world Tags: adam kujawa AMCA American Medical Collection Agency Blue Cross Blue Shield breaches CMS cybercrime Department of Health and Human Services Dominion National Electronic Frontier Foundation GAO Government Accountability Office healthcare healthcare.gov Heatlhcare HHS insurance interoperability Malwarebytes malwarebytes labs Medicare for all Online Privacy Act of 2019 OS Inc Prema Blue Cross Solara Medical Supplies Spectrum Health Lakeland third-party services Wolverine Solutions Group (Read more...)
	2019-11-26 17:09:34	Sextortion scammers getting creative (lien direct)	We’ve covered sextortion before, focusing in on how the core of the threat is an exercise in trust. The threat actor behind the campaign will use whatever information available on the target that causes them to trust that the threat actor does indeed have incriminating information on them. (They don’t.) But as public awareness of... Categories: Cybercrime Social engineering Tags: bitcoin scam sextortion scams spam (Read more...)	Threat
	2019-11-25 16:00:00	“Data as property” promises fix for privacy problems, but could deepen inequality (lien direct)	Data property supporters in the US argue that, through data payments, Americans could rebalance the relationship they have with the technology industry, giving them more control over their data privacy and putting some extra money in their pockets. But the cost to privacy, some say, is too high. Categories: Privacy Tags: Andrew Yang Dashboard Act data as property data as property rights data property data property model data property rights Jaron Lanier oregon pay-for-privacy Senate Bill 703 Who Owns the World (Read more...)
	2019-11-25 12:55:31	A week in security (November 18 – 24) (lien direct)	A roundup of cybersecurity news from November 18 - 24, including Coalition against stalkerware, exploit kits, ransomware, data leaks, and juice jacking. Categories: A week in security Tags: Coalition Against Stalkerware data leaks deepfake Disney+exploit kits IoT juice jacking LinkedIn ransomware stalkerware web skimmer (Read more...)
	2019-11-22 16:27:47	IoT bills and guidelines: a global response (lien direct)	IoT laws and guidelines abound, as we take a look what's happening around the world in the name of securing Internet-connected devices. Categories: IoT Privacy Tags: Australia California internet Internet of Things IoT iot laws iot legislation passwords technology laws technology legislation uk united states us (Read more...)
	2019-11-21 17:30:00	Web skimmer phishes credit card data via rogue payment service platform (lien direct)	Threat actors combine phishing with a web skimmer to create a devious scheme designed to lift credit card data from unaware shoppers. Categories: Web threats Tags: holiday shopping Magecart payment gateway service payment service platform payment service platforms phishing phishing page PSPs standard skimmer web skimmer web skimmers web skimming (Read more...)
	2019-11-21 16:00:00	Explained: juice jacking (lien direct)	Juice jacking is a type of cyberattack that uses a USB charging port to steal data or infect phones with malware. Learn how it works and ways to protect against it. Categories: Explained Tags: charge adaptor data transfer juice jacking powerbank usb condom usb outlet (Read more...)
	2019-11-20 18:11:36	Disney+ security and service issues: Here\'s what we know so far (lien direct)	Read more...)
	2019-11-20 16:00:00	Deepfakes and LinkedIn: malign interference campaigns (lien direct)	Don't discount deepfakes just yet. We may not be fooled by phony Mark Zuckerberg anymore, but the discovery of a fake LinkedIn profile sporting a deepfake avatar shows how social engineering can deceive through the mundane. Categories: Social engineering Tags: AI computer generated deepfakes fakes katie jones LinkedIn munira Social Engineering stratcom (Read more...)
	2019-11-19 18:08:20	Exploit kits: fall 2019 review (lien direct)	With even more exploit kits in town, the drive-by download landscape shows continued activity in fall 2019. Categories: Exploits and vulnerabilities Tags: Capesand EK exploit kit Fallout grandsoft KaiXin Magnitude Purple Fox RIG Spelevo Underminer (Read more...)
	2019-11-19 13:00:00	Malwarebytes teams up with security vendors and advocacy groups to launch Coalition Against Stalkerware (lien direct)	Today, Malwarebytes is announcing its participation in a joint effort to stop invasive digital surveillance: the Coalition Against Stalkerware. Categories: Malwarebytes news Tags: Coalition Against Stalkerware EFF Electronic Frontier Foundation European Network for the Work with Perpetrators of Domestic Violence G Data kaspersky Malwarebytes monitor monitoring app monitoring applications monitoring apps National Network to End Domestic Violence NNEDV Operation Safe Escape stalkerware WEISSER Ring (Read more...)
	2019-11-18 16:43:14	A week in security (November 11 – 17) (lien direct)	A roundup of cybersecurity news from November 11 – 17, including Facebook scams, the importance of securing food infrastructure, and our latest CTNT report. Categories: A week in security Tags: CTNT cybercrime tactics & techniques cybercrime tactics and techniques cybersecurity infrastructure Orcus RAT password Proofpoint security Trojans (Read more...)
	2019-11-18 15:47:58	Stalkerware\'s legal enforcement problem (lien direct)	Read more...)
	2019-11-14 19:51:58	Stealthy new Android malware poses as ad blocker, serves up ads instead (lien direct)	Since its discovery less than a month ago, a stealthy new Android malware has already been detected on over 500 devices, and it's on the rise. Learn how this clever threat pretends to be an ad blocker and then hides itself on mobile devices, all while serving up tons of ads. Categories: Android Tags: ads blocker Android android malware android trojan Android/Trojan.FakeAdsBlock Anti-Malware fake ad blocker FakeAdsBlock mobile malware stealth mobile malware trojan Trojans (Read more...)	Malware Threat
	2019-11-13 13:00:00	Labs report finds cyberthreats against healthcare increasing while security circles the drain (lien direct)	In this special edition of our quarterly CTNT report, we focus on the top attack methods and threats plaguing the healthcare industry over the last year, plus highlight recurring security challenges and reasons why cybercriminals target patient data. Categories: Reports Tags: APIs biotech EHR electronic health record emotet health apps Health Insurance Portability and Accessibility health records healthcare healthcare cybersecurity healthcare security HIPAA medical device medical device threat medical management apps phishing trickbot trojan malware (Read more...)
	2019-11-12 20:06:39	Vital infrastructure: securing our food and agriculture (lien direct)	Food and agriculture is one of the biggest verticals and one that reaches almost everyone of us. So why do we never hear about cybersecurity in this sector? We need to talk! Categories: Vital infrastructure Tags: agriculture food IoT precision agriculture supply chain vital infrastructure (Read more...)
	2019-11-11 18:27:46	Facebook scams: Bad ads, bogus grants, and fake tickets lurk on social media giant (lien direct)	Despite the company's efforts to clamp down on bad ads and bogus accounts, Facebook scams continue to run rampant. We highlight a few popular examples. Categories: Scams Tags: advertising reporting tool cloned accounts concert tickets scams facebook facebook bad ads facebook scams grant lottery messenger grant scams rogue ad campaigns scam social media social media scams tickets (Read more...)
	2019-11-11 16:38:19	A week in security (November 4 – November 10) (lien direct)	A roundup of important security news from the week of November 4–10, including the release of Malwarebytes 4.0, vendor email compromise, fake news, robocalls, and more. Categories: A week in security Tags: awis cyber facebook fake news hacking Mobile round up social media twitter week in security (Read more...)
	2019-11-07 21:49:16	Not us, YOU: vendor email compromise explained (lien direct)	Vendor email compromise (VEC) is a new cybersecurity term for a familiar practice, taken to the thousandth degree. Learn the similarities with business email compromise and how your organization can protect against them both. Categories: Business Tags: account takeover ACID Agari Agari Cyber Intelligence Division ATO bec business cyberattacks Business Email Compromise business threats Nigerian scammer phishing Silent Starling Social Engineering VEC vendor email compromise (Read more...)
	2019-11-06 18:52:11	Here are the most popular robocall scams and how to avoid them (lien direct)	We dip back into robocall scams, exploring some of the most popular tricks and tactics used to part people from their money and personal information. Categories: Scams Tags: banks chinese robocalls chinese scams chinese student scams fake kidnapping scams Federal Trade Commission FTC immigration IRS phones robocall robocall scams robocalls scam social security tax visas (Read more...)
	2019-11-06 16:00:00	ACCESS Act might improve data privacy through interoperability (lien direct)	Data privacy is back in Congressional lawmakers' sights, as proposed legislation called the ACCESS Act focuses not on data collection, storage, and selling, but on the idea that Americans should be able to easily pack up their data and take it to a competing service. But will this actually protect privacy? Categories: Privacy Tags: ACCESS Act Apple Pages Big Tech Center for Democracy and Technology competition congress data interoperability data portability Data privacy data privacy laws data privacy legislation Ello European Union facebook Facebook Messenger gdpr General Data Protection Regulation Google google docs Instagram interoperability LinkedIn Mark Zuckerberg Mastodon messenger microsoft word portability Senate The ACCESS Act twitter US Congress US data privacy laws US data privacy legislation user privacy whatsapp (
	2019-11-05 08:01:00	Announcing Malwarebytes 4.0: smarter, faster, and lighter (lien direct)	Malwarebytes 4.0 not only sports a whole new look, but packs cutting-edge detection methods into a lightweight, lightning-fast program. Categories: Malwarebytes news Tags: introduction katana Malwarebytes 4.0 Malwarebytes for Windows (Read more...)
	2019-11-04 16:37:57	A week in security (October 28 – November 3) (lien direct)	A roundup of the latest cybersecurity news for the week of October 28 – November 3, including cyberattacks against SMBs, the Internet's 50th birthday, stalkerware, donation scams, and more. Categories: A week in security Tags: Adobe Creative Cloud advanced persistent threats American Cancer Society Android APT blogger cybersecurity challenges data breach disaster donation scam emoji app esports Fancy Bear fraud FTC Gafgyt internet journalists MaaS Magecart Malware-as-a-Service MessageTap Nuclear Power Corp of India Raccoon Retina-X sextortion SMB stalkerware US Federal Trade Commission wordpress (Read more...)		APT 28
	2019-11-01 20:26:48	Cybersecurity for journalists: How to defeat threat actors and defend freedom of the press (lien direct)	When it comes to cybersecurity, journalists need to protect themselves, their sources, and the freedom of the press. Which methods should they use? Categories: How-tos Tags: communication data eavesdropping encrypted journalists privacy security tracking (Read more...)	Threat
	2019-10-31 21:41:35	SMBs lack resources to defend against cyberattacks, plus pay more in the aftermath (lien direct)	We take a look at the top challenges and threats to SMBs today, and recommend ways they can easily shore up their defenses. Categories: Business Tags: cyberattacks malware medium businesses PricewaterhouseCoopers ransomware small businesses SMB social networks (Read more...)
	2019-10-30 20:36:21	Help prevent disaster donation scams from causing more misery (lien direct)	Scammers will stop at nothing-not even a tragic natural disaster-for a chance to cash in. We offer some helpful tips to avoid disaster donation scams. Categories: Social engineering Tags: 419 419 scams charity cold call scams cold calls disaster donation scams natural disaster natural disaster scam natural disasters phish phishing red cross scammers scamming scams Social Engineering social engineering attacks (Read more...)
	2019-10-29 15:56:37	Stalkerware developer dealt new blow by FTC (lien direct)	A new government front has emerged against stalkerware-the US Federal Trade Commission. Following enforcement against Retina-X and its founder, what's next? Categories: Stalkerware Tags: Capital One consent agreement consent order data breach data breaches Equifax Federal Trade Commission FTC FTC Bureau of Consumer Protection Marriott MobileSpy Motherboard national domestic violence hotline National Network to End Domestic Violence PhoneSheriff Retina-X Retina-X Studios stalkerware StealthGenie TeenSafe Uber US Federal Trade Commission Vice (Read more...)		Equifax Uber
	2019-10-29 15:00:00	As Internet turns 50, more risks and possibilities emerge (lien direct)	The world as we know it changed on October 29, 1969, the day the Internet was born. 50 years later, it's both ubiquitous and full of potential-and risks. Categories: Awareness Tags: arpanet dns domain domains history of the internet internet internet dangers internet infrastructure internet safety IP address network networks online threats world wide web (Read more...)
	2019-10-28 16:05:10	A week in security (October 21 – 27) (lien direct)	A look at the cybersecurity news from October 21 - 27 including Magecart, robocalls, doxing, stalkerware, ransomware, breaches, and much more. Categories: Week in security Tags: avast ccleaner doxing edps Magecart NordVPN privacy protection robocalls sql server stalkerware (Read more...)		CCleaner
	2019-10-25 15:37:31	How to protect yourself from doxing (lien direct)	Doxing, or collecting and spreading private information about a user online, is a form of cyber harassment, stalking, and even a potential threat to physical safety. Here's what you can do to protect yourself against it. Categories: How-tos Tags: dox doxer doxing IP address mobile VPNs online privacy password manager personal data personally identifiable information privacy Social Engineering social media vpn VPNs WHOIS (Read more...)	Threat
	2019-10-23 18:43:07	Growing rate of robocalls threatens user privacy (lien direct)	Robocalls aren't just a nuisance-they're a threat to personal data and privacy. And they're on the rise. Learn which new tactics scammers are using and how to protect against them. Categories: Privacy Tags: Data privacy do not call registry FCC FTC high-risk calls nuisance calls privacy robocall robocall scam robocalling robocalls scam calls scammers TCPA user privacy (Read more...)	Threat
	2019-10-22 15:00:00	The forgotten domain: Exploring a link between Magecart Group 5 and the Carbanak APT (lien direct)	Bread crumbs left behind open up a possible connection between Magecart Group 5 and Carbanak. Categories: Threat analysis Tags: advanced persistent threats APTs attribution carbanak cybercriminal groups dridex Group5 Magecart malicious domains malicious websites skimmer (Read more...)
	2019-10-21 15:45:45	A week in security (October 14 – 20) (lien direct)	Cybersecurity news for October 14 – 20, including the future of the password, the lingering threat of ransomware, and new security features from Instagram. Categories: A week in security Tags: amazon Dark Web domestic abuse domestic abuse survivor domestic abuse survivors domestic violence facebook facial recognition Instagram jackpot jackpotting kindle Mark Zuckerberg national cybersecurity awareness month National domestic violence awareness month Oracle password passwords phish phishing phishing scam ransomware tor Tor browser US Customs and Border Enforcement vpn vulnerabilities vulnerability (Read more...)	Threat
	2019-10-18 16:36:36	Pulse VPN patched their vulnerability, but businesses are trailing behind (lien direct)	After a vulnerability in a popular business VPN solutions was discussed at length and an easy to use exploit is availbale, organizations still fail to apply the patch. What's up? Categories: Business Tags: cybercriminals exploit exploit kits exploits patch patching pulse vpn vulnerabilities vulnerability (Read more...)	Vulnerability		★★★★
	2019-10-17 17:30:04	Why all organizations must better protect sensitive data (lien direct)	The truth is that companies, businesses, and organizations have an obligation to the data that belongs to their employees, users, and customers. For some organizations, that obligation is a matter of real, physical safety. Categories: Business Tags: cybersecurity cybersecurity awareness data security device security domestic abuse domestic abuse survivor domestic abuse survivors domestic violence end-to-end encryption gps location history location tracking national cybersecurity awareness month National domestic violence awareness month National Network to End Domestic Violence NNEDV passcode password manager remote wiping secure messaging single sign-on sso stalkerware (Read more...)
	2019-10-16 20:17:19	When can we get rid of passwords for good? (lien direct)	Passwords are a burden and security risk, especially when used as a single authentication method. Can we get rid of passwords once and for all? We list alternative authentication methods and discuss their pros and cons. Categories: Awareness Tags: 2fa authentication mfa passwords (Read more...)
	2019-10-15 15:51:50	Instagram clamps down on fake messages with anti-phishing tool (lien direct)	We take a look at a new anti-phishing feature Instagram hopes will cut down on imitation messages and other social engineering attempts. Categories: Social engineering Tags: anti-phishing anti-phishing tool email emails from instagram Instagram mail malicious email malspam phishing phishing scams safety scams Social Engineering social engineering attacks social media scams (Read more...)	Tool
	2019-10-14 16:00:00	Europol: Ransomware remains top threat in IOCTA report (lien direct)	The European Union Agency for Law Enforcement Cooperation, or Europol, just released its annual Internet Organized Crime Threat Assessment (IOCTA) report. We highlight their key findings and remind readers how to better protect themselves. Categories: Awareness Tags: bec Business Email Compromise child sexual exploitation cse ddos europol fraud internet organized crime threat assessment iocta phishing ransomware spear phishing (Read more...)	Ransomware Threat
	2019-10-14 15:30:38	A week in security (October 7 – 13) (lien direct)	A look at the cybersecurity news from October 7 – 13, including updates on war shipping, managed service providers, and stalkerware. Categories: A week in security Tags: amazon body cams bots chrome cybersecurity facial recognition GitHub Google ice insurance insurance cybersecurity managed service providers multi-factor authentication national cybersecurity awareness month National domestic violence awareness month NCSAM police body cams security stalkerware twitter US Immigration and Customs Enforcement war shipping (Read more...)
	2019-10-11 18:04:49	Securing the managed service provider (MSP) (lien direct)	Managed service providers (MSPs) have become the target of attacks, as lack of aggressive security posturing has left them-and the high-value data of their clients-vulnerable. Learn how MSPs can secure against a rising tide of threats. Categories: Business Tags: advanced persistent threats APT APT attacks APTs enterprise security managed service providers MSP MSP security MSPs ransomware ransomware attacks security Sodinokibi sodinokibi ransomware third-party services (Read more...)
	2019-10-10 15:00:00	Cyber insurance: here to stay, whether we like it or not (lien direct)	We take a look at the many reasons people and businesses make use of cyber insurance, and ask if it's as bad as (some) make it out to be. Categories: Ransomware Tags: backups claims cyber insurance cybersecurity policy cybersecurity training first party insurance malware ransomware ransomware insurance third party threat actors threats (Read more...)
	2019-10-09 15:00:00	How to protect against stalkerware, a murky but dangerous mobile threat (lien direct)	Stalkerware has capabilities as dangerous as nation-state malware, but is often marketed as legitimate. So how do you protect against stalkerware when it's not always clear it's a threat? Categories: Stalkerware Tags: domestic abuse domestic violence monitoring monitoring applications monitoring apps national cyber security awareness month national cybersecurity awareness month NCSAM parental monitoring applications parental monitoring apps stalkerware trackers tracking applications tracking apps (Read more...)	Threat
	2019-10-08 19:15:46	Explained: war shipping (lien direct)	War shipping is a tactic already in use by Red teams, and is a growing opportunity for cybercriminals to compromise business networks. Learn how war shipping works and how to protect your organization from it. Categories: Explained Tags: fluxion kismet raspberry pi war driving war shipping (Read more...)
	2019-10-07 15:43:53	A week in security (September 30 – October 6) (lien direct)	A roundup of the latest cybersecurity news for the week of September 30 – October 6, including National Cybersecurity Awareness Month, Magecart, and more. Categories: A week in security Tags: Adwind RAT APT Cobalt consumer behavior study DaaS disinformation-as-a-service domestic violence awareness month GhostCat-3PC Google Alert HYAS Insikt Group Magecart Group 4 Microsoft Office microsoft word National Cyber Security Centre national cybersecurity awareness month NCSAM NCSC ODT OpenDocument Text ransomware robocall scams in ads security orchestration Security Research Labs simjacking SMS-based attacks SRLabs stalkerware The Media Trust VPN vulnerabilities (Read more...)
	2019-10-03 15:00:00	Magecart Group 4: A link with Cobalt Group? (lien direct)	Malwarebytes threat intel partnered with security firm HYAS to connect the dots between Magecart Group 4 and the advanced threat group Cobalt. Categories: Threat analysis Tags: carbanak colbalt group credit cards data theft ecommerce FIN7 group 4 HYAS JavaScript Magecart skimmers threat actor threat actor group threat actors (Read more...)	Threat
	2019-10-02 19:20:10	Explained: security orchestration (lien direct)	Security orchestration is a regulator that makes sure security solutions, often from different vendors, work well together to automate response and keep organizations safe. Categories: Explained Tags: automated threat response Incident Response incident response protocols orchestration security security orchestration siem soar (Read more...)	Threat

Last update at: 2024-04-20 09:08:17
See our sources.

To see everything: Our RSS (filtrered)