Crooked Bough News Round-up

— Bank of America Security Incident Affects PPP Applicants

 

at 5/29/20 2:05pm

The incident occurred when Paycheck Protection Program applications were uploaded to a test platform and accidentally shared.

[Link to media]

— Abandoned Apps May Pose Security Risk to Mobile Devices

 

at 5/29/20 12:20pm

Mobile providers don't often update users when applications are not supported by developers, security firm says.

[Link to media]

— Cisco Announces Patches to SaltStack

 

at 5/29/20 11:45am

The patches came after Cisco was notified by the Salt Open Core team that the vulnerabilities and updates were available.

[Link to media]

— Digital Distancing with Microsegmentation

 

at 5/29/20 8:00am

Physical distancing has blunted a virus's impact; the same idea can be applied to computers and networks to minimize breaches, attacks, and infections.

[Link to media]

— All Links Are Safe ... Right?

 

at 5/29/20 7:40am

Today is a perfect day for a security breach.

[Link to media]

— Zscaler Buys Edge Networks

 

at 5/29/20 7:10am

The acquisition is Zscaler's second major buy this quarter.

[Link to media]

— A Rogues' Gallery of MacOS Malware

 

at 5/28/20 5:00pm

MacOS isn't immune from malware. Being prepared means understanding the nature of the worst threats a security team is likely to see attacking Macs in the enterprise.

[Link to media]

— GitHub Supply Chain Attack Uses Octopus Scanner Malware

 

at 5/28/20 3:25pm

Octopus Scanner is a new malware used to compromise 26 open source projects in a massive GitHub supply chain attack.

[Link to media]

— Researchers ID Hacktivist Who Defaced Nearly 5,000 Websites

 

at 5/28/20 3:10pm

Opsec mistakes lead a Check Point researcher to an individual in Brazil who was behind a longtime hacking campaign.

[Link to media]

— Valak Malware Retasked to Steal Data from US, German Firms

 

at 5/28/20 2:50pm

Once considered a loader for other malware, Valak regularly conducts reconnaissance and steals information and credentials, new analysis shows.

[Link to media]

— NSA Warns Russia's 'Sandworm' Group Is Targeting Email Servers

 

at 5/28/20 12:15pm

The Russian military group has been exploiting a flaw in the Exim mail transfer agent since last August, the NSA reports.

[Link to media]

— 3 SMB Cybersecurity Myths Debunked

 

at 5/28/20 12:00pm

Small and midsize businesses are better at cyber resilience than you might think.

[Link to media]

— Vulnerability Disclosures Drop in Q1 for First Time in a Decade

 

at 5/28/20 10:20am

Even with more security issues published on Patch Tuesdays, the total number of software flaws dropped for the first three months of 2020, according to one tally.

[Link to media]

— Google, Microsoft Brands Impersonated the Most in Form-Based Attacks

 

at 5/28/20 10:15am

Attackers are preying on users' inclination to click on familiar-looking websites, but instead trick them into sharing usernames and passwords.

[Link to media]

— Data Loss Spikes Under COVID-19 Lockdowns

 

at 5/28/20 9:20am

Two new reports suggest a massive gap between how organizations have prepared their cybersecurity defenses and the reality of their efficacy.

[Link to media]

— How Elite Protectors Operationalize Security Protection

 

at 5/28/20 8:00am

There is no silver bullet for cybersecurity. It takes the right people, with the right mindset, applying the right elements of good security from the data center to the SOC.

[Link to media]

— COVID-19: Latest Security News & Commentary

 

at 5/28/20 6:40am

Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.

[Link to media]

— Netwalker Ransomware Tools Reveal Attacker Tactics and Techniques

 

at 5/27/20 6:00pm

Malware and related files show that ransomware operators don't need a cutting-edge arsenal to be effective.

[Link to media]

— Stay-at-Home Orders Coincide With Massive DNS Surge

 

at 5/27/20 3:15pm

A variety of sites saw as much as seven times the number of domain requests in late March and early April, suggesting attackers attempted massive denial-of-service attacks.

[Link to media]

— Cloud Security Architect Proves Hardest Infosec Role to Fill

 

at 5/27/20 2:15pm

Nearly 70% of businesses struggle to recruit, hire, and retain cybersecurity talent, and many link security incidents to lack of skills.

[Link to media]

— Security 101: SQL Injection

 

at 5/27/20 1:50pm

A carefully crafted attack can convince a database to reveal all its secrets. Understanding the basics of what the attack looks like and how to protect against it can go a long way toward limiting the threat.

[Link to media]

As of 5/29/20 2:20pm. Last new 5/29/20 2:20pm.