An early end to the holidays: ‘Heartbleed of MongoDB’ is now under active exploit

You didn’t think you’d get to enjoy your time off without a major cybersecurity incident, did you? A high-severity MongoDB Server vulnerability, for which proofs of concept emerged over Christmas week, is now under active exploitation, according to the… Continue reading An early end to the holidays: ‘Heartbleed of MongoDB’ is now under active exploit

Posted in Uncategorized

Korean telco failed at femtocell security, exposed customers to snooping and fraud

One cert, in plaintext, on thousands of devices, led to what looks like years of crime South Korea’s Ministry of Science and ICT has found that local carrier Korea Telecom (KT) deployed thousands of badly secured femtocells, leading to an attack that e… Continue reading Korean telco failed at femtocell security, exposed customers to snooping and fraud

Posted in Uncategorized

From AI to analog, cybersecurity tabletop exercises look a little different this year

Practice makes perfect It’s the most wonderful time of the year … for corporate security bosses to run tabletop exercises, simulating a hypothetical cyberattack or other emergency, running through incident processes, and practicing responses to ensure … Continue reading From AI to analog, cybersecurity tabletop exercises look a little different this year

Posted in Uncategorized