Collaborate Disseminate
Vulnerability Allows a Second Factor for One Account to be Used for All Accounts in an Organization
read more
Continue reading Vulnerability Could Allow Insider to Bypass CEO’s Multi-Factor Authentication
The UK Metropolitan Police Service — the Met, the UK’s largest police force and one of the largest in the world — has introduced a new portable fingerprint scanner. This is not the first portable scanner used by the Met, but differs from the earlier … Continue reading UK Police Deploy Homemade Mobile Fingerprint Scanners
Microsoft’s Cybersecurity Policy Framework Has Good Intentions, But it is Difficult to See What It Actually Brings to the Table
read more
IBM Researchers Describe “DeepLocker” as a Stealthy, Evasive, Targeted Attack Methodology in a Class of Its Own
read more
Continue reading IBM Describes AI-powered Malware That Can Hide Inside Benign Applications
The Asian dark web is not well known. Most people just think of Russia when thinking about underground hacking forums. To gain a better understanding of Asian onion sites and black markets, researchers from IntSights embarked on a six-month long inves… Continue reading A Guided Tour of the Asian Dark Web
Companies Should Not Dismiss a Bit of Grey Hatting by Staff as Just a Form of Letting Off Steam
read more
Continue reading Enterprises: Someone on Your Security Team is Likely a Grey Hat Hacker
A security firm established a sophisticated honeypot masquerading as a power transmission substation for a major electricity provider. The purpose was to attract attackers and analyze how they operate against the energy sector of the critical infrastru… Continue reading Honeypot Highlights Danger to ICS Systems From Criminal Hackers
Clarkson PLC (Clarksons), a global shipping services firm, this week provided an update to the breach it suffered between May and November 2017. Little further on the nature of the breach is revealed, other than the extent of the customer personal info… Continue reading Global Shipping Firm Clarksons Provides Update on 2017 Breach
Popular Community Site Reddit Breached Through Continued Use of NIST-Deprecated SMS Two Factor Authentication (2FA)
read more
Continue reading Attackers Circumvent Two Factor Authentication Protections to Hack Reddit
Email continues to be the starting point for the majority of all security breaches. The 2018 Verizon Data Breaches Investigation Report (DBIR) says that email is the attack vector in 96% of breaches. But a new study suggests that despite these figures,… Continue reading The Disconnect Between Understanding Email Threats and Preventing Them