Alphabet's Chronicle Explores Code-Signing Abuse in the Wild
A new analysis highlights the prevalence of malware signed by certificate authorities and the problems with trust-based security.
Source: Dark Reading –
[...]
AuthorKelly Sheridan Staff Editor
DHS Warns of Data Theft via Chinese-Made Drones
The drones are reportedly built with parts that can compromise organizations’ data and share it on a server accessible to the Chinese government.
[...]
When Older Windows Systems Won't Die
Microsoft’s decision to patch unsupported machines for the critical CVE-2019-0708 flaw is a reminder that XP, 2003, and other older versions of Windows
[...]
Microsoft Patches Wormable Vuln in Windows 7, 2003, XP, Server 2008
Microsoft releases security updates for some out-of-support systems to fix a bug that could be weaponized as a worm if exploited.
Source:
[...]
LockerGoga, MegaCortex Ransomware Share Unlikely Traits
New form of ransomware MegaCortex shares commonalities with LockerGoga, enterprise malware recently seen in major cyberattacks.
Source: Dark Reading – Threat Intelligence
[...]
Demystifying the Dark Web: What You Need to Know
The Dark Web and Deep Web are not the same, neither is fully criminal, and more await in this guide to the Internet’s
[...]
Social Engineering Slams the C-Suite: Verizon DBIR
Criminals are also going after cloud-based email accounts, according to Verizon’s ‘2019 Data Breach Investigations Report.’
Source: Dark Reading – Threat Intelligence
[...]
The Dark Web is Smaller Than You Think
The number of live, accessible .onion sites amounts to less than 0.005% of surface web domains, researchers report.
Source: Dark Reading –
[...]
Security Top Concern as Mobile Providers Think 5G
The deployment of 5G networks will bring new use cases and revenue opportunities, mobile providers say, but security will be essential.
Source:
[...]
Security Doesn't Trust IT – and IT Doesn't Trust Security
How a rocky relationship between IT operations and cybersecurity teams can compound security risks.
Source: Dark Reading – Threat Intelligence – Security
[...]