Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

 Famous cryptographer’s tombstone cryptogram decrypted

A paper at Schmoocon DC over the weekend revealed a delightful cryptogram on William and Elizebeth Friedmans’ tombstone.  This is a fun story and will introduce you to the Bacon cypher.

Cryptocurrency as the lure, an ISO as the attachment – why not open it?

Phishers are using the hot topic ...

Continue Reading →
27
JAN
0

malware, Phishing, ransomware, social engineering, Weekend Update

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

Malware Displaying Porn Ads Discovered in Game Apps on Google Play

Google removed 60 games that contained code to display porn pop-ups and other malicious activities.  Click through to see list of bad apps.  If you installed any of them, you will need to remove these yourself.

Visa joins other major ...

Continue Reading →
20
JAN
0

Android, authentication, Facebook, malware, Phishing, smartphones, social engineering, Weekend Update

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

 Top 9 Free Phishing Simulators

Looking to run a phishing attack against your team?  Here’s a article from Infosec institute on the top 9 free phishing simulation products.

Your Nigerian Prince is a 67 year old from Louisiana

Sure looks like a prince to me.  Like Prince ...

Continue Reading →
13
JAN
0

compliance, Phishing, Security, Software vulnerability, training, Weekend Update

, ,

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

National Tax Security Awareness Week: IRS Helps Taxpayers Protect Against Cyber Criminals

11/28/2017 11:10 PM EST  Original release date: November 28, 2017

As part of National Tax Security Awareness Week—November 27 to December 1—the Internal Revenue Service (IRS) is releasing daily security tips to help taxpayers protect their data and identities against tax-related identity theft.

US-CERT encourages taxpayers to visit ...

Continue Reading →
2
DEC
0

Apple, Computers and Internet, cybersecurity, Identity Theft, Phishing, Security, Software vulnerability, Weekend Update

Google Offers Advanced Protection Program for High Risk Individuals

If you are a high risk or high net worth user of Google’s popular Gmail platform, Google Drive, or other Google services such as YouTube or Google Analytics, Google has come up with an advanced security program for you.

Continue Reading →

24
NOV
0

Android, Apple, authentication, Computers and Internet, cybersecurity, encryption, Facebook, Identity Theft, law and policy, passwords, Phishing, ransomware, Security, smartphones, social engineering, Spyware, wireless

Details on New Email Exploit – No Attachment Required

People often ask me if it is dangerous to simply open an email, if it is possible to get a malware inflection just by reading an email.  My answer has been a qualified “not at this time.”  Unfortunately, this is no longer true.  It is possible to get a malware installation from the new DDE (Dynamic Data Exchange) exploits reveal by Sophos Labs on October 13 2017.  This can be accomplished without an attachment or link if the email is ...

Continue Reading →
6
NOV
0

Computers and Internet, cybersecurity, malware, Phishing, Security, social engineering, Software vulnerability, training, Trojan

Dragonfly Wants To Punch Our Lights Out? Round Four

Over the last four posts, we have focused on the US-CERT alert, but cybersecurity firm Symantec has actually been working this case since 2011.  Their report on Dragonfly can be found on their website.  While they are cautous when providing attribution, reading between the lines indicates that Dragonfly is probably a Russian based group, possibly working on ...

Continue Reading →
1
NOV
1

authentication, Computers and Internet, cybersecurity, encryption, passwords, Phishing, social engineering, training

Dragonfly Wants To Punch Our Lights Out? Round Three

Is the U.S. energy sector under attack? The ambitious and sophisticated exploits like this one are usually the work of a nation-state.  Who wants to turn off the lights?  Last Wednesday we took a look at the US-CERT alert warning about the ongoing cyber-attack against the U.S. electric grid, and on Friday we took a look at many of the ...

Continue Reading →
30
OCT
0

authentication, Computers and Internet, cybersecurity, passwords, Phishing, Security, social engineering

Dragonfly Wants To Punch Our Lights Out? Round Two

Somebody wants to punch our lights out – literally turn off the electric power grid. Who would want to do this?  Russia?  North Korea?  Cybersecurity firm Symantec has attributed this attack to a group they have identified as the Dragonfly Group, who may have been responsible for the attack on the Ukrainian electric grid in 2015 and ...

Continue Reading →
27
OCT
0

authentication, Computers and Internet, cybersecurity, passwords, Phishing, Security, social engineering

Page 29 of 34 «...10202728293031...»