New Container Security Bug – Fix Now!

Virtualization and containerization technologies allow developers, pentesters, network admins and server admins to create multiple virtual instances of a computer system, running inside the actual, physical host system.  This is an easy way to quickly deploy and manage dozens or even hundreds of systems used in a learning lab, test network, or even to run full fledged user systems on a single server.

Virtual machines (VM) are created using hypervisor products such ...

Continue Reading →
22
FEB
0

cybersecurity, Software vulnerability

,

Global Cyber Threats to the United States

In our last post we singled out North Korea as a key source of cyber-war action against the United States and other countries.  But they are not the only countries that the US is actively engaged with in cyber-space.  On January 29, 2019, Daniel Coats, Director of National Intelligence, released a report to the Senate, titled Worldwide Threat Assessment ...

Continue Reading →
20
FEB
0

Computers and Internet, cybersecurity, law and policy, surveillance

, ,

North Korean Botnet Attacked by FBI

The North Korean Cyberwar Operations group is known variously as Lazarus Group, Guardians of Peace, or Hidden Cobra. A few of their notable achievements include the 2014 attack on Sony Pictures inspired by the satirical Seth Rogan film “The Interview, ” the $81 million cyber bank heist  against Bangladesh’s central bank, and the 2017 WannaCry ransomware attack.

In June 2017, US-CERT sent a   Continue Reading →

18
FEB
0

Computers and Internet, cybersecurity, News and politics

, ,

Weekend Update

A quick Saturday digest of cybersecurity news articles from other sources.

OUCH! Ransomware Attack Via MSP Locks Customers Out of Systems

If your computer technical support is provided by an outside vendor, you need to know this.  We have warned about this problem before.

Earlier this week, an unidentified threat actor managed to launch a ransomware attack resulting in the encryption of between 1,500 to 2,000 ...

Continue Reading →
16
FEB
0

artificial intellegence, email, Internet of Things, law and policy, ransomware, robotics, Weekend Update

, ,

Cyber Attacks Against Businesses – Frequency and Methodology

Cyber attacks against businesses, regardless of size, are increasing in the number of attacks, the types of attacks, and the costs of the attacks.  Company losses include theft of cash assets, employee identity information, stolen files and proprietary information, network downtime, loss of sales, and reputation costs.  For a small privately held business, a serious breach can put them out of business.

For ...

Continue Reading →
15
FEB
0

Computers and Internet, cybersecurity

Unhappy Valentines Day – Romance Fraud

This Valentine’s Day, be careful of who you let into your heart.  Unfortunately for every love-lorn single there is a fake Romeo or dating site scammer waiting to separate them from their money.  According to the FBI, the amount of money losses to victims of romance fraud makes it the second most lucrative cyber crime, generating $211 million for the perpetrators. Only business ...

Continue Reading →
14
FEB
0

Computers and Internet, social engineering

Too Legit – The DocuSign No Malware Phishing Exploit

You or your CFO receive an email offering business capital at attractive interest rates.  The company that sent you the offer has provided an application for the loan using the legitimate document presentation platform, DocuSign.  Everything looks legit, and it is.  No fake web pages or near-miss web addresses.  But this is the latest in “no malware” phishing scams.

Filling out the form will ...

Continue Reading →
13
FEB
0

Computers and Internet, cybersecurity, Phishing, social engineering

Common Phishing Subject Lines

Phishing is still the number one tactic used by malicious actors to collect passwords and other information.  Phishing works because the attacker is able to create an email that is believable and looks realistic.  The best ones appear to come from a customer, supplier, coworker or other trusted source, and the content makes sense for your business or personal life.  The most successful way to prevent phishing from ruining your ...

Continue Reading →
11
FEB
1

Computers and Internet, cybersecurity, Phishing

Page 130 of 279 «...100110120128129130131132...»