Opsec Cyber Security Archives - Page 869 of 1788

Category Archives: Security

Backdoor Found in Codecov Bash Uploader

April 21 2021 By Bruce Schneier in Security

Developers have discovered a backdoor in the Codecov bash uploader. It’s been there for four months. We don’t know who put it there.

Codecov said the breach allowed...
Read more

How to Attack Yourself Better in 2021

April 21 2021 By Syndicator in Security

Social engineering pen testing is just one step in preventing employees from falling victim to cybercriminals.

Nearly Half of All Malware Is Concealed in TLS-Encrypted Communications

April 21 2021 By Syndicator in Security

Forty-six percent of all malware uses the cryptographic protocol to evade detection, communicate with attacker-controlled servers, and to exfiltrate data, new study shows.

Attackers Heavily Targeting VPN Vulnerabilities

April 21 2021 By Syndicator in Security

Threat actors like attacking the technology because they provide a convenient entry point to enterprise networks.

When cryptography attacks – how TLS helps malware hide in plain sight

April 21 2021 By Paul Ducklin in Cryptography, Malware, Security

No IT technology feels quite as much of a double-edged sword as encryption.

Pulse Secure VPN Flaws Exploited to Target US Defense Sector

April 20 2021 By Syndicator in Security

China-linked attackers have used vulnerabilities in the Pulse Secure VPN appliance to attack US Defense Industrial Base networks.

Note to Self: Create Non-Exhaustive List of Competitors

April 20 2021 By BrianKrebs in A Little Sunshine, patreon, Security

What was the best news you heard so far this month? Mine was learning that KrebsOnSecurity is listed as a restricted competitor by Gartner Inc. [NYSE:IT] -- a $4...

Foreign Spies Target British Nationals With Fake Social Media Profiles

April 20 2021 By Syndicator in Security

British security agency MI5 has launched a new education campaign to warn potential victims of the attacks.

Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise

April 20 2021 By Daniel Pany in Alex Pennino, Homepage Carousel, Latest Blog Posts, Managed Defense, Mandiant, Security, Threat Research, vulnerabilities, Zero-day

In March 2021, Mandiant Managed Defense identified three zero-day vulnerabilities in SonicWall’s Email Security (ES) product that were being exploited in the wild. These vulnerabilities were executed...