NSA Offers Guidance on Mitigating Cloud Flaws
A new document separates cloud vulnerabilities into four classes and offers mitigations to help businesses protect cloud resources. ——– Free High Security […]
Deconstructing Web Cache Deception Attacks: They’re Bad; Now What?
Expect cache attacks to get worse before they get better. The problem is that we don’t yet have a good solution. ——– […]
Severe Vulnerabilities Discovered in GE Medical Devices
CISA has released an advisory for six high-severity CVEs for GE Carescape patient monitors, Apex Pro, and Clinical Information Center systems. ——– […]
Ryuk Ransomware Hit Multiple Oil & Gas Facilities, ICS Security Expert Says
Attackers ‘weaponized’ Active Directory to spread the ransomware. ——– Free High Security Email from Sigma
Weathering the Privacy Storm from GDPR to CCPA & PDPA
A general approach to privacy, no matter the regulation, is the only way companies can avoid a data protection disaster in 2020 […]
To Avoid Disruption, Ransomware Victims Continue to Pay Up
For all the cautions against doing so, one-third of organizations in a Proofpoint survey said they paid their attackers after getting infected […]
Microsoft exposed 250 million customer support records
Databases containing 14 years’ worth of customer support logs were publicly accessible with no password protection The post Microsoft exposed 250 million […]
Big Microsoft data breach – 250 million records exposed
Microsoft has today announced a data breach that affected one of its customer databases. ——– Free High Security Email from Sigma
Ubisoft sues DDoS-for-hire operators for ruining game play
The network of sites and services run by the alleged operators target the Rainbow Six Siege game, selling attacks to cheating players. […]
NIST’s new privacy rules – what you need to know
How do you ensure you’re compliant with privacy regulations? NIST has released a Privacy Framework to help you get your house in […]