Critical Vulnerability Found in Cisco Video Surveillance Manager
Source: Threat Post
Critical Vulnerability Found in Cisco Video Surveillance Manager
Cisco has patched vulnerability in its video surveillance manager software that could give an unauthenticated, remote attacker the ability to execute arbitrary commands on targeted systems.
The 'Opsec Fail' That Helped Unmask a North Korean State Hacker
Source: Dark Reading
The 'Opsec Fail' That Helped Unmask a North Korean State Hacker
How Park Jin Hyok – charged by the US government for alleged computer crimes for the Sony, Bank of Bangladesh, WannaCry cyberattacks – inadvertently blew his cover via email accounts.
Twitter Flaw Exposed Direct Messages To External Developers
Source: Threat Post
Twitter Flaw Exposed Direct Messages To External Developers
The company said it has issued a patch for the issue, which has been ongoing since May 2017.
Delphi Packer Looks for Human Behavior Before Deploying Payload
Source: Threat Post
Delphi Packer Looks for Human Behavior Before Deploying Payload
Many different threat actors are using this crypting service/tool for their operations, possibly buying it from the developer itself.
Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
Source: Dark Reading
Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
Attack against the Metropolitan Police Department was disrupted before malware could be sent to additional systems.
Researcher Discloses New Zero-Day Affecting All Versions of Windows
Source: The Hacking News
Researcher Discloses New Zero-Day Affecting All Versions of Windows
A security researcher has publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows operating system (including server editions) after the company failed to patch a responsibly disclosed bug within the 120-days deadline.
Discovered by Lucas Leong of the Trend Micro Security Research team, the zero-day vulnerability resides in Microsoft Jet Database
6 Security Training Hacks to Increase Cyber IQ Org-Wide
Source: Dark Reading
6 Security Training Hacks to Increase Cyber IQ Org-Wide
Move beyond generic, annual security awareness training with these important tips.
US Approves Cyber Weapons Against Foreign Enemies
Source: Dark Reading
US Approves Cyber Weapons Against Foreign Enemies
The White House is changing the rules on its use of digital weapons to fight adversaries targeting US networks.
Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Source: Threat Post
Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Microsoft said that it’s working on a fix for a zero-day flaw in its JET Database Engine.
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Source: Dark Reading
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Industry leaders are scrambling to address the issue, which will take new thinking to overcome.