Threatpost

JANUARY 3, 2021

Insider threats are redefined in 2021, the work-from-home trend will continue define the threat landscape and mobile endpoints become the attack vector of choice, according 2021 forecasts.

Mobile 136

Mobile Cybersecurity Artificial Intelligence IoT 136

Security Affairs

JANUARY 3, 2021

Data from major cyber security firms revealed that tens of billion records have been exposed in data breaches exposed in 2020. Below a list of top incidents: There were a number of major data breaches that took place in 2020, in many cases stolen records flooded the cybercrime underground and were used credential stuffing attacks. Below the list of top data breaches that took place in the last 12 months: May 2020 – CAM4 adult cam site leaked 11B database records including emails, private c

Data breaches 130

Data breaches Cybercrime Hacking Passwords 130

Appknox

JANUARY 3, 2021

Is your network secure from outside attacks? What steps is your organization taking to keep its intellectual property and client data safe? Penetration and vulnerability scanning are two tools that can help identify gaps in your network security. In this article, we’ll look at how you can use these tools to evaluate your companies risk factors and whether penetration testing or vulnerability scanning is the right solution for you.

Penetration Testing 72

Penetration Testing Network Security Risk Mobile 72

Security Affairs

JANUARY 3, 2021

NCA arrested 21 people in the UK as part of an operation targeting customers of WeLeakInfo service that advertised stolen personal credentials. 21 people have been arrested in the UK as part of an operation against customers of the WeLeakInfo[.]com service that had been previously selling access to data from data breaches. WeLeakInfo.com was a data breach notification service that was allowing its customers to verify if their credentials been compromised in data breaches.

Data breaches 106

Data breaches Cybercrime Cyber Attacks Advertising 106

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Adam Shostack

JANUARY 3, 2021

As the expression goes, no one cares about backups, they care about restores. Do yours work? Some lessons learned over the last few days: Apple has disabled single user mode as of Mojave, and many recovery options are not available if you use a firmware password. Do not forget that availability is a security property. Using a pi.hole made getting to Apple’s network Recovery Installer difficult.

Backups 100

Backups Firmware Passwords Internet 100

Security Affairs

JANUARY 3, 2021

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. HackerOne announces first bug hunter to earn more than $2M in bug bounties SolarWinds releases updated advisory for SUPERNOVA backdoor Vermont Hospital confirmed the ransomware attack E-commerce app 21 Buttons exposes millions of users data Finland confirms that hackers breached MPs emails accounts Multi-platform card skimmer targets Shopify, B

Data breaches 94

Data breaches Mobile VPN Firewall 94

Security Affairs

JANUARY 3, 2021

This post includes the details of the COVID-19 themed attacks launched from December 19, 2020– January 02, 2021. 25 December, 2020 – North Korea-linked Lazarus APT targets the COVID-19 research. The North Korea-linked Lazarus APT group has recently launched cyberattacks against at least two organizations involved in COVID19 research. 30 December, 2020 – US Treasury warns of ransomware attacks on COVID19 vaccine research.

Ransomware 57

Ransomware Hacking Information Security Malware 57

Security Affairs

JANUARY 3, 2021

During a routine Dark web monitoring, the Research team at Cyble found threat actors selling 200 million+ Records of Chinese Citizens. During a routine Dark web monitoring, the Research team at Cyble found multiple posts where threat actors are offering for sale alleged data leaks related to Chinese citizens. Data might have been stolen from multiple popular Chinese services, including Gongan County, Weibo, and QQ.

Mobile 121

Mobile Cybercrime Hacking Software 121