Thinking of Hiring or Running a Booter Service? Think Again.
Krebs on Security
JANUARY 17, 2023
Most people who operate DDoS-for-hire businesses attempt to hide their true identities and location.
Sat.Jan 14, 2023 - Fri.Jan 20, 2023
182 
The FBI Identified a Tor User
Schneier on Security
JANUARY 17, 2023
No details , though: According to the complaint against him, Al-Azhari allegedly visited a dark web site that hosts “unofficial propaganda and photographs related to ISIS” multiple times on May 14, 2019.
Join 10,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Pwned or Bot
Troy Hunt
JANUARY 19, 2023
It's fascinating to see how creative people can get with breached data. Of course there's all the nasty stuff (phishing, identity theft, spam), but there are also some amazingly positive uses for data illegally taken from someone else's system.
Most Popular Cybersecurity Blog Posts from 2022
Lohrman on Security
JANUARY 15, 2023
What were the top government technology and security blogs in 2022? The metrics don’t lie, and they tell us what cybersecurity and technology infrastructure topics were most popular
Successful Change Management with Enterprise Risk Management
Speaker: William Hord, Vice President of ERM Services
Join us as we discuss the various tangents of data and the change management process that will help you make better risk-based business decisions to save time and money for your organization.
New T-Mobile Breach Affects 37 Million Accounts
Krebs on Security
JANUARY 19, 2023
T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years.
Security Analysis of Threema
Schneier on Security
JANUARY 19, 2023
A group of Swiss researchers have published an impressive security analysis of Threema. We provide an extensive cryptographic analysis of Threema, a Swiss-based encrypted messaging application with more than 10 million users and 7000 corporate customers.
Sign up to get articles personalized to your interests!
Cyber Security Informer brings together the best content for cyber security professionals from the widest variety of industry thought leaders.
More Trending
As a cybersecurity blade, ChatGPT can cut both ways
Tech Republic Security
JANUARY 19, 2023
The cybersecurity implications of ChatGPT are vast, especially for email exploits, but putting up guardrails, flagging elements of phishing emails that it doesn’t touch and using it to train itself could help boost defense.
EmojiDeploy Attack Chain Targets Misconfigured Azure Service
Dark Reading
JANUARY 19, 2023
Multiple misconfigurations in a service that underpins many Azure features could have allowed an attacker to remotely compromise a cloud user's system
Real-World Steganography
Schneier on Security
JANUARY 20, 2023
From an article about Zheng Xiaoqing, an American convicted of spying for China: According to a Department of Justice (DOJ) indictment, the US citizen hid confidential files stolen from his employers in the binary code of a digital photograph of a sunset, which Mr Zheng then mailed to himself.
NEW TECH: DigiCert unveils ‘Trust Lifecyle Manager’ to centralize control of digital certificates
The Last Watchdog
JANUARY 17, 2023
To get network protection where it needs to be, legacy cybersecurity vendors have begun reconstituting traditional security toolsets. The overarching goal is to try to derive a superset of very dynamic, much more tightly integrated security platforms that we’ll very much need, going forward. Related: The rise of security platforms.
Cover Your SaaS: How to Overcome Security Challenges and Risks For Your Organization
Speaker: Ronald Eddings, Cybersecurity Expert and Podcaster
In this webinar, Ronald Eddings, Cybersecurity Expert, will outline the relationship between SaaS apps and IT & security teams, along with several actionable solutions to overcome the new difficulties facing your organization.
Rise of cloud-delivered malware poses key security challenges
Tech Republic Security
JANUARY 18, 2023
The volume of cloud-based malware tripled in 2022 over the prior year, says Netskope, with 30% of the malicious downloads coming from Microsoft OneDrive. The post Rise of cloud-delivered malware poses key security challenges appeared first on TechRepublic.
T-Mobile’s SIXTH Breach in 5 years: 37M Users’ PII Leaks
Security Boulevard
JANUARY 20, 2023
The Un-carrier is In-secure, it seems. Un-believable. In-credibly in-competent. CEO Mike Sievert (pictured) might become un-CEO. The post T-Mobile’s SIXTH Breach in 5 years: 37M Users’ PII Leaks appeared first on Security Boulevard.
AI and Political Lobbying
Schneier on Security
JANUARY 18, 2023
Launched just weeks ago, ChatGPT is already threatening to upend how we draft everyday communications like emails , college essays and myriad other forms of writing.
ChatGPT Could Create Polymorphic Malware Wave, Researchers Warn
Dark Reading
JANUARY 18, 2023
The powerful AI bot can produce malware without malicious code, making it tough to mitigate
How Preparation and Strategy Can Be Used to Fight and Defeat Any Ransomware Attack
Speaker: Karl Camilleri, Cloud Services Product Manager at phoenixNAP
Through a detailed analysis of major attacks and their consequences, Karl Camilleri, Cloud Services Product Manager at phoenixNAP, will discuss the state of ransomware and future predictions, as well as provide best practices for attack prevention and recovery.
SimSpace CEO brings dogfight mentality to terra firma for IT cybersecurity training
Tech Republic Security
JANUARY 17, 2023
William “Hutch” Hutchison, founder and CEO of SimSpace, speaks with Karl Greenberg about the virtues of cyber ranges in training IT teams, and SimSpace’s own specialty: Digital-twin based ranges that the firm provides to NATO governments worldwide, including security teams in Ukraine.
Difference between Cybersecurity and Information Security
CyberSecurity Insiders
JANUARY 18, 2023
Many of you get confused with terms cybersecurity and Information Security and think that both these words are same and synonymous. However, in reality, both these terms are different and confused with one another.
Upcoming Speaking Engagements
Schneier on Security
JANUARY 14, 2023
This is a current list of where and when I am scheduled to speak: I’m speaking at Capricon , a four-day science fiction convention in Chicago. My talk is on “The Coming AI Hackers” and will be held Friday, February 3 at 1:00 PM. The list is maintained on this page.
PayPal Breach Exposed PII of Nearly 35K Accounts
Dark Reading
JANUARY 19, 2023
The credential-stuffing attack, likely fueled by password reuse, yielded personal identifiable information that can be used to verify the authenticity of previously stolen data
How to Avoid the Pain and Cost of PCI Compliance While Optimizing Payments
Speaker: P. Andrew Sjogren, Sr. Product Marketing Manager at Very Good Security, Matt Doka, Co-Founder and CTO of Fivestars, and Steve Andrews, President & CEO of the Western Bankers Association
In this webinar, we have a great set of panelists who will take you through how Zero Data strategies can be used as part of a well-rounded compliance and security approach, and get you to market much sooner by also allowing for payment optimization. They’ll share how to grow your business faster and minimize costs for both security and compliance
Threat attackers can own your data in just two days
Tech Republic Security
JANUARY 18, 2023
This report shows cybercriminals need only a couple days to access your full corporate network and exfiltrate its data. Read on to learn more. The post Threat attackers can own your data in just two days appeared first on TechRepublic. Security cybercrime cybersecurity malware
Understanding Malware-as-a-Service (MaaS): The future Of cyber attack accessibility
CyberSecurity Insiders
JANUARY 19, 2023
The content of this post is solely the responsibility of the author. AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. With the explosive growth of technology, businesses are more vulnerable than ever to malicious cyber attacks.
Hacked Cellebrite and MSAB Software Released
Schneier on Security
JANUARY 16, 2023
Cellebrite is an cyberweapons arms manufacturer that sells smartphone forensic software to governments around the world. MSAB is a Swedish company that does the same thing. Someone has released software and documentation from both companies. Uncategorized cyberweapons leaks smartphones
Attackers Crafted Custom Malware for Fortinet Zero-Day
Dark Reading
JANUARY 19, 2023
The "BoldMove" backdoor demonstrates a high level of knowledge of FortiOS, according to Mandiant researchers, who said the attacker appears to be based out of China
Back to the Office: Privacy and Security Solutions to Compliance Issues for 2021 and Beyond
Speaker: Mike Cramer, Director of HIPAA & Data Security at The Word & Brown Companies
Now that companies are slowly allowing employees to return to work at the office, it's time to re-evaluate your company’s posture towards privacy and security. Join Mike Cramer, Director of HIPAA & Data Security at The Word & Brown Companies, for a discussion that will focus on compliance and the types of privacy and security measures your company should be aware of, as well as tips and methods for implementing these measures.
Secure your email with this top-rated backup service
Tech Republic Security
JANUARY 19, 2023
Mail Backup X is the ultimate solution to protect your email from corruptions and crashes. The post Secure your email with this top-rated backup service appeared first on TechRepublic. Security Tech & Work email email backup mail backup x
Spy Cams Reveal the Grim Reality of Slaughterhouse Gas Chambers
WIRED Threat Level
JANUARY 18, 2023
Animal rights activists have captured the first hidden-camera video from inside a carbon dioxide “stunning chamber” in a US meatpacking plant. Security Security / Privacy Security / Security News
Booklist Review of A Hacker’s Mind
Schneier on Security
JANUARY 14, 2023
Booklist reviews A Hacker’s Mind : Author and public-interest security technologist Schneier ( Data and Goliath , 2015) defines a “hack” as an activity allowed by a system “that subverts the rules or norms of the system […] at the expense of someone else affected by the system.” In accessing the security of a particular system, technologists such as Schneier look at how it might fail. In order to counter a hack, it becomes necessary to think like a hacker.
Compromised Zendesk Employee Credentials Lead to Breach
Dark Reading
JANUARY 20, 2023
Zendesk has alerted customers to a successful SMS phishing campaign that has exposed "service data," but details remain scarce
T-Mobile API Breach: Playing the Victim
Security Boulevard
JANUARY 20, 2023
I’m not sure what is less surprising, that a big company got hacked or that they are trying to play the victim. The headline is that T-Mobile acknowledged that data on roughly 37 million customers was stolen. The breach resulted from a “bad actor” abusing an API to gain access to the data.
Hacker steals data of 37 million T Mobile customers
CyberSecurity Insiders
JANUARY 20, 2023
T Mobile hack is back in news as the telecom company is accusing a hacker of fraudulently stealing customer data from its servers. Earlier, the company was targeted by a sophistication filled digital attack.
IT email templates: Security alerts
Tech Republic Security
JANUARY 18, 2023
All company communication needs may vary but certain standard template messages can come in handy for IT staff to keep employees up to date on “need to know” informational bulletins.
Unpatched Zoho MangeEngine Products Under Active Cyberattack
Dark Reading
JANUARY 17, 2023
The latest critical bug is exploitable in dozens of ManageEngine products and exposes systems to catastrophic risks, researchers warn
GitHub Rebuffs Breach With Swift Action, Rotating Credentials
Security Boulevard
JANUARY 17, 2023
The holidays were anything but happy over at Slack, which saw threat actors access its externally hosted GitHub repositories. The miscreants apparently used a “limited” number of stolen Slack employee tokens.
Telephony fraud and risk mitigation: Understanding this ever-changing threat
CyberSecurity Insiders
JANUARY 18, 2023
Telephony fraud is a significant challenge. Companies of all sizes and industries are subjected to the malicious usage of voice and SMS with the intent of committing financial fraud, identity theft, denial-of-service, and a variety of other attacks.
Let's personalize your content