Weekly #cybersecurity digest to your inbox

Slack bugs allowed take over victims’ accounts

Slack addressed a critical flaw within 24 hours from its disclosure, the issue allowed attackers to carry out automate account takeover. The researcher Evan Custodio discovered a critical vulnerability in Slack that could have allowed attackers to launch automate account takeover. Slack addressed the vulnerability within 24 hours it was reported by the researcher, the […] The post Slack bugs allowed take over victims’ accounts appeared first on Security Affairs.

Go to article at

15.5.2020

Unpatched Vulnerabilities

Do you have a data breach response plan?

While corporations today are more knowledgeable about security threats and prepared to respond to data breaches, there are key areas in which progress declined in 2019, according to a study conducted by the Ponemon Institute. Prepare beyond your data breach response plan Sixty-eight percent of respondents say their organization has put more resources toward security technologies to detect and respond quickly to a data breach. 57% of those surveyed also reported that they believe their … More → The post Do you have a data breach response plan? appeared first on Help Net Security.

Go to article at

15.5.2020

Violations of Data Subject Rights

Naive IoT Botnet Wastes Its Time Mining Cryptocurrency

Go to article at

15.5.2020

Malware

ENISA publishes procurement guidelines for cybersecurity in hospitals

The EU Agency for Cybersecurity (ENISA) published a cybersecurity procurement guide for hospitals. The hospital is a vast ecosystem comprised of an entire network of devices, equipment and systems that often require connection to external systems, making monitoring and control a very hard task to do. This is due to the high sensitivity of medical data and the potential vulnerability the sector is faced with, cybersecurity has to be applied every step of the way … More → The post ENISA publishes procurement guidelines for cybersecurity in hospitals appeared first on Help Net Security.

Go to article at

15.5.2020

Supply Chain Attacks

Large email extortion campaign underway, DON'T PANIC!

A large email extortion campaign is underway telling recipients that their computer was hacked and that a video was taken through the hacked computer's webcam. The attackers then demand $1,900 in bitcoins or the video will be sent to family and friends. [...]

Go to article at

15.5.2020

Phishing

Tor Browser Bug Executes Uncalled for JavaScript Codes!

Go to article at

15.5.2020

Unpatched Vulnerabilities

Ransomware attacks Canadian Military Contractor

Ransomware attackers claimed to stolen 60GB of data from Canadian defence contractor after ransomware attack in December 2018. The threat presented by ransomware continues to be evidenced in 2020 after an attack on a major Canadian defence contractor Bird Construction. The Canadian construction firm that provides service for the Canadian military was apparently attacked by cyberattackers […] The post Ransomware attacks Canadian Military Contractor appeared first on IT Security Guru.

Go to article at

15.5.2020

Ransomware

Israel Accuses Hamas of ‘Catfishing’ Soldiers to Plant Malware

Hamas said Israel hacked one of its Telegram groups and posted doctored photos.The aftermath of an Israeli airstrike in Gaza City this month.Credit...Mohammed Abed/Agence France-Presse — Getty ImagesFeb.

Go to article at

15.5.2020

Malware

Hackers Begin Uploading 30 Million Cards from Wawa Breach

Stolen data being sold by one of the underground’s most popular crime shops

Go to article at

15.5.2020

Illegal Personal Data Processing