87 ways Identity Management goes wrong

Cyber SecurityPosted by Mydogisajerk
87 ways Identity Management goes wrong
https://medium.com/the-ciso-den/identity-management-vulnerability-taxonomy-d26d60f2978c

Rackspace rocked by ‘security incident’ in hosted Exchange

Cyber SecurityPosted by CandiceC
Rackspace rocked by ‘security incident’ in hosted Exchange
https://www.theregister.com/2022/12/03/rackspace_security_incident_hosted_exchange/

Hospitals warned to guard against cybercrime after Medibank and Optus wake-up calls

Cyber SecurityPosted by strip_me_down_pls
Hospitals warned to guard against cybercrime after Medibank and Optus wake-up calls
https://www.abc.net.au/news/2022-12-04/hospitals-warned-to-guard-against-cybercrime/101731634

️ Warning: do not use Hive Social

Cyber SecurityPosted by Mydogisajerk
️ Warning: do not use Hive Social
https://zerforschung.org/posts/hive-en/

Web browsers drop mysterious company with ties to U. S. Military contractor

Cyber SecurityPosted by 1timbutimbu1
Web browsers drop mysterious company with ties to U. S. Military contractor
https://www.washingtonpost.com/technology/2022/11/30/trustcor-internet-authority-mozilla/

Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams

Cyber SecurityPosted by interiorcrocodilealligator
Eufy caught lying about local-only security cameras with footage sent to cloud, accessible in unencrypted streams
https://9to5google.com/2022/11/29/eufy-camera-cloud-security-leak/

TikTok ‘Invisible Body’ challenge exploited to push malware

Cyber SecurityPosted by WhenRome
TikTok ‘Invisible Body’ challenge exploited to push malware
https://www.bleepingcomputer.com/news/security/tiktok-invisible-body-challenge-exploited-to-push-malware/

Data from 5. 4M Twitter users obtained from multiple threat actors and combined with data from other breaches

Cyber SecurityPosted by Kernik
Data from 5. 4M Twitter users obtained from multiple threat actors and combined with data from other breaches
https://securityaffairs.co/wordpress/139001/data-breach/twitter-massive-data-breach.html

WhatsApp data leak: 500 million user records for sale

Cyber SecurityPosted by confusedgirl23
WhatsApp data leak: 500 million user records for sale
https://cybernews.com/news/whatsapp-data-leak/

Stop me if you've heard this one before: November's Patch Tuesday updates cause domain controller freezes & restarts (LSASS memory leak)

Cyber SecurityPosted by Mint
Stop me if you've heard this one before: November's Patch Tuesday updates cause domain controller freezes & restarts (LSASS memory leak)
https://www.bleepingcomputer.com/news/microsoft/new-windows-server-updates-cause-domain-controller-freezes-restarts/

Draft Kings hacked - hackers steal $300K in credential stuffing attack

Cyber SecurityPosted by scarface
Draft Kings hacked - hackers steal $300K in credential stuffing attack
https://www.bleepingcomputer.com/news/security/hackers-steal-300-000-in-draftkings-credential-stuffing-attack/

Google releases 165 YARA rules to detect Cobalt Strike attacks

Cyber SecurityPosted by confusedgirl23
Google releases 165 YARA rules to detect Cobalt Strike attacks
https://www.bleepingcomputer.com/news/security/google-releases-165-yara-rules-to-detect-cobalt-strike-attacks/

New attacks use Windows security bypass zero-day to drop malware

Cyber SecurityPosted by highnon
New attacks use Windows security bypass zero-day to drop malware
https://www.bleepingcomputer.com/news/security/new-attacks-use-windows-security-bypass-zero-day-to-drop-malware/

Network Attacks

Cyber SecurityPosted by Whasszzza
Network Attacks

42, 000 Imposter Domains Used by Chinese Hackers in Huge Phishing Campaign

Cyber SecurityPosted by usaFOREVER
42, 000 Imposter Domains Used by Chinese Hackers in Huge Phishing Campaign
https://www.makeuseof.com/thousands-imposter-domains-used-huge-phishing-campaign/

Iranian hackers use Log4Shell to mine crypto on federal computer system

Cyber SecurityPosted by WinterscomingYEAH
Iranian hackers use Log4Shell to mine crypto on federal computer system
https://www.cyberscoop.com/iranian-hackers-log4shell-crypto/

Lockheed gets Microsoft classified cloud to speed work with Pentagon

Cyber SecurityPosted by croky
Lockheed gets Microsoft classified cloud to speed work with Pentagon
https://www.reuters.com/technology/lockheed-gets-microsoft-classified-cloud-speed-work-with-pentagon-2022-11-16/

Windows Kerberos authentication breaks after November updates

Cyber SecurityPosted by VegasDUUUDE
Windows Kerberos authentication breaks after November updates
https://www.bleepingcomputer.com/news/microsoft/windows-kerberos-authentication-breaks-after-november-updates/

FTX says ‘unauthorized transactions’ drained millions from the exchange

Cyber SecurityPosted by 0Kelvin
FTX says ‘unauthorized transactions’ drained millions from the exchange
https://www.theverge.com/2022/11/12/23454702/ftx-unauthorized-transactions-drained-millions-from-the-exchange-hack-bankr…

Android phone owner accidentally finds a way to bypass lock screen

Cyber SecurityPosted by WhenRome
Android phone owner accidentally finds a way to bypass lock screen
https://www.bleepingcomputer.com/news/security/android-phone-owner-accidentally-finds-a-way-to-bypass-lock-screen/
Level
Story XP
Story XP
Stories
Followers