Cybersecurity
A social engineering campaign is specifically - and successfully - targeting security researchers.
Possible a Chrome 0day is to blame.
Cybersecurity
SonicWall says VPN *is* safe after 0day breach of its mobile access tool - SMA 100 requires remediation.
"A coordinated attack on internal systems by highly sophisticated threat actors"
Cybersecurity
SAP's "Active Directory-equivalent" has a CVSS 10-rated critical bug
Security experts warn that unpatched vulns remain better than 0days for attackers.
Cybersecurity
Pre-auth RCE vulnerabilities in Cisco's SD-WAN give attackers root privileges.
"Execute arbitrary code on the underlying OS with root privileges".
Cybersecurity
Malwarebytes the latest victim of SolarWinds attackers: Here's how the threat group is pivoting to Azure/O365 tenants - and how to secure them.
Help yourself to a third free tool to audit AD permission.
Cybersecurity
Dridex crimeware is back with a vengeance - and now it's dropping ransomware too.
Malicious Excel docs are the most common dropper.
Cybersecurity
NSA: DNS-over-HTTPS "no panacea". NCSC: Handy if *we* run it, though.
DoH can "bring issues to enterprises, including a false sense of security" says NSA.
Cybersecurity
NSA's Anne Neuberger lands key Biden administration cybersecurity role
New team will "prepare for and respond to the full spectrum of threats"
Cybersecurity
A critical bug in Microsoft Defender has been actively exploited in the wild.
0day is one of 83 CVEs in Patch Tuesday
Cybersecurity
Mimecast certs compromised by "sophisticated threat actor"
Mimecast certificates used to authenticate its products to Microsoft 365 Exchange Web Services exploited.
Cybersecurity
Intel aims to tackle ransomware at hardware level
Avoid unnecessary scanning and agent bloat?
Cybersecurity
NIS 2: Winds of change blowing as Europe sharply tightens up cybersecurity requirements.
EU will carry out "coordinated security risk assessments of specific critical ICT services, systems or products supply chains"