This Week in Security News: Trend Micro Creates Factory Honeypot to Trap Malicious Attackers and Microsoft Leaves 250M Customer Service Records Open to the Web

Credit to Author: Jon Clay (Global Threat Communications)| Date: Fri, 24 Jan 2020 13:18:05 +0000

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, dive into a research study that explores the risks associated with common cybersecurity vulnerabilities in a factory setting. Also, read about how misconfigured Microsoft cloud databases containing…

The post This Week in Security News: Trend Micro Creates Factory Honeypot to Trap Malicious Attackers and Microsoft Leaves 250M Customer Service Records Open to the Web appeared first on .

Read more

Protestors petition equity firm over .org buyout

Credit to Author: Danny Bradbury| Date: Fri, 24 Jan 2020 11:48:40 +0000

The street outside ICAAN’s offices in Playa Vista, California, is likely a little more crowded than normal.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/zDN1XRuZuFg” height=”1″ width=”1″ alt=””/>

Read more

New wave of Mal-Spam campaign attaching Disk Imaging Files

Credit to Author: Prakash Galande| Date: Fri, 24 Jan 2020 11:04:10 +0000

From past few months at Quick-Heal Labs, we have been observing a sudden rise in Spear Phishing mail containing distinct file formats as attachment like IMG, ISO, etc. These new types of attachments are mainly used to deploy some well-known and older Remote Access Trojans. The subject of these emails…

Read more

Ako Ransomware targeting businesses using RaaS

Credit to Author: Shriram Munde| Date: Fri, 24 Jan 2020 11:00:51 +0000

Ako Ransomware targeting businesses using RaaS Quick Heal security researchers recently observed ransomware that uses RaaS (Ransomware as a Service) which is a subpart of MaaS (Malware as a Service). Before delving into the AKO ransomware or RaaS, one must understand what Malware as a Service means, as it is…

Read more

9th Methbot suspect arrested in massive clickfraud ring

Credit to Author: Lisa Vaas| Date: Fri, 24 Jan 2020 10:57:37 +0000

How Sergey Denisoff described his early ad-buying ventures: buying BS popup traffic and reselling it to buyers demanding BS traffic.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/M-uuNM1-C74″ height=”1″ width=”1″ alt=””/>

Read more

Privacy watchdog throws wider net to protect children online

Credit to Author: Lisa Vaas| Date: Fri, 24 Jan 2020 10:09:18 +0000

A new, comprehensive code will compel online services to put children’s health and safety before data-collecting profits.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/85dspOTlfAY” height=”1″ width=”1″ alt=””/>

Read more

Azure Security Benchmark—90 security and compliance best practices for your workloads in Azure

Credit to Author: Todd VanderArk| Date: Thu, 23 Jan 2020 17:00:39 +0000

Azure Security Benchmark offers a collection of over 90 security best practices and recommendations you can employ to increase the overall security and compliance of all your workloads in Azure.

The post Azure Security Benchmark—90 security and compliance best practices for your workloads in Azure appeared first on Microsoft Security.

Read more

Microsoft and Zscaler help organizations implement the Zero Trust model

Credit to Author: Todd VanderArk| Date: Thu, 23 Jan 2020 17:00:27 +0000

Microsoft has built deep integrations with Zscaler—a cloud-native, multitenant security platform—to help organizations with their Zero Trust journey.

The post Microsoft and Zscaler help organizations implement the Zero Trust model appeared first on Microsoft Security.

Read more

Deepfakes laws and proposals flood US

Credit to Author: David Ruiz| Date: Thu, 23 Jan 2020 17:59:05 +0000

In a rare example of legislative haste, roughly one dozen state and federal bills were introduced in the past 12 months to regulate deepfakes, the relatively modern technology that some fear could upend democracy.

Categories:

Tags:

(Read more…)

The post Deepfakes laws and proposals flood US appeared first on Malwarebytes Labs.

Read more

Microsoft Patch Alert: January 2020 patches look relatively benign

Credit to Author: Woody Leonhard| Date: Thu, 23 Jan 2020 07:17:00 -0800

The big patching problems this month fell at the feet of admins who had to deal with an unholy mess of pressing exposures: Fixing the holes in Microsoft’s RD Gateway (CVE-2020-0610; see Susan Bradley’s Patch Watch, paywalled); dealing with Server 2008 R2 systems that booted to Recovery mode after installing the January patches; scrambling to pick up after breaches in Citrix networking products; or the 334 Oracle security patches. They all took a toll.

To read this article in full, please click here

Read more