Credit to Author: Paul Ducklin| Date: Sat, 05 Mar 2022 19:06:09 +0000
Firefox just published a double-zero-day patch – “remote code execution” combined with “sandbox escape”. Update now!
Read more
FortiGuard Labs discovered a phishing email addressed to a Ukrainian recipient that masqueraded as purchase order containing a PPT attachment aiming to deploy the Agent Tesla RAT. Learn more.
Credit to Author: Pieter Arntz| Date: Mon, 07 Mar 2022 20:25:18 +0000
Mozilla has issued an out of bound update for Firefox and Thunderbird to fix two vulnerabilities being exploited in the wild.
The post Update now! Mozilla patches two actively exploited vulnerabilities appeared first on Malwarebytes Labs.
Read moreCredit to Author: Pieter Arntz| Date: Mon, 07 Mar 2022 20:06:37 +0000
Vendors want to fix their bugs as soon as possible. We look at how the big vendors are doing, and what the end user can do.
The post The struggle to reduce bug-fixing time is real appeared first on Malwarebytes Labs.
Read more
Credit to Author: Susan Bradley| Date: Mon, 07 Mar 2022 10:02:00 -0800
Every year at this time, I have to fill out my firm’s cyber insurance application — and every year they ask whether we encourage strong passwords and change them often. This question annoys me tremendously, because we really shouldn’t be changing passwords often. We should instead be choosing authentication processes that appropriately match site risks; using a password should be the last thing you want to rely on.
First, think about the information and data a website is keeping on you. The sites we want to offer the most protections often have the weakest. Where you can, always add two-factor authentication to a site’s access. (Not all multi-factor authentication is created equally, but some sort of multi-factor is better than none. If it encourages attackers to go elsewhere, it’s done its job.
Credit to Author: David Ruiz| Date: Thu, 03 Mar 2022 10:37:29 +0000
In a time of rapid-changing crisis, here are four SMB cybersecurity best practices to help prevent the most common attacks.
The post Four key cybersecurity practices during geopolitical upheaval appeared first on Malwarebytes Labs.
Read more
FortiGuard Labs discovered more than 500 Microsoft Excel files involved in a campaign to deliver a fresh Emotet Trojan variant. Read to learn more how to avoid this lure.
Credit to Author: Matt Burgess| Date: Mon, 07 Mar 2022 12:36:01 +0000
In many parts of the world, law enforcement uses WhatsApp chats, text messages, and photos from confiscated phones as “evidence” against persecuted groups.
Read more
Credit to Author: Paul Ducklin| Date: Mon, 07 Mar 2022 12:47:44 +0000
Training data stashed in GitHub by mistake… unfortunately, it was *real* data
Read more
Credit to Author: Editor| Date: Mon, 07 Mar 2022 12:20:59 +0000
Hear from 19 cybersecurity pros worldwide about women in tech
Read more