🐛 COMMON VULNERABILITIES AND EXPOSURES 4[−]
29 JanMultiple PoC Exploits Released for Jenkins Flaw CVE-2024-23897With over 75,000 internet-facing instances of Jenkins vulnerable to exploitation, the availability of PoC exploits is likely to lead to widespread attacks by threat actors.SECURITYAFFAIRS.COM
29 JanExploit Released for Critical Jenkins RCE FlawJenkins has been discovered with a critical vulnerability that is associated with arbitrary code execution that threat actors can exploit for malicious purposes. The vulnerability is tracked as CVE-2024-23898, and the severity is yet to be categorized. However, Jenkins has fixed …GBHACKERS.COM
29 JanResearchers Uncover How Outlook Vulnerability Could Leak Your NTLM PasswordsA now-patched security flaw in Microsoft Outlook could be exploited by threat actors to access NT LAN Manager (NTLM) v2 hashed passwords when opening a specially crafted file. The issue, tracked as CVE-2023-35636 (CVSS score: 6.5), was addressed by the tech giant as part of its&n…THEHACKERNEWS.COM
29 Jan45k Jenkins servers exposed to RCE attacks using public exploitsResearchers found roughly 45,000 Jenkins instances exposed online that are vulnerable to CVE-2023-23897, a critical remote code execution (RCE) flaw for which multiple public proof-of-concept (PoC) exploits are in circulation. [...]BLEEPINGCOMPUTER.COM
⚠️ VULNERABILITY DISCLOSURE 15[−]
29 JanMalicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows MachinesCybersecurity researchers have identified malicious packages on the open-source Python Package Index (PyPI) repository that deliver an information stealing malware called WhiteSnake Stealer on Windows systems. The malware-laced packages are named nigpal, figflix, telerer, seGMM, …THEHACKERNEWS.COM
29 Jan10 penetration testing tools the pros usePentesting times have certainly changed. Years ago, when this speciality in offensive security was taking off, there was a large shift away from manual techniques to relying on a variety of tools. Most of these were open source. Then pentesting itself divided up into several nich…CSOONLINE.COM
29 JanCanada wakes up to China, Russia, Iran threat to intellectual propertyIt is as if a light went on within the Canadian government this month as it took steps to tighten control over the risk presented by China, Russia, and Iran to sensitive research being funded by the federal government. With its “ New Policy on Sensitive Technology Research and …CSOONLINE.COM
29 JanUsing Google Search to Find Software can be RiskyDespite Google's efforts to enforce abuse policies and remove malicious ads, cybercrooks are finding new ways to evade detection and continue to lead users to malware-infected websites.KREBSONSECURITY.COM
29 JanMicrosoft Executives HackedMicrosoft is reporting that a Russian intelligence agency—the same one responsible for SolarWinds—accessed the email system of the company’s executives. Beginning in late November 2023, the threat actor used a password spray attack to compromise a legacy non-pro…SCHNEIER.COM
29 JanExploit Flare Up Against Older Altassian Confluence Vulnerability, (Mon, Jan 29th)Last October, Atlassian released a patch for %%cve:2023-22515%% [1]. This vulnerability allowed attackers to create new admin users in Confluence. Today, I noticed a bit a "flare up" in a specific exploit variant.
ISC.SANS.EDU
29 JanJuniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX SeriesJuniper Networks released a security bulletin to address multiple vulnerabilities for J-Web in Junos OS SRX Series and EX Series. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to rev…CISA.GOV
29 JanPoC Exploit Published for Critical Jenkins VulnerabilityPoC exploit code targeting a critical Jenkins vulnerability patched last week is already publicly available. The post PoC Exploit Published for Critical Jenkins Vulnerability appeared first on SecurityWeek .SECURITYWEEK.COM
29 JanBiden's AI Executive Order, 90 Days OnWhite House Touts Progress in AI Innovation, Regulation The White House on Monday touted progress in the area of artificial intelligence, saying that federal hiring has surged and funding is flowing to regional AI research efforts while the federal government is preparing new reg…DATABREACHTODAY.CO.UK
29 JanSolarWinds Requests Court Dismiss Regulator's Fraud CaseCalls Securities and Exchange Commission's Cybersecurity Allegations 'Unfounded' Network monitoring software vendor SolarWinds moved to dismiss a federal lawsuit accusing the company and its CISO of securities fraud after they allegedly misstated the efficacy of its cybersecurity…DATABREACHTODAY.CO.UK
29 JanMultiple Vulnerabilities in Jenkins Could Allow for Remote Code ExecutionMultiple vulnerabilities have been discovered in Jenkins, the most severe of which could allow for remote code execution. Jenkins (Core) is an open source automation server which is used for building, testing, and deploying software. Git Server Plugin provides fundamental git ope…CISECURITY.ORG
29 JanIvanti Struggling to Hit Zero-Day Patch Release ScheduleIvanti is struggling to hit its own timeline for the delivery of patches for critical -- and already exploited -- flaws in its flagship VPN appliances. The post Ivanti Struggling to Hit Zero-Day Patch Release Schedule appeared first on SecurityWeek .SECURITYWEEK.COM
29 JanHow An Ex-IRS Contractor Covertly Leaked Trump’s Tax ReturnsProsecutors Say Charles Littlejohn Developed 'Detailed Plan' to Evade Detection A man sentenced to five years in prison for leaking Donald Trump's tax returns developed a "sophisticated, detailed plan" to evade detection by law enforcement while secretly downloading the former pr…DATABREACHTODAY.CO.UK
29 JanCybersecurity Incident Shuts Down New Jersey SchoolsThousands of Students Forced to Stay Home Amid Cybersecurity Incident A school district in Freehold Township, New Jersey was forced to close its schools and offices for thousands of students Monday after suffering a cybersecurity incident that caused technical difficulties across…DATABREACHTODAY.CO.UK
29 JanE-Coli | Mercedes | Cloudflare | Ivanti | VT | GIGO | AI | Congress | Aaran Leyland & More! – SWN359This week, Doug Talks: E-Coli, Mercedes, Cloudflare, Ivanti, VT, GIGO, AI, Congress, Aaran Leyland, and More News on the Security Weekly News. →Full Show Notes: https://securityweekly.com/swn359 →Join the Security Weekly Discord Server: https://discord.gg/pqSwWm4 →Visit our websi…YOUTUBE.COM
📢 SECURITY ADVISORIES 10[−]
29 JanUpdate: Hack Wiped Two Petabytes of Data From Russian Research CenterThe Ukrainian Ministry of Defense's Main Intelligence Directorate claims that pro-Ukrainian hacktivists breached the Russian Center for Space Hydrometeorology, known as "Planeta," and wiped 2 petabytes of data.BLEEPINGCOMPUTER.COM
29 JanUpdate: In Major Lapse, Hacked Microsoft Test Account was Assigned Admin PrivilegesThe hackers who recently broke into Microsoft’s network and monitored top executives’ email for two months did so by gaining access to an aging test account with administrative privileges, a major lapse on the company's part, a researcher said.ARSTECHNICA.COM
29 JanYour KnowBe4 Compliance Plus Fresh Content Updates from January 2024Check out the January updates in Compliance Plus so you can stay on top of featured compliance training content.KNOWBE4.COM
29 JanPalo Alto Networks — Strategic Partner on the Road to Quantum ReadinessIn early 2024, the U.S. NIST is expected to conclude a seven-year process, and publish the first set of Post-Quantum Cryptographic algorithms. The post Palo Alto Networks — Strategic Partner on the Road to Quantum Readiness appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
29 JanAI Companies Will Need to Start Reporting Their Safety Tests to the US GovernmentThe Biden administration will start implementing a new requirement for the developers of major artificial intelligence systems to disclose their safety test results to the government. The post AI Companies Will Need to Start Reporting Their Safety Tests to the US Government appea…SECURITYWEEK.COM
29 JanItalian Regulator Again Finds Privacy Problems in OpenAIChatGPT Maker Has 30 Days to Respond ChatGPT maker OpenAI has 30 days to respond to the Italian data regulator after an investigation by the agency concluded the company apparently had violated European privacy laws. Europe is preparing to implement a comprehensive regulation on …DATABREACHTODAY.CO.UK
🔥 INCIDENT REPORTING 19[−]
29 JanAnother Phobos Ransomware Variant Launches Attack – FAUSTThe FAUST ransomware, a Phobos variant, employs a fileless attack to deploy shellcode, injects the final payload, and creates multiple threads for efficient execution while maintaining exclusion lists to avoid damaging the system.FORTINET.COM
29 JanThe Data Breach "Personal Stash" EcosystemPresently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite I've always thought of it a bit like baseball cards; a kid has a card of this one player that another kid is keen on, and that kid…TROYHUNT.COM
29 JanCyber Security Today, Jan. 29, 2024 - SolarWinds demands fraud allegation be dropped, a Canadian sentenced for ransomware attacks, and moreThis episode reports on the need for every organization to have contact information on security issues, and moreCYBERSECURITYTODAY.LIBSYN.COM
29 JanWho is Alleged Medibank Hacker Aleksandr Ermakov?Aleksandr Ermakov, a Russian cybercriminal, has been sanctioned by Australia, the UK, and the US for his alleged involvement in the Medibank data breach and his ties to the REvil ransomware group.KREBSONSECURITY.COM
29 JanAlbabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and GolangCybersecurity researchers have detected in the wild yet another variant of the Phobos ransomware family known as Faust. Fortinet FortiGuard Labs, which detailed the latest iteration of the ransomware, said it's being propagated by means of an infection that delivers a Micros…THEHACKERNEWS.COM
29 JanNew Ransomware Gangs Rise Using Rust and Golang Programming LanguagesNew ransomware families like Albabat, Kasseika, and Kuiper are gaining traction, with Kuiper being attributed to a threat actor named RobinHood and leveraging the concurrency-focused nature of Golang.THEHACKERNEWS.COM
29 JanData Theft Plaguing K-12 Schools After Holiday Season AttacksRansomware attacks have affected schools like Ohio’s Groveport Madison Schools, causing disruptions to internet access and damage to devices, but efforts to restore systems and minimize data theft have been successful.THERECORD.MEDIA
29 JanUS Aid Office in Colombia Reports Its Facebook Page Was HackedThe Colombia office of the U.S. government agency that oversees foreign aid and development funding said its Facebook page was hacked and asked the public to ignore any posts or links from the account. The post US Aid Office in Colombia Reports Its Facebook Page Was Hacked appear…SECURITYWEEK.COM
29 JanTrickbot malware developer jailed for five yearsA 40-year-old Russian man has been sentenced to five years and four months in prison by a US court, for his involvement in the Trickbot gang that deployed ransomware and stole money and sensitive information from businesses around the world. Read more in my article on the Hot for…BITDEFENDER.COM
29 JanCanadian Man Sentenced to Prison for Ransomware AttacksMatthew Philbert was sentenced to two years for launching cyberattacks on Canadian businesses and government entities. The post Canadian Man Sentenced to Prison for Ransomware Attacks appeared first on SecurityWeek .SECURITYWEEK.COM
29 JanRansomware payments drop to record low as victims refuse to payThe number of ransomware victims paying ransom demands has dropped to a record low of 29% in the final quarter of 2023, according to ransomware negotiation firm Coveware. [...]BLEEPINGCOMPUTER.COM
29 JanIdentify Weak User Passwords With KnowBe4’s Enhanced Weak Password TestPasswords are part of every organization’s security risk profile. Just one weak password with access to an organization’s critical systems can cause a breach, take down a network or worse. Whether we like it or not, passwords are here to stay as a form of authentication.KNOWBE4.COM
29 JanEnergy giant Schneider Electric hit by Cactus ransomware attackEnergy management and automation giant Schneider Electric suffered a Cactus ransomware attack leading to the theft of corporate data, according to people familiar with the matter. [...]BLEEPINGCOMPUTER.COM
29 JanCyber Readiness: Train As You Fight - William Hutchison - BSW #336How do you prepare for a cyber incident? You train as you fight, but in what environment? William "Hutch" Hutchinson, CEO and co-founder of SimSpace, joins BSW to share cyber best practices and why testing in your operational environment not a good idea. Learn what it takes to be…YOUTUBE.COM
29 JanCyber Readiness: Train As You Fight – William Hutchison – BSW #336Join us as we discuss Cyber Readiness: Train As You Fight with guest William Hutchison, CEO and Co-Founder at SimSpace. How do you prepare for a cyber incident? You train as you fight, but in what environment? William "Hutch" Hutchinson, CEO and co-founder of SimSpace, joins BSW …YOUTUBE.COM
29 JanInsurance Broker Notifying 1.5 Million of Health Info HackCalifornia Firm Said August Attack Affected Clients' Data A California insurance broker that handles employee benefits, workers' compensation and property liability is notifying more than 1.5 million individuals about a ransomware/data exfiltration attack last August that involve…DATABREACHTODAY.CO.UK
29 JanKeenan warns 1.5 million people of data breach after summer cyberattackKeenan & Associates is sending notices of a data breach to 1.5 million customers, warning that hackers accessed their personal information in a recent cyberattack. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 25[−]
29 JanTop 3 Cybersecurity Trends for SME Business LeadersGraham Cluley Security News is sponsored this week by the folks at Cynet. Thanks to the team there for their support. As Cynet’s COO, my team and I get to work closely with risk management executives at small-to-medium enterprises (SMEs) around the world. In this piece, I&#…GRAHAMCLULEY.COM
29 JanISC Stormcast For Monday, January 29th, 2024 https://isc.sans.edu/podcastdetail/8828, (Mon, Jan 29th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
29 JanMentorship Monday - Discussions for career and learning!submitted by shellsharks to cybersecurity 1 points | 0 comments Weekly thread for any and all career, learning and general guidance questions. Thinking of taking a training or going for a cert? Wondering how to level up your career? Wondering what NOT to do? Got other questions? …INFOSEC.PUB
29 JanDEEP TECH NEWS: Respecting individual rights by using ‘privacy preserving aggregate statistics’To sell us more goods and services, the algorithms of Google, Facebook and Amazon exhaustively parse our digital footprints. Related: The role of ‘attribute based encryption’ There’s nothing intrinsically wrong with companies seeking to better understand their custome…LASTWATCHDOG.COM
29 JanScarCruft Returns to Target High-Profile Experts in N.KoreaSentinelLabs observed a campaign by ScarCruft actors targeting media organizations and high-profile experts in North Korean affairs. As part of the attack, the group impersonated a North Korea Research Institute member, used the RokRAT backdoor, and harvested threat intelligence …CYWARE.COM
29 JanBastille Networks Raises $44 Million to Secure Wireless DevicesGoldman Sachs leads wireless threat intelligence firm Bastille Networks’ $44 million Series C funding round. The post Bastille Networks Raises $44 Million to Secure Wireless Devices appeared first on SecurityWeek .SECURITYWEEK.COM
29 JanSecurityWeek Analysis: Cybersecurity M&A Dropping, Over 400 Deals Announced in 2023An analysis conducted by SecurityWeek shows that 413 cybersecurity-related mergers and acquisitions were announced in 2023. The post SecurityWeek Analysis: Cybersecurity M&A Dropping, Over 400 Deals Announced in 2023 appeared first on SecurityWeek .SECURITYWEEK.COM
29 JanScammers Use Airdrops to Lure Users With Phony NFTsResearchers at Check Point warn that scammers are using airdrops to distribute phony n on-fungible tokens ( NFTs) that direct users to malicious sites.KNOWBE4.COM
29 JanBravo Channel Host Scammed Out of a “Sizable” Amount of Money by Fraudsters Posing as the BankBravo host Andy Cohen tells how he became the victim of an impersonation scam that gave scammers access to control his bank account.KNOWBE4.COM
29 JanErmac malware: The other side of the codeWhen the Cerberus code was leaked in late 2020, IBM Trusteer researchers projected that a new Cerberus mutation was just a matter of time. Multiple actors used the leaked Cerberus code but without significant changes to the malware. However, the MalwareHunterTeam discovered a new…SECURITYINTELLIGENCE.COM
29 JanZero Trust Summit 2023 - Cloud Security Alliance - 19 talkssubmitted by ashar to security_cpe 1 points | 0 comments https://infosec.pub/pictrs/image/90c7c2e0-e556-4e7a-9e55-054d724a6248.png Zero Trust Summit 2023 playlist Zero Trust Summit 2023 AgendaINFOSEC.PUB
29 JanVulnerabilities in WatchGuard, Panda Security Products Lead to Code ExecutionTwo memory safety vulnerabilities in WatchGuard and Panda Security products could lead to code execution with System privileges. The post Vulnerabilities in WatchGuard, Panda Security Products Lead to Code Execution appeared first on SecurityWeek .SECURITYWEEK.COM
29 Jan“Scammers Paradise” —Exploring Telegram’s Dark Markets, Breeding Ground for Modern Phishing Operationssubmitted by L4s to secops 1 points | 0 comments https://labs.guard.io/scammers-paradise-exploring-telegrams-dark-markets-breeding-ground-for-modern-phishing-a2225e51898e “Scammers Paradise” —Exploring Telegram’s Dark Markets, Breeding Ground for Modern Phishing Operations::undef…LABS.GUARD.IO
29 JanForget Deepfake Audio and Video. Now There’s AI-Based Handwriting!Researchers have developed AI technology that can mimic someone’s handwriting with only a few paragraphs of written content. Experts worry about the possibility of misuse.KNOWBE4.COM
29 JanMalvertising Targets Chinese-Speaking UsersResearchers at Malwarebytes warn that a malvertising campaign is targeting Chinese-speaking users with phony ads for encrypted messaging apps. The ads impersonate apps that are restricted in China, such as Telegram or LINE.KNOWBE4.COM
29 JanControl D Launches Control D for Organizations: Democratizing Cybersecurity for Organizations of All SizesIn an era where online threats no longer discriminate by business size, Control D, powered by Windscribe VPN‘s robust security expertise, announced today the launch of ‘Control D for Organizations‘. This cutting-edge DNS service brings cybersecurity within reach…GBHACKERS.COM
29 JanYour Firewalls and Proxies are about to be blind to real TLS destinations: Learn about Encrypted Client Hellosubmitted by L4s to secops 1 points | 0 comments https://docs.broadcom.com/doc/symantec-ech-whitepaper Your Firewalls and Proxies are about to be blind to real TLS destinations: Learn about Encrypted Client Hello::undefinedDOCS.BROADCOM.COM
29 JanJoin us at InfoSec Jupyterthon 2024Jupyter notebooks are continuing to grow in popularity in information security as an alternative or supplement to mainstream security operations center (SOC) tools. Notebooks can be used interactively for threat detection and response, or as automated tasks in a larger pipeline. …MICROSOFT.COM
29 JanBest practices in moving to cloud native endpoint managementThis blog is the second of three that details our recommendation to adopt cloud native device management. Understand the lessons from various Intune customers in their journeys and how they achieved greater security, cost savings, and readiness for the future through their cloud …MICROSOFT.COM
29 JanYear of the CISO as CISOs Struggle for C-Suite Status and Expectations Skyrocket - BSW #336In the leadership and communications section, A tougher balancing act in 2024, the year of the CISO, CISOs Struggle for C-Suite Status Even as Expectations Skyrocket, Want to Be a Better Leader? Stop Thinking About Work After Hours, and more! Visit https://www.securityweekly.com/…YOUTUBE.COM
29 JanCyber: The Swiss army knife of tradecraftIn today’s digitally interconnected world, advanced cyber capabilities have become an exceptionally potent and versatile tool of tradecraft for nation-states and criminals alikeWELIVESECURITY.COM
29 JanWhitesnake | Outlook | NSA | Juniper | Jason Wood & More! – SWN358This week Doug talks: Google, Whitesnake, Outlook, NSA, Juniper, Jason Wood, and more are on this edition of the Security Weekly News. →Full Show Notes: https://securityweekly.com/swn358 →Join the Security Weekly Discord Server: https://discord.gg/pqSwWm4 →Visit our website: http…YOUTUBE.COM
29 JanClosing The Supply Chain Visibility Gap - BTS #23In this edition of Below The Surface, we discuss Closing The Supply Chain Visibility Gap, with Olga Livingston . This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! →Full Show Notes: https://securityweekly.com/bts23YOUTUBE.COM
29 JanNews | Identifying Bad By Defining Good - PSW8156:00pm ET - Security News 7:00pm ET - Danny Jenkins This week, we kick things off by discussing the security news for the week. Then we discuss Identifying Bad By Defining Good with Danny Jenkins, CEO & Co-Founder at ThreatLocker. Then we discuss the security news for the week. →…YOUTUBE.COM
29 JanThe Elephant in the Pipeline: Securing the Wild, Untamed Software Supply Chain | News - ESW348This week, we kick things off with an interview with Pete Morgan, Co-founder and CSO at Phylum.io, about The Elephant in the Pipeline: Securing the Wild, Untamed Software Supply Chain . Then, we finish off with the weekly enterprise news. →Full Show Notes: https://www.securitywee…YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 6[−]
29 JanMalicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows MachinesThese packages target Windows systems and Linux hosts, with the Windows payload being a variant of WhiteSnake malware capable of stealing information and executing commands.THEHACKERNEWS.COM
29 Jan493 Companies Share Their SaaS Security Battles – Get Insights in this WebinarIn today's digital world, security risks are more prevalent than ever, especially when it comes to Software as a Service (SaaS) applications. Did you know that an alarming 97% of companies face serious risks from unsecured SaaS applications?Moreover, about 20% of these organizati…THEHACKERNEWS.COM
29 JanRiding the AI Waves: The Rise of Artificial Intelligence to Combat Cyber ThreatsIn nearly every segment of our lives, AI (artificial intelligence) now makes a significant impact: It can deliver better healthcare diagnoses and treatments; detect and reduce the risk of financial fraud; improve inventory management; and serve up the right recommendation for a s…THEHACKERNEWS.COM
29 JanA TrickBot malware developer sentenced to 64 months in prisonVladimir Dunaev was extradited to the US in October 2021 and pleaded guilty to charges related to computer fraud and identity theft. He developed malicious tools that aided in data theft and fraud, resulting in millions of dollars in losses.SECURITYAFFAIRS.COM
29 JanLive Webinar | Europe Under Siege: State-Backed Cyber Threats Unleash Malware - AI's Tactical ResponseDATABREACHTODAY.CO.UK
📡 INFOSEC NEWS 13[−]
29 JanIndian state government fixes website bugs that exposed residents’ sensitive documents and personal informationAn Indian state government has fixed security issues impacting its website that exposed the sensitive documents and personal information of millions of residents. The bugs existed on the Rajasthan government website related to Jan Aadhaar, a state program to provide a single iden…TECHCRUNCH.COM
29 JanNSA Admits Secretly Buying Your Internet Browsing Data without WarrantsThe U.S. National Security Agency (NSA) has admitted to buying internet browsing records from data brokers to identify the websites and apps Americans use that would otherwise require a court order, U.S. Senator Ron Wyden said last week. "The U.S. government should not be funding…THEHACKERNEWS.COM
29 JanPopular Washington, DC Latino Theater Whole Again After Hack Emptied AccountsHackers stole over $250,000 from the GALA Hispanic Theatre in Washington, D.C. by compromising their bank account in a BEC attack. An accountant was locked out of the system after initiating a wire transfer, and the entire account was emptied.THERECORD.MEDIA
29 JanSaudi Arabia Boosts Railway CybersecurityThe railway network, spanning 4,500 kilometers in Saudi Arabia, faces challenges in securing its legacy and modern technologies, especially with the introduction of IoT signaling and communication systems.DARKREADING.COM
29 JanBastille Raises $44M Series C Investment Led by Goldman Sachs Asset ManagementBastille Networks, Inc. has secured a $44 million Series C investment led by Growth Equity at Goldman Sachs Asset Management, with participation from existing investor Bessemer Venture Partners.DARKREADING.COM
29 JanMicrosoft Teams hit by second outage in three daysMicrosoft is investigating a second outage affecting Microsoft Teams users across North and South America in the last three days. [...]BLEEPINGCOMPUTER.COM
29 JanDHS employees jailed for stealing data of 200K U.S. govt workersThree former Department of Homeland Security (DHS) employees were sentenced to prison for stealing proprietary U.S. government software and databases containing the personal data of 200,000 federal employees. [...]BLEEPINGCOMPUTER.COM
29 JanFBI: Tech support scams now use couriers to collect victims' moneyToday, the FBI warned about courier services being used to collect money and valuables from victims of tech support and government impersonation scams. [...]BLEEPINGCOMPUTER.COM
29 JanMicrosoft says Outlook apps can’t connect to Outlook.comMicrosoft is investigating an issue that prevents Outlook and other email clients from connecting when using an Outlook.com account. [...]BLEEPINGCOMPUTER.COM
29 JanSAFECOM Membership Spotlight: Major Darryl Anderson, SAFECOM At-Large (Stark County Sheriff’s Office)CISA.GOV
29 JanBe the Royal Family’s Cybersecurity Manager, and get a cut-price honey dipper!Fancy a high-profile cybersecurity job? Here's one for you. Role: Cyber Security Manager. Location: Buckingham Palace.GRAHAMCLULEY.COM