September 2021 - Page 5 of 6 - Cyber Security Minute

NTLM relay attacks explained, and why PetitPotam is the most dangerous

Issued by: CSO

Microsoft Active Directory (AD), which handles identity management, reportedly holds 90% to 95% market share among fortune 500 companies. Given such broad adoption, it is no surprise that it is so heavily targeted by malicious actors and researchers alike. Among the most cited types of attacks against AD are legacy protocols. One such protocol that…

Software Security

12 database security landmines, failures, and mistakes that doom your data

Issued by: CSO

In most enterprise stacks today, the database is where all our secrets wait. It’s part safe house, ready room, and staging ground for the bits that may be intensely personal or extremely valuable. Defending it against all incursions is one of the most important jobs for the database administrators, programmers, and DevOps teams that rely…

Mobile Security

Installing unknown apps in Android: a safety guide

Issued by: Kaspersky Blog

For Android users, installing applications from Google Play, and Google Play only, is the wise choice. With its strong safety rules, official app monitoring, plentiful user reviews, and security researcher scrutiny, Android’s official store tends to be a safe place for downloading apps. Even when malware does make it to Google Play, it is quickly…

Network Security

Lack of C3PAO assessors jeopardizes DoD CMMC certification goal

Issued by: CSO

If you do business with the Department of Defense (DoD), then the Cybersecurity Maturity Model Certification (CMMC) is known to you. The Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) approved the first company to become a certified assessor in May 2021. Since then, three additional companies have been approved. That’s it. Four companies have been…

Network Security

5 steps to improve security on network PCs that can’t run Windows 11

Issued by: CSO

Microsoft’s revised hardware specifications for the upcoming Windows 11 release on October 5 don’t change the fact that I’m stuck on Windows 10 for most of the machines in my network. Microsoft has expanded its testing application to include a few more processors that support Windows 11 (Intel Core X-series, Xeon W-series, and some Intel…

Malware & Threats

4 Ransomware Defense Best Practices

Issued by: CyberArk Blog

Ransomware has never been more prevalent — or profitable — than it is right now. What started as the exclusive domain of highly skilled and opportunistic bad actors has evolved into an underground industry in which virtually anyone can get their hands on pre-built tool kits and plans to launch ransomware attacks at an alarming pace. Many…

Application Security

Ad Fraud Protection Firm Pixalate Raises $18.1 Million

Issued by: Security Week

The company plans to use the new funds to expand its portfolio to support data privacy and compliance risks – with a focus on regulations such as GDPR, CCPA, and the Children’s Online Privacy Protection Act (COPPA) –, and to expand its global presence. Pixalate LogoFounded in 2012 and headquartered in Santa Monica, California, Pixalate…

Malware & Threats

Germany Protests to Russia Over Pre-Election Cyberattacks

Issued by: Security Week

Foreign Ministry spokeswoman Andrea Sasse said that a hacker outfit called Ghostwriter has been “combining conventional cyberattacks with disinformation and influence operations,” and that activities targeting Germany have been observed “for some time.” She said that, ahead of Germany’s parliamentary election on Sept. 26, there have been attempts – using phishing emails, among other things…

Network Security

CISO Conversations: The Difference Between Securing Cities and Businesses

Issued by: Security Week

A city is vastly different from a commercial company. We wanted to learn if a city CISO needs to be similarly different to a private sector CISO. SecurityWeek spoke to two city CISOs, from the City of Tampa, and from Tallahassee. Martin Zinaich heads cybersecurity at Tampa – the 47th city in the U.S., with…

Software Security

Apple Announces Delay of Child Protection Measures

Issued by: Security Week

The Silicon Valley giant had last month said iPhones and iPads would soon start detecting images containing child sexual abuse and reporting them as they are uploaded to its online storage in the United States. However, digital rights organizations quickly noted the tweaks to Apple’s operating systems create a potential “backdoor” into gadgets that could…