Security News from around the web

by Talos Group on September 25, 2020 at 20:23

Today, Talos is publishing a glimpse into the most prevalent threats we’ve observed between September 18 and September 25. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behavioral characteristics, indicators of compromise, and discussing how our customers are The post Threat Roundup for September 18 to September 25 appeared first on Cisco Blogs.

by Paul Ducklin on September 25, 2020 at 15:39

Windows XP source code! Fair game to take a peek, or best to look away?

by Taylor Palmer on September 25, 2020 at 15:00

You keep hearing that applications are difficult to secure - but why? Take a deep dive into the world of application development. The post Why Are Applications Difficult to Secure? appeared first on Cisco Blogs.

by Hanna Jabbour on September 25, 2020 at 15:00

Stealthwatch’s Response Manager has been moved to the web-based UI and modernized to offer new ways to share and respond to alarms with customizable rules and actions to automate remediation. The post Automated response with Cisco Stealthwatch appeared first on Cisco Blogs.

by Editor on September 25, 2020 at 14:30

Bug let hijack Firefox browsers on other phones over Wi-Fi – NIST's new tool to help firms understand why staff fall for phishing – Almost 200 arrested in dark web crackdown The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

by BrianKrebs on September 25, 2020 at 13:21

John Bernard, the subject of a story here last week about a self-proclaimed millionaire investor who has bilked countless tech startups, appears to be a pseudonym for John Clifton Davies, a U.K. man who absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to his conviction, Davies served 16 months in jail before being cleared of murdering his wife on their honeymoon in India.

by Amer Owaida on September 25, 2020 at 09:30

As cloud storage solutions are becoming more and more popular, we look at several simple steps you can take to secure your files on Google Drive The post 5 tips for better Google Drive security appeared first on WeLiveSecurity

by Stuart Clark on September 24, 2020 at 20:20

In this part of Khaled Abuelenain's series you'll learn about NETCONF and eXtensible Markup Language (XML). The post Introduction to Programmability – Part 2 appeared first on Cisco Blogs.

by Paul Ducklin on September 24, 2020 at 18:59

If you got someone else's "free offer" in what looked like a misdirected message, would you take a peek?

by Divya Rao on September 24, 2020 at 18:00

Model-Driven Telemetry Telemetry is used to subscribe to meaningful data and measurements from remote devices and transport it to a receiving system for monitoring and analysis. This data allows network administrators to proactively visualize their network, and helps them automate tasks and forecast capacity requirements. When we talk about streaming telemetry, we typically refer to The post Telemetry in Action: NETCONF and gNMI with a Custom-Built Collector! appeared first on Cisco Blogs.

by Hazel Burton on September 24, 2020 at 17:45

Hear Chris Leach's journey from accountant to CISO, as well as a rewatch of the film Hackers to celebrate its 25th anniversary! The post Challenging the Status Quo, and Conquering the Fear of Failure appeared first on Cisco Blogs.

by BrianKrebs on September 24, 2020 at 17:00

Microsoft warned on Wednesday that malicious hackers are exploiting a particularly dangerous flaw in Windows Server systems that could be used to give attackers the keys to the kingdom inside a vulnerable corporate network. Microsoft's warning comes just days after the U.S. Department of Homeland Security issued an emergency directive instructing all federal agencies to patch the vulnerability by Sept. 21 at the latest.

by Dug Song on September 24, 2020 at 16:57

Cisco has been named a leader in the 2020 Forrester Zero Trust Wave. Thank you to our partners and customers for helping us push the envelope and trusting us. The post Pushing the Zero Trust Envelope – Cisco is Named a Leader in the 2020 Forrester Zero Trust Wave appeared first on Cisco Blogs.

by Nick Larison on September 24, 2020 at 16:30

I’m excited to share a few more details about the training— the first global partner training available in the program—and invite other ecosystem partners to create their own Black Belt Academy courses. The post Black Belt Academy Training for Partners and Distribution is Exciting— Ask Imagicle appeared first on Cisco Blogs.

by Amer Owaida on September 24, 2020 at 16:04

There is no evidence that cybercriminals were also able to steal customer data The post Ray‑Ban parent company reportedly suffers major ransomware attack appeared first on WeLiveSecurity