5971 matches found
Lock and Code S1Ep8: Securely working from home (WFH) with John Donovan and Adam Kujawa
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to John Donovan, head of security at Malwarebytes, and Adam Kujawa, director of Malwarebtyes Labs, about securely working from home WFH. With shelter-in-pla...
The vulnerability of Thunderbolt device microcontrollers, related to the lack of protection at the “Work Camp” level, allows a intruder to gain direct access to the memory of computing devices to which Thunderbolt-enabled devices are connected.
The vulnerability of Thunderbolt device microcontrollers is related to the lack of protection at the “Work Camp” level. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt devices are connected...
Enterprise Mobile Phishing Attacks Skyrocket Amidst Pandemic
The rate of mobile phishing rose sharply between the last quarter of 2019 and the first quarter of 2020, a boost most likely due to the increased number of people working from home due to COVID-19 stay-at-home orders, new research has found. In fact, encounter rates for enterprise mobile phishing...
The vulnerability of the disct_gssapi_work function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the disctgssapiwork function in the Wireshark network traffic analyzer program is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
work-question.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177425 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
4 identity partnerships to help drive better security
At Microsoft, we are committed to driving innovation for our partnerships within the identity ecosystem. Together, we are enabling our customers, who live and work in a heterogenous world, to get secure and remote access to the apps and resources they need. In this blog, we’d like to highlight ho...
21 Tips to Stay Secure, Private, and Productive as You Work from Home on Your Mac
Nowadays, Macs are part of the work-from-home workforce during the COVID-19 pandemic. If you’ve brought a Mac from the office to home, it’s likely your IT department has already set it up to meet your company’s security policies. But what if you’re enlisting a Mac already at home to do duty for...
Zero Trust and its role in securing the new normal
As the global crisis around COVID-19 continues, security teams have been forced to adapt to a rapidly evolving security landscape. Schools, businesses, and healthcare organizations are all getting work done from home on a variety of devices and locations, extending the potential security attack...
farm-work-hina.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1172210 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, is related to deficiencies in access control. Exploiting this vulnerability could allow an...
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, is related to deficiencies in access control. Exploiting this vulnerability could allow an...
Game-based learning platform provides full immersion into cybersecurity
Working and learning have gone remote, and we have to come to terms with this new reality. Nowadays, several organizations allow their staff to work from home permanently. Most universities consider reducing classroom time wherever possible, and now we are seeing the demand for online courses sky...
stuvia.co.za Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1167781 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
How Cybersecurity Enables Government, Health, EduTech Cope With COVID-19
The advent of the Covid-19 pandemic and the impact on our society has resulted in many dramatic changes to how people are traveling, interacting with each other, and collaborating at work. There are several trends taking place as a consequence of the outbreak, which has only continued to heighten...
Remote Workforce is NOT the New Norm, but “Secure Work Anywhere” Should Be
Secure Work Anywhere SWA is a new term for an old idea that is quickly becoming an industry standard. The overall principles of SWA are not new, but the risks associated with increased rates of workers connecting from potentially unsecure networks highlight the importance of those principles now...
The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.
The vulnerability of the Work Folder Service service in Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Busting the Myths of Remote Workforce Security
This is part of our ongoing conversation about the worldwide challenges of working remotely. To stay up-to-date on the latest insights, refer to our live page for COVID-19: Cybersecurity Community Resources. I’ve attended a bunch of executive CISO roundtables over the past few weeks all focused o...
Operational resilience in a remote work world
Microsoft CEO Satya Nadella recently said, “We have seen two years’ worth of digital transformation in two months.” This is a result of many organizations having to adapt to the new world of document sharing and video conferencing as they become distributed organizations overnight. At Microsoft, ...
Beers with Talos Ep. #80: Working securely in a new (not yet) normal
Beers with Talos BWT Podcast episode No. 80 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded April 24, 2020 Matt isn’t with us today, but the rest of the crew discusses some current security issues in our...
From Bugs to Zoombombing: How to Stay Safe in Online Meetings
The COVID-19 pandemic, along with social distancing, has done many things to alter our lives. But in one respect it has merely accelerated a process begun many years ago. We were all spending more and more time online before the virus struck. But now, forced to work, study and socialize at home,...