-
Making Products for Fun and (Probably No) Profit
If you’re like most makers, you have a few product ideas kicking about, but you may not have made it all the way to production of those things. If you’re thinking about making the leap, [Simone Giertz] recently discussed all the perils and pitfalls of the process from idea to reality. The TLDR is that…
-
Regulatory Requirements and Best Practices for Third-Party Network Configuration Reviews
The security of an organization’s network infrastructure is paramount. Routers, switches, and wireless configurations serve as the backbone of enterprise networks, facilitating seamless communication and data flow. However, if not properly configured and regularly assessed, these critical components can become vulnerable entry points for cyber threats. Engaging third-party assessors to conduct regular configuration reviews across…
-
macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed
DPRK ‘Contagious Interview’ campaign continues to target Mac users with new variants of FERRET malware and Github devs with repo spam. Last week Apple pushed a signature update to its on-device malware tool XProtect to block several variants of what it called the macOS Ferret family: FROSTYFERRET_UI, FRIENDLYFERRET_SECD, and MULTI_FROSTYFERRET_CMDCODES. This DPRK-attributed malware family was…
-
Buying Tickets for Beyoncé’s Cowboy Carter Tour? Don’t Let Scammers Ruin Your Experience
Beyoncé has officially announced her Cowboy Carter world tour, and the excitement is through the roof! With her last tour selling out in record time, fans know they need to act fast to secure their tickets. Unfortunately, that urgency is exactly what scammers prey on. In 2022 alone, Americans lost nearly $8.8 billion to fraud,…
-
How to Make Sure Your Gmail Account is Protected in Light of Recent AI Scams
The rise of AI-driven cyber threats has introduced a new level of sophistication to phishing scams, particularly those targeting Gmail users. Criminals are using artificial intelligence to create eerily realistic impersonations of Google support representatives, Forbes recently reported. These scams don’t just rely on misleading emails; they also include convincing phone calls that appear to…
-
Sharks of DigitalOcean: Vasily Prokopov, Staff Solutions Engineer
When Vasily Prokopov first came across DigitalOcean, one thing immediately stood out to him: DO Love. “How often do you find a company that lists love as one of its core values?” he thought. Fast forward to today, Vasily is thriving as a Staff Solutions Engineer in Amsterdam, Netherlands, where that same value shapes every…
-
New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong
I would be the last one to provide scammers with good ideas, but as a security provider, sometimes we need to think like criminals to stay ahead in the race. Recently, the US Postal Service (USPS) announced that it would suspend inbound packages from China and Hong Kong until further notice. That further notice, it…
-
University site cloned to evade ad detection distributes fake Cisco installer
There is a constant “cat and mouse” game between defenders and attackers, the latter trying to outsmart and get a head start on the former. In the context of online advertising, this involves creating fake identities or using stolen ones to push out malicious ads. An attacker not only needs to evade detection but also…
-
Small business owners, secure your web shop
An online shop is more than just another way to sell your products. It comes with a responsibility to keep the web shop secure. Cybercriminals are looking to steal your customers’ credit card details, their personal data, and even your revenue. And it’s not as if using a platform that is used by major retailers…
-
Valley News Live exposed more than a million job seeker’s resumes
Making your own bad news is not what Valley News Live had in mind, but negligence comes at a price. Cybernews researchers found an unprotected AWS S3 bucket that belongs to Take Valley News Live, a North Dakota-based television station. Gray Television, the owner of Valley News Live, makes for the third largest broadcasting company…