BuzzSec

People need to be on the lookout for phishing attacks sent from legitimate but compromised social media accounts, according to Paul Ducklin at Naked Security. Ducklin describes a scam sent in by a reader who received an unexpected message from one of their Facebook friends. The message said, “Hi [name]. Hope you’re all well. Do you use online banking? I need help paying a bill.” The recipient recognized that it was a scam, but continued the conversation to find out what the scammer would say. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/a-friend-needs-money-urgently-youre-probably-getting-scammed

I am catching up with the cyber attacks timelines for this troubled 2020, which has nearly come to an end. I am happy to publish the first timeline of December, covering the most important events occurred in the first two weeks of this month. Before going into the details let me say that you will hopefully note a change. Starting from this timeline, I have decided to report three different dates for each event... from HACKMAGEDDON https://www.hackmageddon.com/2020/12/28/1-15-december-2020-cyber-attacks-timeline/

Here are important fresh content updates to share with you that happened in the month of December. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/knowbe4-fresh-content-updates-from-december-including-new-2021-knowbe4-flagship-training-modules

Recent news articles have all been talking about the massive Russian cyberattack against the United States, but that’s wrong on two accounts. It wasn’t a cyberattack in international relations terms, it was espionage. And the victim wasn’t just the US, it was the entire world. But it was massive, and it is dangerous. Espionage is internationally allowed in peacetime. The problem is that both espionage and cyberattacks require the same computer and network intrusions, and the difference is only a few keystrokes. And since this Russian operation isn’t at all targeted, the entire world is at risk — and not just from Russia. Many countries carry out these sorts of operations, none more extensively than the US. The solution is to prioritize security and defense over espionage and attack. Here’s what we know: Orion is a network management product from a company named SolarWinds, with over 300,000 customers worldwide. Sometime before March, hackers working for the Russian SVR — previousl...

from SANS Institute | Newsletters - Newsbites - RSS https://www.sans.org/newsletters/newsbites/xxii/100

OK, let's sum up where we are, here at the end of December 2020. COVID has propelled IT from 2020 to 2030 in a matter of months. However, only a few of us were ready to have the large majority of our users to Work From Home. Your old firewall is useless. The hardware endpoint with its software security stack now sits in your user's bedroom. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/heads-up-heres-some-powerful-ammo-to-grab-more-of-your-end-of-year-infosec-budget

A ten-foot giant squid has washed ashore on the Western coast of Japan. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here . from Schneier on Security https://www.schneier.com/blog/archives/2020/12/friday-squid-blogging-small-giant-squid-washes-ashore-in-japan.html