BuzzSec

Email security is in transition, from on-premises to the cloud, from inline to API-based, and from stand-alone to integrated into XDR. New research from Omdia highlights where the market is today, and where it is heading. from Dark Reading https://www.darkreading.com/omdia/research-highlights-significant-evolution-in-email-security

Scammers are using shortened LinkedIn URLs to disguise phishing links, according to Jeremy Fuchs at Avanan. LinkedIn automatically shortens links that are longer than 26 characters. The URL is shortened to a “lnkd.in” link followed by several characters. Attackers are abusing this feature to avoid detection by users and security filters. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/new-tactic-shortened-linkedin-urls-are-now-used-as-phish-hooks

Good article about the current state of cryptocurrency forensics. from Schneier on Security https://www.schneier.com/blog/archives/2021/09/tracking-stolen-cryptocurrencies.html

While most US adults know they aren't sufficiently protecting their data online, many find security time-consuming or don't know the steps they should take. from Dark Reading https://www.darkreading.com/risk/consumers-share-security-fears-as-risky-behaviors-persist

This isn’t the first time I’ve received an e-mail like this: Hey! I’ve done my research and looked at a lot of facts and old forgotten archives. I know that you are Satoshi, I do not want to tell anyone about this. I just wanted to say that you created weapons of mass destruction where niches remained poor and the rich got richer! When bitcoin first appeared, I was small, and alas, my family lost everything on this, you won’t find an apple in the winter garden, people only need strength and money. Sorry for the English, I am from Russia, I can write with errors. You are an amazingly intelligent person, very intelligent, but the road to hell is paved with good intentions. Once I dreamed of a better life for myself and my children, but this will never come … I like the bit about “old forgotten archives,” by which I assume he’s referring to the sci.crypt Usenet group and the Cypherpunks mailing list . (I posted to the latter a lot, and the former rarely.) For the record, I am not Sa...

from CISA All NCAS Products https://us-cert.cisa.gov/ncas/current-activity/2021/09/24/google-releases-security-updates-chrome

Hundreds of thousands of email credentials, many of which double as Active Directory domain credentials, came through to credential-trapping domains in clear text. from Threatpost https://threatpost.com/exchange-outlook-autodiscover-bug-spills-100k-email-passwords/175004/