News

CyberArk (NASDAQ: CYBR), the global leader in privileged access security, today announced ground-breaking new capabilities to simplify the continuous discovery and protection of privileged accounts in cloud environments. The CyberArk Privileged Access Security Solution v10.8 is the first-of-its-kind to automate detection, alerting and response for unmanaged and potentially-risky Amazon Web Services (AWS) accounts. This version also features new industry-leading Just-in-Time capabilities that deliver flexible user access to cloud-based or on-premises Windows systems. According to Gartner,...

Dalil, an Android app that provides caller ID services similar to Truecaller but for Saudi and other Arabian users, has been leaking user data for a week because of a MongoDB database that has been left accessible online without a password.Discovered by security researchers Ran Locar and Noam Rotem, the database contains what appears to be the app's entire data, from user personal details to activity logs. Source: ZDNet

Mobile users have been targeted by almost twice as many attacks using malicious software during 2018, going up from 66.4 million in 2017 events detected during 2017 to 116.5 million until the end of last year according to a report by Kaspersky Lab.Despite this large increase in the number of malicious mobile software attacks, only 5,321,142 installation packages containing malware samples were identified throughout the entire year, down 409,774 when compared to the 2017 stats. Source: Bleeping Computer

A new Ransomware-as-a-Service called Jokeroo is being promoted on underground hacking sites and via Twitter that allows affiliates to allegedly gain access to a fully functional ransomware and payment server.A Ransomware-as-a-Service is when a developer creates a ransomware and a payment site and allows affiliates to sign up and distribute the ransomware. As part of this deal, the affiliates and the developer will split the payments that are received from victims. Source: Bleeping Computer

Attack traffic observed by F-Secure’s network of decoy honeypots in 2018 increased by 32 percent over the previous year and increased fourfold in the latter half of 2018 compared with the first half of the year, the Finnish cybersecurity company has shared. Source: Help Net Security

There is no dearth of compromised, fake and forged SSL/TLS certificates for sale on dark web markets, researchers have found.TLS certificates are sold individually and packaged with a wide range of crimeware. Together these services deliver machine-identities-as-a-service to cybercriminals who wish to spoof websites, eavesdrop on encrypted traffic, perform man-in-the-middle attacks and steal sensitive data. Source: Help Net Security

HACKERS are offering software to drone owners who want to bypass "no fly zone" technology.Anyone can easily find these websites in just a few clicks on Google – and then crack their drones to remove vital safety features. Source: The Sun

Government critics hit by wave of digital attacks coinciding with political events such as Macron’s visit. ‘These digital attacks appear to be part of a sustained campaign to intimidate and silence critics of the Egyptian government’ - Ramy Raoof. A new investigation by Amnesty International has revealed that dozens of Egyptian human rights defenders have been targeted by phishing attacks since the beginning of this year, putting them in grave danger amid the government’s intensifying crackdown in...

Alert Logic, the SIEMless Threat Management™ company, has today announced that it has added a new extended endpoint protection capability along with other new capabilities for anti-virus integration, log collection and search for Office 365, Microsoft Azure Event Hubs integration, user behaviour anomaly detection for Amazon Web Services (AWS) environments, and dark web scanning. This expanded attack surface coverage enriches Alert Logic’s offering with even greater detection and protection support along with enhanced visibility across...

CrowdStrike® Inc., the leader in cloud-delivered endpoint protection, today announced CrowdStrike Falcon® for Mobile, the first enterprise endpoint detection and response (EDR) solution for mobile devices. Based on CrowdStrike’s proven EDR technology for enterprise endpoints, Falcon for Mobile enables security teams to hunt for advanced threats on mobile devices and provides unprecedented visibility into malicious, unwanted, or accidental access to sensitive corporate data, while protecting user privacy and without impacting device performance. Leveraging CrowdStrike’s cloud-native...