C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 12/20

- Roderick Mooi

  1. 6 ways attackers are exploiting the COVID-19 crisis [Dan Swinhoe, CSO / IDG Communications]
  2. SANS Security Awareness Work-from-Home Deployment Kit [SANS Institute]
    - see also: Working from Home during COVID-19? What You and Your Organization Need to Consider
  3. COVID-19: With everyone working from home, VPN security has now become paramount [Catalin Cimpanu, Zero Day / CBS Interactive]
    - see also: Alert (AA20-073A) – Enterprise VPN Security
  4. Preventing Eavesdropping and Protecting Privacy on Virtual Meetings [Jeff Greene, NIST NCCoE]
    - see also: List of Free Software and Services During Coronavirus Outbreak
  5. How coronavirus COVID-19 is accelerating the future of work [Larry Dignan, Zero Day / CBS Interactive]
  6. They Come in the Night: Ransomware Deployment Trends [Kelli Vanderlee, FireEye]
    - see also: Human-operated ransomware attacks: A preventable disaster
  7. There Are Plenty of Phish in the Sea [Alastair Paterson, SecurityWeek / Wired Business Media]
    - see also: Phishing Victims From a CDN’s Point of View
  8. RiskSense Spotlight Report Finds WordPress and Apache are Most Weaponized Web and Application Frameworks [RiskSense]
    - see also: WordPress to add auto-update feature for themes and plugins
  9. Shadowserver 2020 Urgent Need – Just The Summary [Shadowserver]
  10. Making the case for hardware 2FA in the enterprise [J.M. Porup, CSO / IDG Communications]
    - see also: Enroll security keys on more devices
  11. Hacking a network, using an ‘invisibility cloak’ – Is it that simple? [Pierluigi Paganini / Sepio Systems, Security Affairs]
  12. The Biggest Gap in Cybersecurity is Empathy [Jack Danahy, Alert Logic]