Cyber Defense Advisors

News

  • by
  • November 10, 2022

Lacework releases cloud-native application security service

Cloud security vendor Lacework this week announced the availability of a cloud-native application protection platform (CNAPP) for its broader Polygraph Data Platform offering, providing an agentless, low-touch option for organizations looking to improve their application security posture. There are two main components to the CNAPP release, according to Lacework, both of which require only that […]

Cyber News, Cyber Threat Trends
  • by
  • November 10, 2022

S3 Ep108: You hid THREE BILLION dollars in a popcorn tin?

Patches, busts, leaks and why even low-likelihood exploits can be high-severity risks – listen now!

Cyber News, Cyber Threat Trends
  • by
  • November 10, 2022

Lawsuit Seeks Food Benefits Stolen By Skimmers

A nonprofit organization is suing the state of Massachusetts on behalf of thousands of low-income families who were collectively robbed of more than a $1 million in food assistance benefits by card skimming devices secretly installed at cash machines and grocery store checkout lanes across the state. Federal law bars states from replacing these benefits […]

Cyber News, Cyber Threat Trends

#IRISSCON: Police Officer Urges More Reporting and Engagement to Tackle Cybercrime

Ireland’s National Cyber Crime Bureau outlines cybercrime trends being observed in law enforcement

Cyber News, Cyber Threat Trends

New Lenovo Notebook Models Affected By UEFI Firmware Vulnerabilities

The flaws affect various Lenovo Yoga, IdeaPad and ThinkBook devices

Cyber News, Cyber Threat Trends

Qualys Security Conference 2022: Corralling horses in an expanding edge rodeo

It wasn’t a “Day of Anger” as Qualys used the final leg of its multi-city conference series to discuss the control of edge assets. The post Qualys Security Conference 2022: Corralling horses in an expanding edge rodeo appeared first on TechRepublic.

Cyber News, Cyber Threat Trends
  • by
  • November 10, 2022

Hacker Rewarded $70,000 for Finding Way to Bypass Google Pixel Phones’ Lock Screens

Google has resolved a high-severity security issue affecting all Pixel smartphones that could be trivially exploited to unlock the devices. The vulnerability, tracked as CVE-2022-20465 and reported by security researcher David Schütz in June 2022, was remediated as part of the search giant’s monthly Android update for November 2022. “The issue allowed an attacker with physical access to bypass

Cyber News, Cyber Threat Trends

An Untrustworthy TLS Certificate in Browsers

The major browsers natively trust a whole bunch of certificate authorities, and some of them are really sketchy: Google’s Chrome, Apple’s Safari, nonprofit Firefox and others allow the company, TrustCor Systems, to act as what’s known as a root certificate authority, a powerful spot in the internet’s infrastructure that guarantees websites are not fake, guiding […]

Cyber News, Cyber Threat Trends

Update your Lenovo laptop’s firmware now! Flaws could help malware survive a hard disk wipe

PC manufacturer Lenovo has been forced to push out a security update to more than two dozen of its laptop models, following the discovery of high severity vulnerabilities that could be exploited by malicious hackers. Security researchers at ESET discovered flaws in 25 of its laptop models – including IdeaPads, Slims, and ThinkBooks – that […]

Cyber News, Cyber Threat Trends