Top news of the week: 22.04.2020.

#ISC2 #IoT #security #infosec #NIST #Section5 #settlement #NorthKorea #TBT #Research

Companies And Services

On Apr 15, 2020
@wbm312 shared
RT @josephfcox: New: hackers are trying to sell two critical zero-day exploits for Zoom's Windows and MacOS clients. The Windows one allows RCE, letting a hacker potentially break into a target's computer, and is going for $500,000 https://t.co/wZNAH3XpzU https://t.co/EDfn6sUe6i
Open

Hackers Are Selling a Critical Zoom Zero-Day Exploit for $500,000

Hackers Are Selling a Critical Zoom Zero-Day Exploit for $500,000

People who trade in zero-day exploits say there are two Zoom zero-days, one for Windows and one for MacOS, on the market.

On Apr 16, 2020
@gregotto shared
It's not a failure of deterrence when the U.S. government has told people/companies for years that NK won't/doesn't care about being called out for its hacking operations https://t.co/YUoxJHl3qA
Open

FBI to private industry: Attribution won’t deter North Korean hacking

FBI to private industry: Attribution won’t deter North Korean hacking

The FBI has told American companies that North Korean government hackers will continue to target financial institutions worldwide despite the U.S. government’s public attribution of such ...

On Apr 16, 2020
@gregotto shared
Didn't expect to throw a Shakespeare reference into a headline today but every day is a journey!!!!! https://t.co/HjpUmb4xuf
Open

What fools these mortals be: 'Shakespearean' hackers hit Azerbaijani government and energy sectors

What fools these mortals be: 'Shakespearean' hackers hit Azerbaijani government and energy sectors

Attackers are using a new tool, whose code is littered with references to William Shakespeare, to try to gain remote access to Azerbijan's wind industry.

On Apr 17, 2020
@wbm312 shared
RT @Forsheit: My colleague Elliott Siebers’ latest post regarding the @FTC’s recent #Section5 #settlement with Tapplock and #IoT #security guidance in the #NIST Core Baseline guide (NISTIR 8259). #infosec https://t.co/LHokuIRsew
Open

FTC Taps into Tapplock’s Security Claims

FTC Taps into Tapplock’s Security Claims

On April 6, 2020, the Federal Trade Commission (FTC) announced a settlement with Tapplock, Inc., resolving allegations that the Canadian smart lock

On Apr 17, 2020
@ISC2 shared
The Big Switch: A Lack of Employable Security Professionals Causes Companies to Make the Switch to AI https://t.co/36ExMjnIeS @securityblvd #ISC2 #Research #WorkforceStudy https://t.co/GvUrW9XCkH
Open

The Big Switch: A Lack of Employable Security Professionals Causes Companies to Make the Switch to AI

The Big Switch: A Lack of Employable Security Professionals Causes Companies to Make the Switch to AI

For the past few years, a major problem has been mounting in the cybersecurity industry: a people shortage. Even before the outbreak of the current global pandemic, enterprises were hurting ...

On Apr 16, 2020
@ISC2 shared
Study: Small Businesses Are More Focused on IoT Investments Than Cybersecurity A recent CNBC poll says 44% of small business are planning to invest in #IoT while only 20% plan to invest in #cybersecurity. Learn more in the blog post: https://t.co/709EEkICMA #ISC2 #SMB https://t.co/2LqJ51EQjP
Open

Study: Small Businesses Are More Focused on IoT Investments Than Cybersecurity

Study: Small Businesses Are More Focused on IoT Investments Than Cybersecurity

More than twice as many small businesses are investing in Internet of Things (IoT) technologies than in cybersecurity, according to recent research. And while this may raise some red flags, ...

On Apr 15, 2020
@ISC2 shared
'Nothing's Off the Table': Will Infosec Jobs Survive the Recession? #ISC2 CIO Bruce Beam points to why security roles remain essential, despite what might be happening with COVID-19 and the economy. https://t.co/rhCsVonQo5 via @DarkReading https://t.co/RPqByZ9vsy
Open

'Nothing's Off the Table': Will Infosec Jobs Survive the Recession?

'Nothing's Off the Table': Will Infosec Jobs Survive the Recession?

With COVID-19 making a mess of the global economy, companies are seeking to cut corners - and some boardrooms still see security as a cost center. Are infosec careers vulnerable now?

On Apr 15, 2020
@SCMagazine shared
From Jan. 1 to April 12, the #FTC received 16,778 #COVID19 related fraud complaints. The scammers made roughly $12M perpetrating via these schemes, the gov't agency reported. https://t.co/xChT8RkaI0
Open

Coronavirus-related scams rack up $12 million

Coronavirus-related scams rack up $12 million

Scammers have raked in about $12 million running Coronavirus-related scams, the Federal Trade Commission (FTC) said this week. About 46.5 percent of