Cyber Security News

中国互联网安全标准被国际接纳 取得重大进展

Cyber Security News - Wed, 09/12/2018 - 05:35
9月12日,互联网域名系统北京市工程研究中心(简称域名工程中心,英文缩写ZDNS)在中国科学院软件园宣布,由中国技术人员牵头起草的互联网安全标准正式被国际社会接纳,成为互联网国际技术标准IETF RFC8416。 会上还发布了自主开发的域名系统基础软件“红枫”系统、全球运行速度最快的域名服务器,以及首台国产化域名服务器。这是我国互联网社区为国际互联网技术发展作出的又一贡献。 随着互联网的广泛应用,互联网自身的安全问题也日益突显出来。为解决互联网上虚假地址引发的的“安全漏洞”问题,全球互联网技术标准制定组织IETF自2012年开始发布了一系列RPKI(资源公共密钥基础架构)技术标准,通过让IP地....
Categories: Cyber Security News

CEO attitudes to cyber security are all wrong

Cyber Security News - Wed, 09/12/2018 - 05:33
“Implementing these [cyber awareness and governance] programmes is like home insurance – high cost with no guarantee anything will ever happen – so why pay the price? How many houses burn down every year, compared to how many people buy house insurance?” That is how the CEO of a major Australian....
Categories: Cyber Security News

[webapps] CirCarLife SCADA 4.3.0 - Credential Disclosure

Cyber Security News - Wed, 09/12/2018 - 05:31
# Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure # Date: 2018-09-10 # Exploit Author: David Castro # Vendor Homepage: https://circontrol.com/ # Shodan Dork: Server: CirCarLife Server: PsiOcppApp # Version: CirCarLife Scada all versions under 4.3.0 OCPP implementation all versions under 1.
Categories: Cyber Security News

September 2018 Patch Tuesday: Microsoft fixes actively exploited zero-day

Cyber Security News - Wed, 09/12/2018 - 05:28
Microsoft’s September 2018 Patch Tuesday has brought fixes for a little over 60 security vulnerabilities, 17 of which are critical and one is being actively exploited in the wild. The software giant has also released two advisories: one detailing the vulnerabilities it plugged in Adobe Flash and the....
Categories: Cyber Security News

La SNCF veut faire rouler des trains autonomes en 2023

Cyber Security News - Wed, 09/12/2018 - 05:28
La SNCF a indiqué mercredi qu'elle envisageait de faire circuler des prototypes de trains entièrement automatisés d'ici 2023, grâce à un partenariat l'associant notamment aux constructeurs ferroviaires Alstom et Bombardier. "Avec le train autonome, tous les trains circuleront de manière harmonisée....
Categories: Cyber Security News

Polish research institute NASK loses director - report

Cyber Security News - Wed, 09/12/2018 - 05:27
Wojciech Kamieniecki will cease to be the director of the Polish research institute NASK, according to information obtained by Telko.in. According to unofficial information, the resignation is related to an issue with the National System of Toll Collection, which was reported by Puls Biznesu.
Categories: Cyber Security News

France IX adds cyber security specialist Acorus to marketplace sellers

Cyber Security News - Wed, 09/12/2018 - 05:27
Internet exchange point (IXP) France-IX announced that French start-up Acorus Networks has joined its marketplace programme to offer France-IX's peering members direct access to a range of anti-DDoS services for network and application-layer protection.
Categories: Cyber Security News

Circontrol CirCarLife Scada 安全漏洞

Cyber Security News - Wed, 09/12/2018 - 05:27
# Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure # Date: 2018-09-10 # Exploit Author: David Castro # Vendor Homepage: https://circontrol.com/ # Shodan Dork: Server: CirCarLife Server: PsiOcppApp # Version: CirCarLife Scada all versions under 4.3.0 OCPP implementation all versions under 1.
Categories: Cyber Security News

Hackers Behind the British Airways Data Breach Revealed

Cyber Security News - Wed, 09/12/2018 - 05:24
Security experts at RiskIQ reported that the hackers behind the recent British Airways data breach is the MageCart crime gang. MageCart has been active since at least 2015 and managed to compromise lots of e-commerce websites to steal payment card and other sensitive data.
Categories: Cyber Security News

Editeur de cybersécurité aujourd’hui, cyber-mercenaire demain

Cyber Security News - Wed, 09/12/2018 - 05:19
Publié par : pintejp | septembre 12, 2018 Editeur de cybersécurité aujourd’hui, cyber-mercenaire demain. Avertissez-moi par e-mail des nouveaux commentaires. Avertissez-moi par e-mail des nouveaux articles. Cliquez sur Suivre ce blog et recevez les dernières notifications par mail. Rejoignez 3 638 autres abonnés.
Categories: Cyber Security News

Remove KRAKEN CRYPTOR Ransomware + Lock.onion Files Recovery

Cyber Security News - Wed, 09/12/2018 - 05:16
Distribution of KRAKEN CRYPTOR Ransomware Virus. KRAKEN CRYPTOR virus is a new data locker ransomware that has been released in attack campaigns against computer users worldwide. The threat could be utilizing widely used tactics of distribution to infect computer systems.
Categories: Cyber Security News

Bugtraq: Disclose SSRF Vulnerability

Cyber Security News - Wed, 09/12/2018 - 05:15
Posted by Alphan Yavaş on Sep 12 I. VULNERABILITY Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) Server Side Request Forgery (SSRF) II. CVE REFERENCE CVE-2018-16794 III. VENDOR IV. TIMELINE 15/08/2018 Vulnerability discovered 18/08/2018 Vendor...
Categories: Cyber Security News

El BCSC prosigue su estrategia de tender puentes con otros CSIRT y pasa a formar parte de la iniciativa estatal CSIRT.es

Cyber Security News - Wed, 09/12/2018 - 05:15
Desde su creación, uno de los principales objetivos del Centro Vasco de Ciberseguridad (BCSC) ha sido establecer vías de comunicación y colaboración con Equipos de Respuesta ante Emergencias Informáticas (CSIRT) nacionales e internacionales de cara a dar una respuesta conjunta y coordinada frente a....
Categories: Cyber Security News

Cyber security threats against small businesses on the rise in 2018 - Idaho State Journal

Cyber Security News - Wed, 09/12/2018 - 05:13
In a world before social media, one with less people on the planet than electronic devices connected to the internet, shoplifters and annoying computer viruses posed the biggest threats to small businesses. But in the world today where connected devices outnumber people new data from the National....
Categories: Cyber Security News

La SNCF crée deux consortiums pour faire du train autonome une réalité

Cyber Security News - Wed, 09/12/2018 - 05:11
Pour l’instant, le calendrier est tenu. La SNCF devrait lancer dès 2019 un premier train autonome sur le réseau ferré national. Cette première locomotive de fret téléconduite précédera d’autres prototypes, avant un premier déploiement commercial en 2023.
Categories: Cyber Security News

Cybersecurity as catalyst for greater adoption of agile development

Cyber Security News - Wed, 09/12/2018 - 05:08
As we know, hackers thrive on errors, and that means that agile development can be a gold mine for cyberattackers. Adding to the problem are traditional cybersecurity approaches like anti-virus and firewalls and the fact that traditional systems are notoriously tricky to configure correctly, and often present an easy target.
Categories: Cyber Security News

В 2019 году ущерб мировой экономики от кибератак может составить $2 трлн

Cyber Security News - Wed, 09/12/2018 - 05:07
Киберпреступники своими действиями наносят все более ощутимый ущерб мировой экономике. Сумма потерь уже в следующем году может составить 2 триллиона долларов. Такую цифру озвучил Илья Рогачев, директор департамента по вопросам новых вызовов и угроз МИД России. В своих расчетах Рогачев опирается на показатели за предыдущие годы.
Categories: Cyber Security News

לונדון ותל אביב למען קידום חדשנות בפינטק וסייבר

Cyber Security News - Wed, 09/12/2018 - 05:06
ארגון TheCityUk מלונדון ועמותת סיטי טי.אל.וי. מתל-אביב חתמו בימים אלו על מזכר הבנה במטרה להדק את שיתוף הפעולה בתחומי הפינטק והגנת סייבר בין שני המרכזים הגלובליים בתחומי החדשנות הדיגיטלית. בהודעה שהוציאו הגופים ציינו השניים כי המזכר החדש יביא לשיתופי פעולה עסקיים חוצי גבולות והוא יחזק ויעודד החלפת טכנולוגיות והתמחויות בין שני השווקים.
Categories: Cyber Security News

Microsoft Internet Explorer 11 Security Feature Universal cross site scripting

Cyber Security News - Wed, 09/12/2018 - 05:01
A vulnerability was found in Microsoft Internet Explorer 11. It has been declared as critical. Affected by this vulnerability is an unknown function of the component Security Feature . The manipulation with an unknown input leads to a cross site scripting vulnerability (Universal). The CWE definition for the vulnerability is CWE-80 .
Categories: Cyber Security News

PowerDNS/PowerDNS Recursor DNS Server denial of service [CVE-2016-7068]

Cyber Security News - Wed, 09/12/2018 - 05:01
PowerDNS/PowerDNS Recursor DNS Server denial of service A vulnerability, which was classified as problematic, was found in PowerDNS and PowerDNS Recursor (the affected version is unknown). Affected is an unknown function of the component DNS Server . The manipulation with an unknown input leads to a denial of service vulnerability.
Categories: Cyber Security News

Pages