Content

Broken IoT, Exposed Endpoints – Paul’s Security Weekly #518

One MILLION endpoints, WannaCry is linked to North Korea, IoT is broken (what's new?),inside a porn-pimping spam botnet, fixing Windows Defender, and more security news!

Paul's Stories

  1. 1 Million Endpoints Exposed on Public Internet via Microsoft File-Sharing Services
  2. credmap The Credential Mapper
  3. Inside a Porn-Pimping Spam Botnet
  4. Fileless malware targeting US restaurants went undetected by most AV
  5. Login-stealing phishing sites conceal their evil with lots of hyphens in URL
  6. Researcher Says Fixes To Windows Defender's Engine Incomplete
  7. NSA Links WannaCry Worm To North Korea
  8. Google's New Tool Lets You Easily Backup & Sync Your Entire PC to the Cloud
  9. Wikileaks Unveils 'Cherry Blossom' Wireless Hacking System Used by CIA

Larry's Stories

  1. IoT is broken, even without malicious actors
  2. 39 state election breach….bu the russians
  3. Underwriters Laboratories is on the path to be the go to for cyber certification
  4. Post exploitation of Puppet and Ansible
Full Show Notes Subscribe to YouTube Channel [audio src="http://traffic.libsyn.com/pauldotcom/Iot_is_broken_1_Million_Exposed_Endpoints_Wikileaks_Unveils_Cherry_Blossom_-_Pauls_Security_Weekly_518_converted.mp3"]

Related

DevSecOps Scanning Challenges & Tips

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

It Should Be ‘Cybersecurity Culture Month’

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds