Commercial and military drones in Ukraine: The evolutionary use and implications on security and safety
The experimentation with drone warfare in Ukraine has opened our eyes to what is possible with easily accessible platforms. Security professionals must be mindful and prepared for commercial drone security threats.
Why small businesses are vulnerable to cyberattacks
It is more important than ever that small businesses understand how cyberattacks can impact their operations and take the proper steps to protect themselves.
Inside the mind of an insider threat
Determining which people are most likely to become insider threats can help enterprise security leaders prevent an attack before it occurs.
ISC StormCast for Wednesday, May 25th, 2022
ctx Python Library Updated with “Extra” Features
https://isc.sans.edu/forums/diary/ctx+Python+Library+Updated+with+Extra+Features/28678/
Zoom Updates
https://explore.zoom.us/en/trust/security/security-bulletin/
VMWare Exploit About to Be Released
https://twitter.com/Horizon3Attack/status/1528935531333177344
Zyxel Firewalls, AP Controllers, APs Patch
https://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml
Roger Hale named Chief Security Officer at Agora
As Chief Security Officer at Agora, Hale will work to navigate compliance and security, and determine risk management and cybersecurity best practices.
Dave Maynor named Senior Director of Threat Intelligence at Cybrary
David “Dave” Maynor has been appointed Senior Director of Threat Intelligence at Cybrary, leading the new Cybrary Threat Intelligence Group (CTIG).
Identity-based attacks the top cyber threat in 2021
Among ransomware, software supply chain attacks and data breaches, a Blumira report found that identity-based attacks are the top threat organizations faced in 2021.
Exploring the connections with cybersecurity and coding
Low-code software doesn’t need to mean higher security risk. It simply means more education, rigorous app testing, and appropriate security policies around citizen development.
ISC StormCast for Tuesday, May 24th, 2022
Attacker Scanning for jQuery-File-Upload
https://isc.sans.edu/forums/diary/Attacker+Scanning+for+jQueryFileUpload/28674/
Oracle Security Alert Advisory – CVE-2022-21500
https://www.oracle.com/security-alerts/alert-cve-2022-21500.html
How to find NPM dependencies vulnerable to account hijacking
https://www.theregister.com/2022/05/23/npm_dependencies_vulnerable/
Pre-hijacked accounts
https://arxiv.org/pdf/2205.10174.pdf
