In a dynamic world, where user mobility impacts security almost 100% of the time, multi-factor authentication (MFA) has become imperative and key to deploying a zero-trust network. Why? • Users are connecting to company resources from different, unprotected networks • Working hours have become more flexible, so they could be working from early hours to late evenings • … [Read more...]
Researchers May Already have Compromised The Quest 2 VR
(update 12/11/20: XRSI may not have rooted the Quest 2, see XRSI May Have Lie About Gaining Root Access The Quest 2) XRSI may have found a way around the new Oculus Quest 2 Facebook login. Technical users will sometimes root a device to gain complete control over the device. This option for users commonly occurs with most of the popular phones … [Read more...]
Top Election Security Threats
With the US elections only a week away, we're talking election security on this week's episode. We'll cover what we do and don't think attackers will target in the coming week and what we can do as a country to improve our security posture. … [Read more...]
Are Your Company Credentials Exposed on the Dark Web?
The dark web is a collection of anonymous websites that are publicly available, yet hide the IP addresses to make it impossible for users to identify the host. It’s very common that sensitive information made available by data breaches ends up becoming available illicitly for sale on the dark web. According to the 2019 Global State of Cybersecurity in Small and Medium-Sized … [Read more...]
UK, Canada and US All Warn of New Attacks on Covid-19 Research
The UK Cyber Security Center (NCSC) and Canada’s Communications Security Establishment (CSE) with the help of the NSA released an advisory today on attacks from APT29 (also known as ‘the Dukes’ or ‘Cozy Bear’), a group with ties to the Russian intelligence services. "APT29 is using custom malware known as ‘WellMess’ and ‘WellMail’ to target a number of organisations … [Read more...]