The National Security Agency (NSA) has released an information sheet with guidance on mitigating cloud vulnerabilities. NSA identifies cloud security components and discusses threat actors, cloud vulnerabilities, and potential mitigation measures. The Cybersecurity and Infrastructure Security Agency (CISA) encourages administrators and users to review NSA’s guidance on Mitigating Cloud Vulnerabilities and CISA’s page on APTs Read more about NSA Releases Guidance on Mitigating Cloud Vulnerabilities[…]

Update: Scammers shutdown uehro.org and launched theuehro.org website with exactly same content. theuehro.org was registered on Dec 20, 2019. Do not fall for free conference and free airline ticket scam! Nothing is free in this world! This post is about the free conference and free travel offer fraud from uehro.org and oliverjeffersongrandhotel.com sites. This article Read more about Conference scam from UEHRO.org / THEUEHRO.org and oliverjeffersongrandhotel.com[…]

Introduction CSET is a desktop software tool that guides asset owners and operators through a consistent process for evaluating control system networks as part of a comprehensive cybersecurity assessment that uses recognized government and industry standards and recommendations. The output from CSET is a prioritized list of recommendations for improving the cybersecurity posture of the Read more about Cyber Security Evaluation Tool (CSET) version 9.0 is available[…]

US-CERT has published Malware Analysis Report (AR19-304A) about North Korean Trojan: HOPLIGHT. SUMMARY This Malware Analysis Report (MAR) is the result of analytic efforts between Department of Homeland Security (DHS), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD). Working with U.S. Government partners, DHS, FBI, and DoD identified Trojan malware variants Read more about MAR-10135536-8 – North Korean Trojan: HOPLIGHT[…]

A couple years ago, it was BlockChain. A few years back it was cloud computing. Now it is data science, machine learning, and artificial intelligence. New technical products, technologies, programming languages and frameworks are released every year. New methodologies and algorithms are appearing at a rapid pace. Today’s technology may change business landscape tomorrow. Enterprises Read more about Does your enterprise really need to migrate to the latest technology?[…]

Federal Trade Commission (FTC) has released an article warning consumers of ‘Stalking’ apps. These apps are stalkerware or spyware that can track your activity through your smart phone. These apps can share all your sensitive information and typed text with a remote server. Shared information can be photos, videos, audio, camera, GPS location, stored files, Read more about Stalkerware or Spyware apps on a smart phone[…]

If you receive a call claiming to lower your bills by 50%, hang-up and never answer these calls again. These spammers would claim to reduce your phone, utility, and cable bills etc by 50%. They are targeting US residents. The spammer tells to be calling from Discount Zone California. All these spammers speak Punjabi language Read more about 50% utility bill discount offer from Discount Zone is a scam[…]

Adobe released a few security updates to address vulnerabilities in Experience Manager, Acrobat Reader, Acrobat Writer, and Download Manager on October 15, 2019. Any attacker can use these vulnerabilities to take control and attack the systems because Adobe products have free/open access to critical system resources. CDSBureau recommends its readers to evaluate the following Adobe Read more about Adobe releases a few security updates[…]

Do not be fooled by free conference and free airline ticket scam! Nothing is free in this world! This post is about the free conference and free travel offer fraud from gwdevelopments.org and denisecarrerahotel.com sites. This article is for you, if you received an email from them or are a victim of this scam. Scammers Read more about Conference scam from gwdevelopments.org and denisecarrerahotel.com[…]

The Internet Crime Complaint Center (IC3) has released an alert on ransomware threats to U.S. businesses and organizations. Ransomware is a type of malware designed to deny access to a computer system or data until a ransom is paid. Cyber criminals often infect organizations with ransomware through email phishing campaigns or exploiting vulnerabilities in software Read more about Internet Crime Complaint Center (IC3) Issues a Ransomware Warning[…]