Stay one step ahead: Cybersecurity best practices to prevent breaches When it comes to assessing the security of computer systems, penetration testing tools are critical for identifying vulnerabilities that attackers may exploit.Īttackers increasingly using transfer.sh to host malicious codeįor many years now, unsecured internet-facing Redis servers have been steadily getting co-opted by criminals to mine cryptocurrency, so the latest cryptojacking campaign spotted by Cado Labs researcher cannot be considered news. What DNS abuse techniques are employed by cyber adversaries and which organizations can help incident responders and security teams detect, mitigate and prevent them?ĥ open source Burp Suite penetration testing extensions you should check out In today’s data-driven world, the expectations and demands faced by many organizations worldwide are reaching unseen levels.ĭNS abuse: Advice for incident responders Microsoft Exchange admins advised to expand antivirus scanningĪfter having stressed the importance of keeping Exchange servers updated last month, Microsoft is advising administrators to widen the scope of antivirus scanning on those servers.įoiling intellectual property theft in a digital-first world QNAP Systems, the Taiwanese manufacturer of popular NAS and other on-premise storage, smart networking and video devices, has launched a bug bounty program.

QNAP starts bug bounty program with rewards up to $20,000

Google Cloud Platform allows data exfiltration without a (forensic) traceĪttackers can exfiltrate company data stored in Google Cloud Platform (GCP) storage buckets without leaving obvious forensic traces of the malicious activity in GCP’s storage access logs, Mitiga researchers have discovered. Here’s an overview of some of last week’s most interesting news, articles, interviews and videos:

Lastpass for companies