“The US National Security Agency (NSA) says that companies should avoid using third party DNS resolvers to block threat actors’ DNS traffic eavesdropping and manipulation attempts and to block access to internal network information.”
For IT professionals: Privacy and security in Microsoft Teams
“Over the past week, there has been a lot written about video conferencing, privacy, and security. As an IT professional, you may be getting a lot of questions. We want to help.”
Law enforcement take down three bulletproof VPN providers
“Law enforcement agencies from the US, Germany, France, Switzerland, and the Netherlands have seized this week the web domains and server infrastructure of three VPN services that provided a safe haven for cybercriminals to attack their victims. The three services were active at insorg.”
If you see your password on this list, change it as soon as possible
“Every year, the specter of cybersecurity attacks becomes more daunting as hackers find new and increasingly brilliant ways to trick us into handing over information.”
Microsoft urges users to stop using phone-based multi-factor authentication
“Microsoft is urging users to abandon telephone-based multi-factor authentication (MFA) solutions like one-time codes sent via SMS and voice calls and instead replace them with newer MFA technologies, like app-based authenticators and security keys.”
Update your Chrome browser right now for important security fixes
“It’s never a bad time to make sure that all your software is updated in order to keep yourself safe from any potential issues or exploits that might have been discovered in a previous version.”
13 Common Security Mistakes That Make Your PC Vulnerable
“We live in a world where we are digitally connected nearly 24/7. Even when we are not actually using our devices for work or paying bills or socializing with those we know, we can still be logged in permanently to our various online accounts. “
Google shares more details on some of the biggest DDoS attacks ever recorded
“Google’s Threat Analysis Group has revealed that state-sponsored hackers launched the largest ever recorded distributed denial-of-service (DDoS) attack against the company back in 2017.”
Hackers are using a severe Windows bug to backdoor unpatched servers
“One of the most critical Windows vulnerabilities disclosed this year is under active attack by hackers who are trying to backdoor servers that store credentials for every user and administrative account on a network, a researcher said on Friday.”
A group of hackers won $288,500 from Apple for telling the company about 55 bugs, including one that would’ve let an attacker steal someone’s iCloud photos
“They were operating as “white hat” hackers, meaning their goal was to alert Apple to the vulnerabilities rather than to steal information. The team was led by 20-year-old Sam Curry, along with Brett Buerhaus, Ben Sadeghipourmsec, Samuel Erb, and Tanner Barnes.”