Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird CISA encourages users and administrators to review Mozilla Security Advisories for Firefox 85, Firefox ESR 78.7, and Thunderbird 78.7 and apply the necessary updates. us-cert.cisa.gov/ncas/curren…

Apple Patches Three iOS Zero-Day Vulnerabilities New iOS 14.4 update available for iPhones and iPads. #SecurityAwareness #CyberSecurity darkreading.com/endpoint/app…

Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming A new version of NAT slipstreaming allows cybercriminals an easy path to devices that aren't connected to the internet. #SecurityAwareness #CyberSecurity kasperskycontenthub.com/thre…

Drupal Releases Security Updates #SecurityAwareness #CyberSecurity us-cert.cisa.gov/ncas/curren…

Cisco Releases Advisories for Multiple Products #SecurityAwareness #CyberSecurity us-cert.cisa.gov/ncas/curren…

Microsoft Releases New Info on SolarWinds Attack Chain Threat actors went to elaborate lengths to maintain operational security around second-stage payload activation, company says. #SecurityAwareness #CyberSecurity darkreading.com/attacks-brea…

7 Steps to Secure a WordPress Site Many companies operate under the assumption that their WordPress sites are secure -- and that couldn't be anything further from the truth. #SecurityAwareness #CyberSecurity darkreading.com/application-…

Amazon Kindle RCE Attack Starts with an Email The "KindleDrip" attack would have allowed attackers to siphon money from unsuspecting victims. #SecurityAwareness #CyberSecurity kasperskycontenthub.com/thre…

Microsoft Edge gets a password generator, leaked credentials monitor Microsoft is rolling out a built-in password generator and a leaked credentials monitoring feature on Windows and macOS systems running the latest Microsoft Edge version. bleepingcomputer.com/news/se…

A look into the pricing of stolen identities for sale on dark web Researchers analyzed listings across 40+ dark web marketplaces gathering data on how much stolen identities, credit cards and hacked PayPal accounts are worth to cybercriminals. securitymagazine.com/article…

2020's top 5 phishing scams exposing hackers, questionable morals, and how to hold strong against them securitymagazine.com/article…

These Microsoft tools help you reduce, remove or lock down admin access to improve security The SolarWinds compromise means you can no longer put off privileged account management. #SecurityAwareness #CyberSecurity techrepublic.com/article/the…

How to check if someone else accessed your Google account Review your recent Gmail access, browser sign-in history, and Google account activity to make sure no one other than you has used your account. #SecurityAwareness #CyberSecurity techrepublic.com/article/how…

FBI warns of voice phishing attacks targeting employees at large companies techrepublic.com/article/fbi…

Critical Cisco SD-WAN Bugs Allow RCE Attacks Cisco is stoppering critical holes in its SD-WAN solutions and its smart software manager satellite. #SecurityAwareness #CyberSecurity kasperskycontenthub.com/thre…

Cloud Attacks Are Bypassing MFA, Feds Warn CISA has issued an alert warning that cloud services at U.S. organizations are being actively and successfully targeted. #SecurityAwareness #CyberSecurity kasperskycontenthub.com/thre…

Microsoft Implements Windows Zerologon Flaw Enforcement Mode Starting Feb. 9, Microsoft will enable Domain Controller enforcement mode by default to address CVE-2020-1472. #SecurityAwareness #CyberSecurity kasperskycontenthub.com/thre…

Apache Releases Security Advisory for Tomcat The Apache Software Foundation has released a security advisory to address a vulnerability affecting multiple versions of Apache Tomcat. us-cert.cisa.gov/ncas/curren…

How to prevent attackers from compromising cloud environments #SecurityAwareness #CyberSecurity securitymagazine.com/article…

Microsoft asks organizations to update systems to address Zerologon vulnerability Microsoft has addressed companies who have not yet updated their systems to address the critical Zerologon flaw. securitymagazine.com/article…