May 2023

FTC orders Edmodo to stop using minor education data for advertising 31/05/2023 at 22:41 By Education technology provider Edmodo received an order from the FTC for collecting children’s personal data without proper parental consent. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

52% of consumers confident in detecting deepfake videos 31/05/2023 at 21:32 By  According to a recent artificial intelligence (AI) and technology report, consumers appear to overestimate their ability to spot deepfakes. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Federal Transit Administration proposes changes to safety plan 31/05/2023 at 20:34 By The FTA has proposed updates to the National Public Safety Plan to create a blueprint for transit agencies to adopt stronger safety measures. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AMA: Campus Safety Leader Edition — Todd Jones 31/05/2023 at 20:03 By In this AMA episode from Security magazine, Todd Jones, Director of Campus Safety at the Minneapolis College of Art and Design, talks campus security. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining 31/05/2023 at 19:53 By A financially motivated threat actor is actively scouring the internet for unprotected Apache NiFi instances to covertly install a cryptocurrency miner and facilitate lateral movement. The findings come from the SANS Internet Storm Center (ISC), which detected a spike in HTTP requests for “/nifi” on

Debunking 5 Myths of Attack Surface Management 31/05/2023 at 19:22 By Attack surface management is certainly a concern for most organizations, but being top of mind does not mean it’s easy for organizations to understand or implement. This article is an excerpt from Trustwave Blog View Original Source

How security teams should respond to sophisticated ransomware attacks 31/05/2023 at 17:35 By As a constantly evolving form of malware, ransomware attacks only grow in sophistication and find new ways to steal business-critical data. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices 31/05/2023 at 16:50 By Cybersecurity researchers have found “backdoor-like behavior” within Gigabyte systems, which they say enables the UEFI firmware of the devices to drop a Windows executable and retrieve updates in an unsecure format. Firmware security firm Eclypsium said it first detected the anomaly in April 2023. Gigabyte

Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities 31/05/2023 at 16:50 By Improperly deactivated and abandoned Salesforce Sites and Communities (aka Experience Cloud) could pose severe risks to organizations, leading to unauthorized access to sensitive data. Data security firm Varonis dubbed the abandoned, unprotected, and unmonitored resources “ghost sites.” “When these Communities are no longer needed,

The 5 pillars of cloud security for data storage 31/05/2023 at 16:02 By Rather than debating the ways that the cloud is or isn’t inherently secure, leaders should question whether they are using the cloud securely.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source