Wednesday, March 25, 2020

FREE COVID-19 Threatlist from DOMAINTOOLS

- We know bad guys are creating fake COVID-19 related domains to lure us. To battle this , DomainTools is providing a free, curated list (updated everyday) of high-risk COVID-19-related domains to support the community during the Coronavirus crisis.

https://www.domaintools.com/resources/blog/free-covid-19-threat-list-domain-risk-assessments-for-coronavirus-threats

Tuesday, March 24, 2020

Zero Trust Security Model is the new rage - How much do we know about it. Here is a timely doc from Microsoft that can help

(US Residents) Beware of these COVID-19 relates emails:


1. Emails purporting to contain helpful information from the Centers for Disease Control and Prevention (CDC)
2. Medical sources, and phishing emails that ask to provide their personal information in order to receive an economic stimulus check.
(3. Free pass to entertainment services like Netflix)

https://www.scmagazine.com/home/security-news/cybercrime/fbi-warns-of-covid-19-phishing-scams-promising-stimulus-checks-vaccines/

Security vendors are in the business of selling security they don't have to care about securing their own environment (Remember RSA, Symantec)

- British security outfit Keepnet Labs exposed a massive database (without any password protection) on the internet, containing more than five billion records.

https://www.grahamcluley.com/security-firm-five-billion-records-exposed-unsecured-database/

In case you missed it due to everything happening around COVID-19 - Microsoft has issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities

This could let hackers remotely take complete control over targeted computers.  No Patch Yet Available; Apply Workaround ( Disable the Preview Pane and Details Pane in Windows Explorer)

https://thehackernews.com/2020/03/windows-adobe-font-vulnerability.html