Home - h4ckers-news

First Directory of Virtual CISO Providers Launched by Cynomi

Hacking

andreasc

-

June 23, 2023

First Directory of Virtual CISO Providers Launched by Cynomi

[ad_1]

The industry’s first-ever directory of virtual Chief Information Security Officer service providers has gone live today at www.thevcisodirectory.com. This extensive list of virtual CISO (vCISO) providers, collated by Cynomi, means that small- and medium-sized businesses (SMBs) can easily tap the expertise of qualified cybersecurity professionals to protect their digital assets and ensure compliance.

Cyberattacks are on the rise, with a 42% global increase in harmful occurrences during the first half of 2022, according to Check Point Software’s Mid-Year Security Report. Strong cybersecurity measures are essential in this environment.

However, most small and medium-sized businesses do not have their own CISO, mostly because they do not have the funding to fill such a post.

This problem is compounded by the talent gap, making finding individuals with the necessary skill and specialized experience challenging. According to research by Datto, only 50% of SMBs have a dedicated, internal IT person who manages their cybersecurity needs.

Managed security service providers (MSSPs), consultancies, and managed service providers (MSPs) have created vCISO services to fill this gap and aid enterprises in strengthening their cyber defenses.

Businesses can utilize them to strengthen their cybersecurity posture while paying for the agreed-upon scope of work, typically a small fraction of the cost of an in-house security specialist.

By releasing the first vCISO directory in the industry, Cynomi is facilitating easy access for businesses to this growing resource base.

More than 200 U.S.-based providers are listed in the vCISO directory at launch, with information about their specific services and the technological platforms they employ to develop and carry out their security policies.

The directory will be continuously updated and globalized to include providers from other countries.

According to David Primor, co-founder and CEO of Cynomi, “thousands of small and mid-sized businesses across the globe could benefit from the expertise and support of a traditional CISO, but on a more consultative or part-time basis.”

The vCISO services are helpful in this situation. Businesses can use our new directory to identify all vCISO service providers in one location and compare the advantages of the numerous readily available suppliers.

According to Chris Bevil, CISO of InfoSystems, an MSP based in Tennessee, United States, “a couple of years back we weren’t prioritizing our cybersecurity services, but then we started getting consistent security-as-a-service requests.”

“We concluded that creating a vital vCISO service was in our best commercial interest. This has significantly boosted our business in the current environment and established us as a top MSP in our area.

MSPs and MSSPs offering vCISO services that are not yet included in the directory can submit their details for consideration here.

About Cynomi

By enabling MSSPs, MSPs, and consultancies to deliver vCISO services to SMEs at scale and give them proactive cyber resilience, Cynomi’s AI-driven platform empowers MSSPs, MSPs, and consultancies.

The vCISO’s work is streamlined by Cynomi’s platform, automating time-consuming manual tasks like risk assessment, compliance readiness, cyber posture reporting, customized security policies and remediation plans, and task management optimization. This is done by combining proprietary AI algorithms with CISO-level knowledge and expertise.

By assisting partners in bridging the cybersecurity skills gap and scaling their businesses, Cynomi enables them to introduce new services, upsell existing ones, and boost profits while lowering operating expenses.

With a channel-only focus and the mission that every business deserves a CISO, Cynomi was founded in 2020 and already supported more than 50 partners globally.

To learn more about Cynomi’s solution for MSPs, MSSPs, and cyber consultancies, visit www.cynomi.com.

Rotem Shemesh, VP Marketing, Cynomi
[email protected]

[ad_2]
Source link

Gmail icon finally gets the dynamic theming treatment

Android

andreasc

-

June 23, 2023

0

[ad_1]

Material You and dynamic theming arrived with Android 12, and Gmail was one of the first apps to receive support for it. Still, Google did miss one detail. That detail is the Gmail icon in the notification shade, but Google corrected its mistake, and finally pushed dynamic theming to that particular part of the app.

Gmail icon is finally getting the dynamic theming treatment from Google

The Gmail icon was always red in combination with either white or black, depending on your theme (light or dark). Now, the black and white outline for the Gmail logo remains untouched, but the background will get changed based on your wallpaper or settings.

The red part of the icon (the background), will change color, as shown by Android Police in the images below. That change will be visible in the notification shade, not the status bar, by the way, of course.

This change is a part of the latest Gmail app update

This change has been rolled out as part of Gmail app version 2023.05.28.54044.3362. That update should have landed on your device already, if it did not, it will soon enough, as it’s rolling out widely.

This is just a small change, but it will be noticeable from the notification shade. Reactions to this change go both ways, actually. I’ve seen people complaining about it on Twitter, and also praising Google for finally pushing this change out.

Some people got so used to the red+black/white combo for Gmail that they don’t want that to change. That is somewhat understandable, as it makes it easier to spot a specific notification if it’s always the same color.

Still, Material You and dynamic theming are Google’s thing now, and it was only a matter of time before this happens. We have no idea why it took Google so long to make the change.

[ad_2]
Source link

Europeans are seeing their Google Nest cameras go offline randomly

Tech

andreasc

-

June 23, 2023

0

Europeans are seeing their Google Nest cameras go offline randomly

[ad_1]

Google Nest cameras have become an integral part of most smart home systems in Europe and around the world. But recently, some European users have seen this piece of tech trip out. Now this is not a self-induced problem as users aren’t forgetting to turn on their cameras but more of a technical fault.

By saying that this is a technical fault, we don’t mean that its users can fix it by themselves. Folks at The Verge have also experienced this fault and have been able to point out that it’s something only Google can properly handle. This issue shouldn’t be taken lightly, as it poses a serious security threat to users.

In a bid to create awareness of this issue, users of the Google Nest cameras have come on the internet to explain what they are facing. Tons of users have come on various platforms to narrate how their Nest camera keeps going offline randomly. With the number of users in Europe facing this issue and coming out to speak of it, there is no way Google hasn’t got these complaints. But what exactly are they doing about the incessant complaints?

Nest cameras are going offline in Europe and Google responded

This issue isn’t just affecting a handful of users in Europe, as it’s plaguing many people. Platforms like Twitter, Reddit, websites (9to5Google), and Google Nest Community have seen users complain about this issue. Without any reason, Nest cameras will go offline whilst recording, but not show the live feeds from the recording.

Google Nest cameras are security products that help users keep an eye on activities around their property. They do this by actively recording the surroundings and syncing this live video with the users’ devices via the Google Home app. With the app showing some European users the offline status and not sharing live feeds, a user can tell what’s happening around their property.

Tom Warren, a senior editor with The Verge, was among those in Europe that had their Nest cameras go offline. To fix his cameras, he had to perform a hard reset, returning the cameras to their factory setting. According to his report, some other users have seen their cameras come back online after hours of showing offline on the Google Home app.

To perform a factory reset to your Google Nest camera, simply go to the Home app and tap on the camera button. This will pull up an interface to view what your camera is recording. Now tap on the settings icon at the top of the interface. On the settings page, select the forget device option at the end of the page.

Then grab your Nest camera and find the reset button at the back of the camera. Press and hold the reset button for a while until the lights go off. After the reset, you can connect the camera back to your Google Home app and it should function properly.

Google is aware of this issue, as a spokesperson claims it has been resolved. However, some users in Europe might still be facing this issue, posing a threat to their home security system. If you are facing this issue, simply hard reset your camera or wait till Google’s fix arrives for your Nest camera.

[ad_2]
Source link

Samsung Health offers free fitness classes thanks to new Les Mills partnership

Apps

andreasc

-

June 23, 2023

0

Samsung Health offers free fitness classes thanks to new Les Mills partnership

[ad_1]

Samsung has just announced a new partnership with Les Mills to bring its customers even more free fitness lessons. The collaboration between the two entities will give access to fitness classes exclusive to Samsung Health via the Samsung Smart Hub. More importantly, these classes are exclusively free to new and existing Samsung customers and are available on 2020-2023 TV models.No less than 14 Les Mills classes, 35 minutes each, are now available for free to Samsung customers. Not to mention that these more than a dozen free classes cover a wide range of styles, including BODYPUMP 118, BODYCOMBAT 93, BODYATTACK 112, and much more.

Additionally, Samsung fans can take part in Less Mills’ Summer Sizzle Fitness Challenge. However, if you want to participate, you have to hurry since you can only apply until the end of the month. Simply access the Challenge row on Samsung Health and complete 10 of the free Les Mills workouts to win.

The partnership between Samsung and Les Mills also allows users to see their performance and statistics in real time on their Galaxy Watch. Also, it’s possible to connect your Galaxy smartphone to access Match Fitness, as well as view yourself on the big screen as you work out.

According to Samsung, the content on Samsung Health will be refreshed throughout the year, so customers should expect new partnership to be announced in the coming months.

[ad_2]
Source link

A full timeline of the MOVEit cyber attack

Cyber Attacks

andreasc

-

June 23, 2023

0

A full timeline of the MOVEit cyber attack

[ad_1]

Ransomware gang Clop, which has taken responsibility for the cyber attack launched against document transfer service MOVEit, has announced that it has not stolen data from companies thought to be impacted by data breaches linked to the attack. These companies include the UK’s British Broadcasting Company (BBC), British Airways and high street health and beauty retailer Boots.

Since June 14, Clop has been posting company profiles of companies allegedly impacted by data breaches caused by the cyber attack against MOVEit. These posts are an attempt to pressure victims into paying a ransom to the gang. So far, the names, company addresses and websites of almost 50 victims have been added to the site, but no confidential data has yet been leaked.

Of the companies named on the site, prominent British companies thought to have had data stolen during the breach of payroll provider Zellis – including the BBC, BA and Boots – were not included.

In emails exchanged with the BBC, Clop claimed to have never had access to this data, saying they even told Zellis that they had not breached these companies.

“We don’t have that data and we told Zellis about it. We just don’t have it. We are an old group and have never deceived anyone, if we say that we do not have information, then we do not have it,” the gang told the BBC.

When asked by the BBC for more information on the breach, Zellis said it could “confirm that a small number of [its] customers have been impacted by this global issue and [the company is] actively working to support them”.

How did the MOVEit cyber attack happen?

The cyber attack against MOVEit saw ransomware gang Clop exploit a critical zero-day vulnerability in MOVEit’s infrastructure. This allowed the malicious actors to break into multiple company networks and steal data.

The vulnerability was flagged by security researchers and the US government on June 1. The US Cybersecurity and Infrastructure Security Agency (CISA) urged all MOVEit clients to check for indications that malicious actors had gained unauthorized access to their networks over the past 30 days and to download and install the software patch released by MOVEit to address the issue.

On June 5, payroll provider Zellis announced that it had been affected by the MOVEit cyber attack, and that a “small number” of its customers had suffered data breaches as a result of this. These victims were originally thought to include the BBC, Boots and BA, however on June 21 Clop claimed that they never had access to this data.

A number of victims, including accounting firm PwC, British watchdog Ofcom and Health Service Ireland made statements in the days and weeks following the cyber attack that they had suffered a data breach linked to it.

Ransomware gang Clop later took ownership of the cyber attack by attempting to exploit its victims. In a post on the gang’s Telegram channel, the malicious actors demanded victims pay them by June 14, or their data would be released.

Starting from this day, they released information including company names, address and websites on their darknet site in an attempt to convince the victims to contact them and pay them money to not release their data.

A timeline of the MOVEit cyber attack

June 1: MOVEit’s vulnerability is flagged by cyber security researchers and the US government. MOVEit issues a patch for the software vulnerability.

June 5: Payroll provider Zellis announces that it was impacted by the MOVEit cyber attack. Companies including the BBC, Boots and British Airways suffer data breaches as a result.

June 7: Ransomware gang Clop issues a threat to victims to contact them by June 16, or their data will be posted online.

June 7: CISA and the FBI announces a US$10 million reward for “information linking the Clop gang or any other malicious cyber actors targeting US critical infrastructure to a foreign government”.

June 8: Professional services network and accounting firm, Ernst & Young (EY) announces that it was impacted by the MOVEit cyber attack. As a result, Health Service Ireland (HSE) suffered a data breach.

June 12: British communications watchdog Ofcom announces that it was a victim of the MOVEit cyber attack, causing a data breach that affected 412 employees.

June 14: Clop begins to post the profiles of companies allegedly breached during the cyber attack launched against MOVEit on its data leak website. Clop does not leak any of the stolen data.

June 19: Accounting firm PriceWaterhouseCoopers (PwC) announces it was impacted by the MOVEit cyber attack

June 21: Clop claims to not have access to data from the BBC, Boots and BA that was thought to be stolen in the MOVEit cyber attack

[ad_2]
Source link

GitHub Repositories Are Vulnerable To RepoJacking

Hacking

andreasc

-

June 23, 2023

0

GitHub Repositories Are Vulnerable To RepoJacking

[ad_1]

An attack called RepoJacking may potentially affect millions of GitHub repositories.

If abused, this vulnerability might result in code execution on the internal networks of organizations or on the networks of their customers.

This includes the repositories of companies like Google, Lyft, and many others. It has many high-quality targets that are vulnerable to attack.

About 2.95% of the 1.25 million GitHub repositories examined by AquaSec’s security team, “Nautilus,” were vulnerable to RepoJacking.

How RepoJacking Attack Works?

RepoJacking is an attack in which a hostile actor registers a login and establishes a repository previously used by a company but whose name has subsequently changed.

On GitHub, username and repository name changes are frequent because companies often acquire or merge with another company to get new management, or they may decide to adopt a new brand name.

When this occurs, a redirection is made to prevent projects employing code from renamed repositories from breaking dependencies; however, if the previous name is registered, the redirection is rendered invalid.

By doing this, any code or project that depends on the attacked project’s dependencies will retrieve those dependencies and other code from the attacker-controlled repository, which may include malware.

As an alternative, the same thing may occur if control of a repository is handed to another user and the original account is removed, enabling an attacker to start an account with the old username.

A threat actor may gather a list of distinct repositories using services like GHTorrent to harvest GitHub metadata linked to public commits and pull requests.

According to the information shared with Cyber Security News, the findings imply that millions of repositories may be susceptible to a similar assault, given that GitHub has over 330 million repositories.

One such repository is Google/mathsteps, formerly owned by Socratic (socraticorg/mathsteps), a business that Google purchased in 2018.

“When you access https://github.com/socraticorg/mathsteps, you are being redirected to https://github.com/google/mathsteps so eventually the user will fetch Google’s repository,” the researchers said.

“However, because the socraticorg organization was available, an attacker could open the socraticorg/mathsteps repository, and users following Google’s instructions will clone the attacker’s repository instead.

And because of the npm install, this will lead to arbitrary code execution on the users.”

GitHub has safeguards against RepoJacking attacks since it is aware of this risk. Reports indicate that the remedies provided thus far are insufficient and simple to get around.

Because GitHub, for instance, only shields the most well-known projects, the supply chain breach also affects the lesser-known, more susceptible projects that depend on them.

Also, a repository’s name is changed, and GitHub safeguards it with over 100 clones, a sign of malicious planning.

This protection does not cover projects that gained popularity after being given a new name or changing ownership.

Mitigation

Check your repositories regularly for any links that might pull resources from outside GitHub repositories, as references to projects like Go modules could, at any point, alter their names.
If you change your company’s name, be sure you still own the former name—even if it’s only a placeholder—to stop intruders from using it.

Manage and secure Your Endpoints Efficiently – Free Download

[ad_2]
Source link

6 tips for a cybersecure honeymoon

Malware

andreasc

-

June 23, 2023

0

[ad_1]

Your big day is over, but while you’re relaxing on honeymoon you don’t want to get distracted by security problems. So, we rounded up some quick tips to keep your devices safe.

You’ve done it, you’ve got married. The big day is over, and while you’re relaxing on honeymoon you definitely don’t want to get distracted by security problems. So, we rounded up some quick tips to keep you safe.

Refrain from posting on social media about your honeymoon. This is good practice before you leave as well. You don’t want people knowing that your home will be empty, so it’s better to wait to show off your honeymoon happiness until you get back home.
Feel free to use a VPN. Hotel and airport Wi-Fi is safer now than years ago, thanks to HTTPS everywhere. But if you still can’t shake the feeling of being “exposed,” use a VPN you trust.
Turn on Find My device. Both iOS and Android offer ways for you to track your device. So turn this on before you go, and if you lose your device you can remotely wipe it, or even leave a message on the screen for whoever finds it.
Use strong passwords and encryption. If you don’t use a strong password on all devices, now is the time to change that. Better still, invest in a Password Manager. And make sure that all data stored on your devices is encrypted and backed up before you go.
Turn off Bluetooth connectivity. As a rule of thumb, turn it off it if you don’t use it. If you can’t do that, disable it when it’s not in use. Keeping it enabled could allow someone to discover what other devices you have connected to before, pretend to be one of those devices, and gain access to your device.
Leave your device in the hotel’s safe. When you’re not using a device, keep it in the safe. What you don’t bring along, you can’t lose or drop in the ocean.

Happy honeymoon!

[ad_2]
Source link

Sony will continue making smartphones for years to come

Android

andreasc

-

June 23, 2023

0

[ad_1]

Qualcomm has announced that Sony will continue making smartphones, for years to come. Qualcomm basically shared a press release in which it’s confirmed that Qualcomm’s partnership with Sony has been extended.

Sony will continue making smartphones… for years to come

The company was quite specific, and mentioned that Sony will keep using its Snapdragon chip for years to come. Qualcomm mentioned a “multi-year” deal, though we’re still not sure how many years were agreed on exactly.

One thing worth noting is that Qualcomm didn’t mention “low-end”, so Sony will likely stick to high-end and mid-range tiers. The press statement says that Sony and Qualcomm’s “joint efforts will focus on the integration of Qualcomm Technologies’ advanced Snapdragon mobile platforms into Sony’s future smartphone lines, providing users with enhanced functionality, higher performance, and more immersive user experiences”.

So, if you were at all worried that Sony will bow out of the smartphone business, that won’t happen, at least not anytime soon. There were no indications of that, but Sony hasn’t really been selling a lot of its phones.

If you were worried about Sony’s smartphone business, don’t be

We all know how that ended for HTC and LG, but Sony is a different store entirely. Much like LG, it has the cash to push its mobile unit as long as it takes, but it also uses its phones in other ways. Sony uses them for showpieces in its movies, for example. On the flip side, there’s the PlayStation that they need to think about.

It’s not exactly a secret that you can play your PlayStation remotely via newer Sony flagships. That alone is a selling point for some people, of course. Sony’s smartphones are here to stay.

I said earlier that Sony is not selling many of its phones, which is a shame, because they’re usually really good.

[ad_2]
Source link

Vimeo launches new AI tools to simplify the editing process

Tech

andreasc

-

June 23, 2023

0

[ad_1]

In this day and age of artificial intelligence, every company has been making efforts to integrate generative AIs into their services to make things easier for the end user. Now, in a recent development, Vimeo has introduced a suite of new AI tools powered by OpenAI’s ChatGPT, which will revolutionize the video creation and editing process for its users.

These AI tools are a result of a survey conducted by Vimeo, which revealed that 50% of their customers require multiple takes during video creation, and among those who reshoot, 25% go through over five takes. Ashraf Alkarmi, Vimeo’s Chief Product Officer, explained that these new AI capabilities primarily target entry-level video creators, including employees and social media managers, who often face challenges due to limited skills, time constraints, and resource limitations when it comes to achieving desired effects in video production.

Text-based video editing

Similar to Adobe’s implementation, the text-based video editing tool will provide an effective way for everyday users to edit videos. For example, if your videos contain an excessive amount of filler words like “um” and “ah,” you can ask the AI to automatically remove them. Additionally, the AI also generates a transcript of the video content, allowing users to search for specific words within the transcript and seamlessly delete unwanted sections. Moreover, if you want to create shorter clips tailored for social media platforms, the transcript feature will help you highlight the most important sections.

Furthermore, the company has introduced a new script generator that leverages generative AI, specifically the OpenAI API, to generate video scripts based on brief descriptions and key inputs such as tone (e.g., confident, inspiring, or casual) and desired length.

On-screen teleprompter

In an effort to ensure the smooth delivery of dialogues in videos, Vimeo is also debuting an on-screen teleprompter, which allows users to display scripts with customizable font sizes and pacing, enabling them to stay on the script while engaging with the camera and maintaining eye contact.

“We’re clearly only scratching the surface of what AI can accomplish for organizations and the people within them, and I envision a future in which AI knowledge is a prerequisite, not a luxury, to video production,” said Ashraf Alkarmi.

However, it is important to note that these features will officially launch in July through the company’s Standard and Pro subscription plans, costing $20 (billed annually).

[ad_2]
Source link

Microsoft Teams Vulnerability Let Attackers Deliver Malware

Hacking

andreasc

-

June 23, 2023

0

Microsoft Teams Vulnerability Let Attackers Deliver Malware

[ad_1]

The latest version of Microsoft Teams had a security flaw uncovered recently by Max Corbridge (@CorbridgeMax) and Tom Ellson (@tde_sec), JUMPSEC’s Red Team members.

Due to this flaw, there is a possibility for malware to be injected into organizations that rely on the default configuration of Microsoft Teams.

Microsoft Teams is used by over 280 million active users every month and is a popular way for organizations to talk and work together usin Microsoft 365.

Teams Vulnerability

Successful exploitation of this vulnerability enables the threat actors to evade the client-side security controls. This security feature prohibits users outside the organization from sending any file to the organization’s internal users.

Corbridge asserted in a report that the communication bridge they discovered is more vital because it can send harmful stuff straight to someone’s email, which is more potent than just tricking them.

Apart from this, two Jumpsec’s Red Team members uncovered a solution to circumvent the existing limitation.

They did this by altering the recipient ID in the POST request of a message for internal and external recipients, thereby tricking the system into recognizing an external user as an internal user.

In pragmatic trials, the researchers applied the technique. They successfully infiltrated a command and control payload into the inbox of a target organization, all while operating covertly as part of their red team exercise.

Attackers easily infect organizations using Microsoft Teams by bypassing security measures and anti-phishing training, exploiting the default configuration of it.

By registering a domain similar to the target’s Microsoft 365, the attacker can create messages that appear internal rather than external, increasing the chance of the target downloading the file without suspicion.

Response From Microsoft

Researchers notified Microsoft of their findings, expecting an immediate response due to the considerable impact observed.

Despite Microsoft acknowledging the flaw’s existence, its response indicated that it does not meet the threshold for immediate action, implying a lack of urgency to address the issue.

To minimize risk, organizations utilizing Microsoft Teams without requiring regular communication with external users should disable this feature. And to do this, you have to follow the simple steps that we have mentioned below:-

First of all, go to Microsoft Teams Admin Center.
Then access the External Access option.
After that, you must disable the chat with external unmanaged Teams users.

Organizations can establish an allow-list for specific domains to mitigate exploitation risks when maintaining external communication channels.

Manage and Secure Your Endpoints Efficiently – Free Download

[ad_2]
Source link