Many organizations lacking adoption of key CIS controls
A recent survey conducted by Tripwire revealed organizations are not fully adopting security controls from key benchmarks, such as the Center for Internet Security (CIS).
Identity & Access Management
AWS S3 error exposes data on 31K GoDaddy servers
Cybersecurity firm UpGuard has discovered an error in Amazon AWS bucket configuration that led to the exposure of internal GoDaddy infrastructure data.
Hacker breaks into Reddit systems via SMS-based 2FA
Reddit, a popular social news aggregation and discussion website, suffered from a security breach between June 14 and June 18 of this year. The incident was discovered on June 19 and linked to weaknesses in SMS-based two-factor authentication (2FA).
Single account blamed for Clarksons breach
Clarkson PLC (“Clarksons”), a British shipping company, recently revealed a single and isolated user account compromise was the cause of a data breach and theft of confidential information last year.
Gentoo reveals hacking root cause of its GitHub repository
Gentoo provided a new security update that describes the impact and root cause of its recent GitHub Linux distribution repository hacking incident.
SAML vulnerabilities affect multiple SSO implementations
Duo Labs has found SAML protocol vulnerabilities that impact multiple vendor single sign-on (SSO) systems.
Hackers hijack Enigma
Hackers have hijacked Enigma, a cryptocurrency investor platform and ethereum marketplace, and stole more than $500,000 in cryptocurrency from investors via a phishing scam.
Oracle SSO vulnerabilities
Security researchers in Belgium have discovered two vulnerabilities related to Single Sign-on authentication in Oracle Access Manager (OAM) Version 10g, as part of penetration testing work for a client.
QakBot malware locks out thousands of AD accounts
Security researchers have spotted QakBot malware used to lockout hundreds to thousands of Active Directory (AD) accounts across a number of enterprises.
Secure Authorization, Authentication and Access Control for IoT
To help organizations prepare for Internet of Things (IoT) threats, we outline some key security recommendations for IoT authorization, authentication and access control.