Right Security Testing News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Diagram of attack scenario (Source: Forescout and JSOF) Forescout Research Labs and the Israeli security firm JSOF have found nine Domain Name System vulnerabilities affecting four TCP/IP stacks that, if exploited, could lead to remote code execution or denial-of-service attacks - potentially on millions of devices. The group of vulnerabilities, dubbed Name:Wreck, affects the FreeBSD, IPNet, NetX and Nucleus NET stacks. The widespread use of these stacks, together with external exposure of the vulnerable DNS clients, could dramatically increase the attack surface for organizations, JSOF says...

Alejandro Mayorkas (right) is the new secretary of the Department of Homeland Security. (Photo: DHS) Alejandro Mayorkas, the newly confirmed secretary of the Department of Homeland Security, says his initial priorities include reviewing all available intelligence on the SolarWinds supply chain hack and scrutinizing the government's cybersecurity programs. Mayorkas, who previously served as the deputy secretary of Homeland Security during the Obama administration, also promised to strengthen the U.S. Cybersecurity and Infrastructure Security Agency as well as place a greater emphasis on addr...

Get Permission Washington State Auditor Pat McCarthy says her office was not notified about a vulnerability in Accellion's file transfer product. A data breach of a Washington state auditor's system exposed 1.4 million unemployment claimants’ records. The breach involved exploiting a flaw in Accellion's file transfer product, called File Transfer Appliance, and the state’s auditor says the office was never notified of the vulnerability and that a fix was available, the Seattle Times reports. Organizations in New Zealand and Australia have also been affected by breaches tied to exploits o...

InfoRiskToday Compliance March 29, 2021 March 25, 2021 DougOlenick) • January 27, 2021     Get Permission The number of distributed denial-of-service attacks launched in 2020 surpassed 10 million, up from 8.5 million in 2019, according to NetScout's Atlas Security Engineering and Response Team. DDoS attacks are often waged as part of extortion campaigns, with hackers threatening to escalate attacks if a ransom is not paid. NetScout noted the the number of DDoS attacks exceeded 800,000 per month starting in March...

Get Permission Virginia National Guard airmen guard the grounds of the U.S. Capitol. (U.S. Air National Guard photo by Staff Sgt. Bryan Myhr) The U.S. Capitol siege is being exploited for disinformation purposes ahead of Inauguration Day by Russia, Iran and China, intelligence officials warn. A "joint threat assessment" released on Thursday by the FBI, Department of Homeland Security and eight other agencies warns that "Russian, Iranian and Chinese influence actors have seized the opportunity to amplify narratives in furtherance of their policy interest amid the presidential transition," CNN...