Security
FireEye Cyber Threat Map
The FireEye Cyber threat map provides a visual overview of the source and destination countries of various internet attacks and attack attempts. It also provides insight into the top industries which are currently experiencing these attacks and/or attempted attacks. Click the link below to view the map in real-time.
US-CERT Current Activity
-
Mozilla Releases Security Updates for Firefox
Original release date: March 22, 2019
Mozilla has released security updates to address vulnerabilities in Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system.
The Cybersecurity and...
-
Drupal Releases Security Updates
Original release date: March 20, 2019
Drupal has released security updates to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected system.
The Cybersecurity and...
-
Cisco Releases Security Advisories for Multiple Products
Original release date: March 20, 2019
Cisco has released several security advisories to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected...
Krebs on Security
-
Alleged Child Porn Lord Faces US Extradition
In 2013, the FBI exploited a zero-day vulnerability in Firefox to seize control over a Dark Web network of child pornography sites. The alleged owner of that ring - 33-year-old Freedom Hosting operator Eric Eoin Marques - was arrested in Ireland...
-
Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees -- in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so...
-
Why Phone Numbers Stink As Identity Proof
Phone numbers stink for security and authentication. They stink because most of us have so much invested in these digits that they've become de facto identities. At the same time, when you lose control over a phone number -- maybe it's hijacked by...
Security Alerts
-
AA19-024A: DNS Infrastructure Hijacking Campaign
Original release date: January 24, 2019 | Last revised: February 13, 2019
Summary
The National Cybersecurity and Communications Integration Center (NCCIC), part of the Cybersecurity and Infrastructure Security Agency...
-
AA18-337A: SamSam Ransomware
Original release date: December 03, 2018
Summary
The Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) and the Federal Bureau of Investigation (FBI) are issuing...
-
TA18-331A: 3ve – Major Online Ad Fraud Operation
Original release date: November 27, 2018
Systems Affected
Microsoft Windows
Overview
This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland...