ITSEC News @itsecbot@schleuss.online

#introductions This bot is posting ITSEC related news from all over the web - usually refreshes every few minutes with new stories. If you would like to see more sites included, write to the maintainer @emanuel - you might also be interested in @vulnbot

How $100M in Jobless Claims Went to Inmates - The U.S. Labor Department’s inspector general said this week that roughly $100 million in fraudulent... https://krebsonsecurity.com/2021/02/how-100m-in-jobless-claims-went-to-inmates/ #neer-do-wellnews #alittlesunshine #labordepartment #jimpatterson #webfraud2.0 #blakehall #id.me

Cyberattacks Launch Against Vietnamese Human-Rights Activists - Vietnam joins the ranks of governments using spyware to crack down on human-rights defenders. https://threatpost.com/cyberattacks-vietnam-human-rights-activists/164284/ #government #malware

How to Defend Linux from Attacks - Although Linux is still a fraction of the market share of Microsoft Windows and Mac OS X, its growt... http://feedproxy.google.com/~r/securityweekly/XBIC/~3/HhoBvvP0gWc/ #configurationmanagement #vulnerabilitymanagement #containersecurity #endpointsecurity #assetmanagement #patchmanagement #cloudsecurity #compliance #articles #devops

Threat Source newsletter (Feb. 25, 2021) - Newsletter compiled by Jon Munshaw.
Good afternoon, Talos readers.  
We all think of APTs as these w... http://feedproxy.google.com/~r/feedburner/Talos/~3/_LGB9z4m9hc/threat-source-newsletter-feb-25-2021.html #threatsourcenewsletter #features

Research shows that a lack of attention is being paid to patching vulnerabilities and something has to be done about it - Edgescan, a full-stack vulnerability management service, has just released their Vulnerability Sta... https://www.itsecurityguru.org/2021/02/25/research-shows-that-a-lack-of-attention-is-being-paid-to-patching-vulnerabilities-and-something-has-to-be-done-about-it/?utm_source=rss&utm_medium=rss&utm_campaign=research-shows-that-a-lack-of-attention-is-being-paid-to-patching-vulnerabilities-and-something-has-to-be-done-about-it

Chinese cyberspies targeted Tibetans with a malicious Firefox add-on - The Chinese hacking group used the malicious add-on to collect Gmail and Firefox data from their v... https://www.zdnet.com/article/chinese-cyberspies-targeted-tibetans-with-a-malicious-firefox-add-on/#ftag=RSSbaffb68

Health Website Leaks 8 Million COVID-19 Test Results - A teenaged ethical hacker discovered a flawed endpoint associated with a health-department website... https://threatpost.com/health-website-leaks-covid-19-test/164274/ #mobilesecurity #websecurity #breach

Malicious Mozilla Firefox Extension Allows Gmail Takeover - The malicious extension, FriarFox, snoops in on both Firefox and Gmail-related data. https://threatpost.com/malicious-mozilla-firefox-gmail/164263/ #websecurity #malware #hacks

Celebrating the influence and contributions of Black+ Security & Privacy Googlers - Posted by Royal Hansen, Vice President, SecurityBlack History Month may be coming to a close, but ou... http://feedproxy.google.com/~r/GoogleOnlineSecurityBlog/~3/pFpV8NGUeto/celebrating-influence-and-contributions.html #security #privacy

Beers with Talos Ep. #101: Is security the career you really want? -  
Beers with Talos (BWT) Podcast episode No. 101 is now available. Download this episode and subscri... http://feedproxy.google.com/~r/feedburner/Talos/~3/9aRe0ILEaDQ/beers-with-talos-ep-101-is-security.html #beerswithtalos #features #podcasts

How a Popular Company Could’ve Prevented a Phishing Attack - The first known mention of the word “phishing” happened in the America Online (AOL) user group named... https://duo.com/blog/how-a-popular-company-couldve-prevented-a-phishing-attack #industrynews

Nest HackTheBox Walkthrough - Today we are going to crack a machine called Nest. It was created by VbScrub. This is a Capture th... https://www.hackingarticles.in/nest-hackthebox-walkthrough/ #ctfchallenges

The Business of Fraud: An Overview of How Cybercrime Gets Monetized - Editor’s Note: The following post is an excerpt of a full report. To read the entire analysis, to ... https://www.recordedfuture.com/how-cybercrime-gets-monetized/ #research

Recorded Future’s free Cyber Daily newsletter brings trending threat insights straight to your inbox - Graham Cluley Security News is sponsored this week by the folks at Recorded Future. Thanks to the ... https://grahamcluley.com/feed-sponsor-recorded-future-17/ #feedonly

Cisco Warns of Critical Auth-Bypass Security Flaw - Cisco also stomped out a critical security flaw affecting its Nexus 3000 Series Switches and Cisco... https://threatpost.com/cisco-critical-security-flaw/164255/ #vulnerabilities #websecurity

This chart shows the connections between cybercrime groups - CrowdStrike puts together a list of connections and how cybercrime groups cooperate with each othe... https://www.zdnet.com/article/this-chart-shows-the-connections-between-cybercrime-groups/#ftag=RSSbaffb68

This chart shows the connections between cybercrime groups -  https://www.zdnet.com/article/this-chart-shows-the-connections-between-cybercrime-groups/ https://tech-wreckblog.blogspot.com/2021/02/this-chart-shows-connections-between.html

CB-K20/0229 Update 15 - Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche di... https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2021/02/warnmeldung_cb-k20-0229_update_15.html

CB-K20/0288 Update 10 - Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche di... https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2021/02/warnmeldung_cb-k20-0288_update_10.html

CB-K20/0229 Update 16 - Die GNU libc ist die Basis C Bibliothek unter Linux sowie anderen Unix-Betriebssystemen, welche di... https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2021/02/warnmeldung_cb-k20-0229_update_16.html