Google Removes Android "App Permissions" List from the Play Store...

Employer's Survival Guide to Security for a Remote and Hybrid Workforce

For many employees, kitchen tables and home offices have replaced cubicles and open-concept workspaces. Even as the economy reopens, many Americans will remain working from home, while others will work a hybrid schedule. According to a recent Gartner survey, 74% of CFOs plan to move at least some employees to remote work permanently.

Google Removes "App Permissions" List from Play Store for New "Data Safety" Section

Following the launch of a new "Data safety" section for the Android app on the Play Store, Google appears to be readying to remove the app permissions list from both the mobile app and the web. The change was highlighted by Esper's Mishaal Rahman earlier this week. The Data safety section, which ...

Hackers Targeting VoIP Servers By Exploiting Digium Phone Software

VoIP phones using Digium's software have been targeted to drop a web shell on their servers as part of an attack campaign designed to exfiltrate data by downloading and executing additional payloads. "The malware installs multilayer obfuscated PHP backdoors to the web server's file system, ...

New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain

Researchers have disclosed details about a security vulnerability in the Netwrix Auditor application that, if successfully exploited, could lead to arbitrary code execution on affected devices.  "Since this service is typically executed with extensive privileges in an Active Directory environment, ...

5 Key Things We Learned from CISOs of Smaller Enterprises Survey

New survey reveals lack of staff, skills, and resources driving smaller teams to outsource security. As business begins its return to normalcy (however “normal” may look), CISOs at small and medium-size enterprises (500 – 10,000 employees) were asked to share their cybersecurity challenges and ...

New Cache Side Channel Attack Can De-Anonymize Targeted Online Users

A group of academics from the New Jersey Institute of Technology (NJIT) has warned of a novel technique that could be used to defeat anonymity protections and identify a unique website visitor. "An attacker who has complete or partial control over a website can learn whether a specific target ...

The Security Appliance Survival Guide

How to make network security virtual appliance work in the cloudâ?¦for now. We all know that appliances weren’t designed for the cloud. Different environment, different time, different problems, and different requirements for solutions. And, of course, very different expectations of how long it should take to deploy and secure an app.