Aggregator

Data Analytics for Small Businesses: How to Manage Privacy Risks

NIST | Cybersecurity Insights
2 years 11 months ago
Perhaps you’ve been hearing about data analytics, which is being promoted as a way for even small businesses to analyze communications with customers, enhance customer experience, save money, and ultimately improve your brand. However, data analytics can have big privacy implications. You may think of managing privacy risk as protecting sensitive customer information, such as credit cards. As the Venn diagram to the right demonstrates, data security is certainly one aspect of privacy risk, but privacy risks can also arise by means unrelated to cybersecurity incidents. People can experience
Meghan Anderson

Video Tutorial: Hijacking SSH Agent

Embrace The Red
2 years 11 months ago

Recently I got the feedback to create more tutorials and videos, and I thought SSH Agent Hijacking on Linux and macOS (which I wrote about before here) would make a good one.

The video tutorial is here.

If you like this kind of content, then comment or like the video on YouTube and I’ll create more.

Hope it’s useful to get a good basic understanding of this TTP, and help build detections for it.

Critical Vulnerabilities in VMware Aria Operations for Logs

X-Force Exchange - Collection Feed
2 years 11 months ago
Summary VMware has released a fix for two critical vulnerabilities in VMware Aria Operations for Logs. The vulnerabilities both have a CVSS score of 9.8. Threat Type Vulnerability Overview On Tuesday, January 25, VMware released updates/upgrades for two critical vulnerabilities in its vRealize Log Insight (now VMware Aria Operations for Logs) software that could allow attackers to gain remote access via non-upgraded appliances. Both CVE-2022-31704 and CVE-2022-31706 have CVSS scores of 9.8 indicating a high

Managed ad