Accredited data recipients under the CDR will soon be able to appoint representatives that can access and use CDR data without accreditation.
Source: Read More (Latest topics for ZDNet in Security)
You might be interested in …
[SANS ISC] Out of Band Phishing. Using SMS messages to Evade Network Detection, (Thu, Aug 19th)
Many companies have extensive security tools to monitor employee computers. But these precautions often fail for “out of band” access that uses cellular networks instead of Ethernet/WiFi networks. Our reader Isabella sent us this phishing email that they received: Dear User, This is to let you know that our web-mail server will be upgraded and […]
Daily NCSC-FI news followup 2020-06-03
Critical SAP ASE Flaws Allow Complete Control of Databases threatpost.com/critical-sap-ase-flaws-complete-control-databases/156239/ If exploited, the most severe flaws could give unprivileged users complete control of databases and in some cases even underlying operating systems – The most severe vulnerability, CVE-2020-6248, has a CVSS score of 9.1 out of 10. See also: wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222. And also: www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/system-takeover-through-new-sap-ase-vulnerabilities/ Vulnerability Spotlight: […]
[BleepingComputer] Actively exploited bug bypasses authentication on millions of routers
Threat actors actively exploit a critical authentication bypass vulnerability impacting home routers with Arcadyan firmware to take them over and deploy Mirai botnet malicious payloads. […] Source: Read More (BleepingComputer)