InfoSec Compliance & AI Governance For over 20 years, DISC InfoSec has been a trusted voice for cybersecurity professionals—sharing practical insights, compliance strategies, and AI governance guidance to help you stay informed, connected, and secure in a rapidly evolving landscape.
Feb 04 2019
Metro Bank has become the first major bank to disclose SS7 attacks against its customers, but experts believe it isn’t an isolated case.
Source: Metro Bank is the first bank that disclosed SS7 attacks
Feb 03 2019
Personal data is a precious commodity but sometimes we can share too much? Rob thinks we need to develop our human firewall in an age where some much of our lives is online. Rob May is chairman of IoD Surrey, an award-winning entrepreneur and Managing Director of ramsac limited.
Rob makes complex subjects straightforward by using real life examples, humor and pragmatism. He is passionate about his work, positive about life and committed to helping people understand and grow.
He lives with his wife and children in Horsell and is very much a part of the local community. This talk was given at a TEDx event using the TED conference format but independently organized by a local community.
Feb 03 2019
Bolt is in beta phase of development which means there can be bugs. Any production use of this tool discouraged. Bolt crawls the target website
Source: Bolt : Cross-Site Request Forgery Scanner Tool 2019
Feb 02 2019
If you are using a laptop, chances are you have a…
Source: Check now to see if your webcam is being hacked
Feb 01 2019
Motherboard has identified a specific UK bank that has fallen victim to so-called SS7 attacks, and sources say the issue is wider than previously reported.
Source: Criminals Are Tapping into the Phone Network Backbone to Empty Bank Accounts
Jan 31 2019
Thought Collection #1 was big? Collection #2-5 just dwarfed it
Source: The biggest ever data dump just hit a colossal 2.2 billion accounts
Jan 30 2019
Remotely Spying via #FaceTime.
FaceTime any iOS 12.1 or later and you can remotely spy on them (audio and video) before they accept incoming call.
Jan 29 2019
3D Electric powerlines over sunrise
Countries could launch damaging attacks against gas pipelines and electricity grid, says assessment.
Source: Cyber attacks: China and Russia can disrupt US power networks warns intelligence report | ZDNet
Jan 29 2019
The Hawkeye Scanner CLI is a project security, vulnerability and general risk highlighting tool. It is meant to be integrated into your pre-commit hooks
Source: Scanner CLI : A Project Security/Vulnerability/Risk Scanning Tool
Jan 28 2019
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.
Source: Attackers used a LinkedIn job ad and Skype call to breach bank’s defences
Jan 27 2019
Facebook Messenger, Instagram and WhatsApp are to be integrated under the hood so that messages will travel across a unified communications platform. So, what are the implications on privacy for users of these services?
Source: How WhatsApp Merger With Facebook Messenger Puts Your Privacy At Risk
Jan 25 2019
UK-based Fidus Information Security was targeted by angler phishing
Source: How a Security Vendor Tricked Social Media Phishers
Subscribe to DISC InfoSec blog by Email
Jan 25 2019
Malware can spread much more easily on obsolete platforms, warns security body. With less than a year until the end of Windows 7 support, don’t get caught out.
Source: Windows 7 migration warning: Plan now to avoid security worries later | ZDNet
Subscribe to DISC InfoSec blog by Email
Jan 24 2019
Google Alphabet incubator Jigsaw says knowing how to spot a phish plus two-factor authentication are the best defenses against falling for a phishing email.
Source: Google Creates Online Phishing Quiz
Subscribe to DISC InfoSec blog by Email
Jan 24 2019
More than 70% of tech professionals said security spending has increased in the past year, according to a Ping Identity report.
Source: Security is the no. 1 IT barrier to cloud and SaaS adoption
Jan 23 2019
Follow the guidance in this CIS document to configure Microsoft 365 security settings to the level that suits your organization.
Source: Center for Internet Security releases Microsoft 365 benchmarks
Jan 23 2019
Here we have great news for all iPhone Jailbreak lovers and concerning one for the rest of iPhone users.
A Chinese cybersecurity researcher has today revealed technical details of critical vulnerabilities in Apple Safari web browser and iOS that could allow a remote attacker to jailbreak and compromise victims’ iPhoneX running iOS 12.1.2 and before versions.
Source: Chinese Hacker Publishes PoC for Remote iOS 12 Jailbreak On iPhone X
Jan 22 2019
Data belonging to online casinos found exposed online on unprotected Elastic search instance, it includes info on 108 million bets and user details
Source: Did you win at online casinos? Your data might have had exposed online
Jan 22 2019
Patching vulnerabilities is often seen as a key element of keeping systems secure. But a new report suggests businesses could be ‘smarter’ in their patching regimes and prioritize the i…
Source: Businesses can safely delay patching most vulnerabilities
