Musk wants Twitter DMs end-to-end encrypted / Log4Shell, ProxyLogon, Atlassian bugs most exploited / Cloudflare thwarts giant DDoS attack

Plus: Internet Explorer users are being infected by a Rig Exploit Kit campaign.

Inside.com Part of   Network April 28, 2022

Presented by

Elon Musk wants to make Twitter DMs end-to-end encrypted like Signal. Musk has proposed several changes to Twitter as the process moves forward for him to buy it. The deal is expected to close later this year. More: Musk tweeted that "Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages." Twitter's DMs are not end-to-end encrypted, a practice used by the most popular communication apps in the world today. Elon Musk recently bought a majority stake on Twitter with a transaction valued at $44B or $54.20 per share in cash. Musk has stated that he considers Twitter the world's digital town square and that protecting free speech on the platform will be his priority.

Log4Shell, ProxyLogon, and Atlassian bugs have topped CISA's list of most exploited vulnerabilities in 2021.CISA Director Jen Easterly said the list is a reminder that hackers are constantly active. More: The Cybersecurity and Infrastructure Security Agency released its list of the top 15 routinely exploited vulnerabilities in 2021. Log4Shell and Microsoft bugs ProxyLogon and ProxyShell topped this list.  CISA noted that three of the top 15 most exploited vulnerabilities were also routinely exploited in 2020: CVE-2020-1472, which affects Windows products; CVE-2018-13379, which affects networking equipment vendor Fortinet; and CVE-2019-11510, which impacts Pulse Secure products. The list was compiled with help from NSA, FBI, ACSC, CCCS, NZ NCSC, and NCSC-UK.

A message from CONNECTEAM Discover the New Way to Effectively Manage Your Employees Paper-Free Until this very day, so many businesses around the world are using pen and paper to handle crucial aspects of their daily business. But what’s stopping your employees from losing/damaging their shift schedules, forgetting to clock in and out, and not receiving important messages from their managers? That’s why thousands of businesses from more than 90 different industries are turning to Connecteam to solve these problems once and for all. With its wide range of features, managers can effortlessly track employees’ hours, streamline communication and oversee their shifts - all from the convenience of their mobile devices. Most importantly - everyone in your business can easily use Connecteam because of its simple user interface.  Never use paper again to manage your employees. Go completely digital today. Connecteam is free to use for your first 50 users. Paid plans start from $39/month and come with a 14-day free trial. Start your Free Trial

Cloudflare has thwarted one of the largest DDoS attacks in history. The company mitigated a 15.3-million-RPS DDoS attack. More: Volumetric DDoS attacks are designed to overwhelm a target network with significantly high volumes of malicious traffic. This attack was launched from a botnet consisting of roughly 6,000 unique compromised devices. 15% of the attack traffic came from Indonesia, followed by Russia, Brazil, India, Colombia, and the U.S. HTTPS DDoS attacks are more expensive in computational resources because of the higher cost of establishing a secure TLS encrypted connection, meaning the cost is higher for the hacker to launch the attack and for the victim.

A Rig Exploit Kit campaign is infecting Internet Explorer users. The malware deploys the RedLine Stealer Trojan. More: The flaw is being tracked as CVE-2021-26411 and has a CVSS score of 8.8 RedLine Stealer Trojan steals information such as username, hardware, browsers installed, and anti-virus software. It then exfiltrates this data to a remote command and control server. Most of the infections are located in Brazil, Germany, the U.S., Egypt, Canada, China, and Poland.

A message from LAIKA If you’re trying to close deals, SOC 2 is probably a thorn in your side. What is it, and who cares? Your business needs SOC 2. But building compliance from scratch is complicated, time-consuming, and the cost can be crippling. Laika has you covered. Uncomplicate SOC 2 with our guide for growth-minded founders. In the guide by Laika you’ll learn: What is SOC 2 compliance and why it matters for your startup How to close more deals faster by becoming SOC 2 compliant How to prepare for SOC 2 compliance What to expect in terms of time and cost What to do after the report is in What makes Laika the authority on SOC 2? They’re the only compliance automation solution that was built by compliance experts. Learn how to turn compliance from a pain point into a secret edge over your competitors. Download Now

The U.S. Air Force is asking the internet to name its official cybersecurity mascot. All of the proposals will be considered by the Air Force. More: The Office of the Chief Information Security Officer of the USAF and the Space Force DOD is asking for name proposals on Twitter and other social media platforms. This mascot will be the official version used in all domains. The figure is a robotic-looking male with a shield and visible government logos.

Quick Hits: Over 5,000 global customers trust Outreach as their Sales Execution Platform. Find out why it’s the right solution for your team.* The official revised NIST Cybersecurity Supply-Chain Guidance is imminent. Montana’s flagship University campuses have pledged to shore up their cybersecurity. IBM Malaysia has partnered with Tech Mahindra in offering advanced cybersecurity solutions for local enterprises. To deliver real-time analytics on massive datasets, developers must balance latency, throughput, concurrency, and data freshness. Watch Molecula's Webinar.* *This is a sponsored post.

Upcoming events at Inside: April 28 - Alternative Investments 2: Crypto Safety Standards (Register Here) May 03 - Venturing in VC - Episode #17 with Ryan Holmes (LOI Venture) (Register Here) May 05 - [Live Webinar] Women in Sales: How to Build Your Personal Brand to Drive More Sales presented by Introhive (Register Here) * May 12 - Making Metaverse Dating a Reality (Register Here) May 18 - Need To Know NoCoder: Jatin Arora (Utilize) (Register Here) May 19 - Understanding Fractionalization (Register Here) May 24 - Meet Our Fund 3 (Register Here) May 31 - Ethereum Merge with Anthony Donofrio (Ethereum) (Register Here) June 01 - Selling Consumer Goods in Web3 (Register Here) June 09 - Empowering Content Creators with No Code (Register Here) June 22 - Security Lessons from the Log4Shell Vulnerability (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford.

Connecteam is the all-In-One Employee Management Software. Time Tracking, Shift Scheduling, Communication, and Much More.

Laika is a unified compliance platform that automates workflows for audits, infosec monitoring, and vendor due diligence in a single, collaborative space.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.