Zoom arrives on Amazon, Google, Facebook smart devices

Sources

• Source Link

Share

Other Blog

• How organizations and individuals can defend against would-be identity thieves

  Shielding against identity theft in a post-pandemic world.

  Read More

• Leftover files are putting visitors to popular websites at risk

  Although it may be difficult for web administrators to keep an eye on every single file, the most severe server breaches are often the result of the least noticeable security holes on their websites and leftover files are one such example.

  By analyzing the top 35,000 websites from the Alexa top 1m list, CyberNews discovered that 82 of the most popular websites had leftover files exposed to anyone and accessible without authorization. 

  CyberNews researcher Martynas Vareikis provided further insight on the dangers posed by leftover files in a new report, saying:

  “From overlooked database history and DS_STORE files to GIT repositories, even a single exposed item can open millions, if not billions, of visitors to a plethora of potential dangers, including data breaches, phishing attacks, identity theft, or worse.”

  To make matters worse, the reach of the affected sites is massive and the news outlet estimates that these sites receive around 17m total visits a month. The list is also made up of sites from all over the world including domains from the US, Russia, Japan, China, Germany, France, Korea, the Netherlands and more and these sites are even linked to by government and educational organizations.

  Exposed leftover files

  To conduct their investigation, CyberNews researchers scanned the 35,000 most-visited websites on the internet for exposed DS-STORE, ENV AND MYSQL_HISTORY files as well as Git repositories and then analyzed the output and removed any false positives.

  When it came to the types of leftover files found on the world's most-visited sites, Desktop Services Store (DS_STORE) files topped the list with over 81 exposed instances overall followed by exposed GIT directories with 24 instances and MYSQL_HISTORY and ENV files with four exposed instances of each file type discovered during the investigation.

  By analyzing these exposed files, malicious actors can collect information about the contents of folders stored in web servers which can lead them to unprotected files containing sensitive data and allow them to access credentials.

  Founder of the cyber defense and threat detection service provider Melurna, Sam Jadali explained to CyberNews how leftover files can be used by cybercriminals to perform lateral attacks, inject malware or to launch ransomware attacks, saying:

  “The ubiquitous and pervasive nature of these bots makes it increasingly easy to compromise servers. Web and app developers may forget to delete backups, application environment or MySQL history files. When left in publicly accessible locations, bad actors use the data to discover credentials, map server infrastructure, perform lateral attacks, inject malware, or infect servers with ransomware. Using today’s advanced technology, hackers can scan the global internet IPv4 range in less than 5 minutes.”

  To mitigate the security threats from leftover files, Jadali recommends that web server administrators validate input from users, handle exceptions, use browser security headers, implement Identity and Access Management, run automatic security products to highlight vulnerabilities during development, testing and deployment and perform manual penetration testing on a regular basis.

  Looking to improve your security online? Check out our list of the best antivirus software and protect your privacy with one of the best VPN services

  Via CyberNews

  Read More

• Huge Cyberpunk 2077 patch 1.2 is now out, finally adds ray tracing for AMD GPUs

  Also improves the controls for driving vehicles, and allows for turning off double-tap to dodge.

  Read More

• Amazon's early Black Friday sale slashes the iPad Pro to its lowest price ever

  Amazon has launched an early Black Friday sale with fantastic deals dropping all month, and we've just spotted a massive price cut on the all-new iPad Pro. Right now, you can get the 256GB version of the 12.9-inch iPad Pro on sale for $999 (was $1,199). That's a massive $200 discount and the lowest price we've ever seen for the powerful tablet.
  
  The 128GB iPad Pro is also on sale for $999, so with this fantastic deal, you're getting more storage for the exact cost. We typically see discounts like this reserved for Amazon's official Black Friday deals event, so we recommended snapping up this new record-low price before it's too late.

  • See more early Black Friday deals at Amazon

  Early Black Friday iPad deal

  

  iPad Pro 12.9-inch 2021 (256GB): $1,199 $999 at Amazon
  Save $200 - You can get the all-new iPad Pro on sale for $999 at Amazon's early Black Friday sale. That's the lowest price we've ever seen and the same cost as the 128GB model. The 12.9-inch tablet delivers laptop-like power and speed thanks to Apple's M1 chip and provides an impressive all-day battery life.

  Released in May, Apple's 2021 iPad Pro features a stunning 12.9-inch Liquid Retina display, an all-new ultra-wide front-facing camera, and an impressive speaker system. Perfect for students, the lightweight iPad Pro delivers more power than most laptops by offering Apple's M1 chipset and 256GB of storage. You're also getting Face ID for secure authentication and Apple Pay, and an all-day battery life.

  More iPad deals

  You can also see our guide to the best Black Friday iPad deals and see more early device offers with our roundup of the best Black Friday Apple deals.
  
  You can see more of the best cheap iPad deals and if you're looking for something with less power you can also see the best cheap Amazon Fire tablet deals and sales.

  Read More