Curated Daily News for February 5, 2021

---

Today’s 12 newsworthy articles include: New O365 phish based in Google Firebase, Critical Cisco VPN flaws patched, Sloppy patching introduces more zero days, Going passwordless, and how a strong Privacy program helps Security.

• New Report Reveals Significant Delays Revoking System Access, Impacting Security Risk
• Microsoft Office 365 Attacks Sparked from Google Firebase
• Going Passwordless: Cybersecurity for the New Decade
• Critical Flaws Reported in Cisco VPN Routers for Businesses—Patch ASAP
• Does a Strong Privacy Program Make for a Stronger Security Program?
• Sloppy patches are a breeding ground for zero-day exploits, says Google
• Web Application Attacks Grow Reliant on Automated Tools
• Employee Monitoring Software Secures Remote Teams
• Microsoft Says It’s Time to Attack Your Machine-Learning Models
• Bug Bounty Failure Stories To Learn From
• KEMTLS: Cloudflare trials new encryption mechanism in anticipation of post-quantum TLS shortcomings
• BSidesSF 2020 – Marc Vilanova’s & Forest Monsen’s ‘Dispatch: Crisis Management Automation’

Tool Of The Day

OpenCSPM – Open Cloud Security Posture Management Engine: Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Useful for security teams running infrastructure in cloud environments looking to gain visibility into security risk across the entire account and track the resolution of those issues.