Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Facebook Helps Users Detect Phishing Emails
Newest First  |  Oldest First  |  Threaded View
Dr.T
Dr.T,
User Rank: Ninja
12/24/2017 | 2:52:38 PM
Re: Not convenient enough
why they were targeted, And how they are targeted is important to know and explain the users.
Dr.T
Dr.T,
User Rank: Ninja
12/24/2017 | 2:50:24 PM
Re: Not convenient enough
For the standard user, I believe user awareness training to be a more efficient means of get security messages across. That is true. Security awareness trainings are the best way to go.
Dr.T
Dr.T,
User Rank: Ninja
12/24/2017 | 2:48:38 PM
Re: Not convenient enough
This may be fine for security oriented and technology oriented folks I would agree with this, it would mainly be discarded since not easy to use.
Dr.T
Dr.T,
User Rank: Ninja
12/24/2017 | 2:45:26 PM
Re: Won't add value
I would agree, it is not easy for the users to manage this.
Dr.T
Dr.T,
User Rank: Ninja
12/24/2017 | 2:43:22 PM
Any step is a good step
I say any step toward protecting users is a good step, it may not be efficient in the first go but I can still help
RyanSepe
RyanSepe,
User Rank: Ninja
12/22/2017 | 8:11:17 AM
Re: Won't add value
For your post script reach out to a site administrator.
RyanSepe
RyanSepe,
User Rank: Ninja
12/22/2017 | 8:10:43 AM
Not convenient enough
This may be fine for security oriented and technology oriented folks, however to the typical facebook user this does not seem to a viable option to me. For the standard user, I believe user awareness training to be a more efficient means of get security messages across. Rerouting the user immediately and explaining what to look for, why they were targeted, and the overall risk.
paulfwalsh
paulfwalsh,
User Rank: Apprentice
12/21/2017 | 12:00:52 PM
Won't add value
This will help 000000.1% of Facebook users. Displaying emails sent in a place nobody knows, *after* they have been sent, is not going to produce enough juice to justify the squeeze.

p.s. your site doesn't allow us to login with Twitter or LinkedIn - doesn't work. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Developing and Testing an Effective Breach Response Plan
Whether or not a data breach is a disaster for the organization depends on the security team's response and that is based on how the team developed a breach response plan beforehand and if it was thoroughly tested. Inside this report, experts share how to: -understand the technical environment, -determine what types of incidents would trigger the plan, -know which stakeholders need to be notified and how to do so, -develop steps to contain the breach, collect evidence, and initiate recovery.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-35507
PUBLISHED: 2022-12-04
A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers...
CVE-2022-35508
PUBLISHED: 2022-12-04
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Pr...
CVE-2022-46411
PUBLISHED: 2022-12-04
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges.
CVE-2022-46412
PUBLISHED: 2022-12-04
An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands.
CVE-2022-46413
PUBLISHED: 2022-12-04
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal.