Syndikovat obsah
The First Stop For Security News
Aktualizace: 12 hodin 10 min zpět

ThreatList: Malware Samples Targeting IoT More Than Double in 2018

18 Září, 2018 - 21:40
A honeypot set up to sniff out data on infected IoT devices found a broad array of compromised devices – from Mikrotik routers to dishwashers.
Kategorie: Hacking & Security

State Government Online Payment Service Exposes 14M Customers

18 Září, 2018 - 19:11
Outdated security practices made it simple to access other people's receipts for everything from traffic tickets to paying bail.
Kategorie: Hacking & Security

Dangerous Pegasus Spyware Has Spread to 45 Countries

18 Září, 2018 - 16:40
The malicious spyware has also been found in use in countries known for targeting human rights.
Kategorie: Hacking & Security

Insiders Continue to be Data Theft’s Best Friend

18 Září, 2018 - 15:52
The enemy within the enterprise is often employees who are either malicious or unwittingly allowing attackers inside a protected network.
Kategorie: Hacking & Security

Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras

17 Září, 2018 - 23:13
Firmware used in up to 800,000 CCTV cameras open to attack thanks to buffer overflow zero-day bug.
Kategorie: Hacking & Security

Facebook Now Offers Bounties For Access Token Exposure

17 Září, 2018 - 19:43
The newly expanded Facebook bug bounty program sniffs out access token exposure flaws.
Kategorie: Hacking & Security

Old WordPress Plugin Being Exploited in RCE Attacks

17 Září, 2018 - 19:19
Old instances of the popular WordPress Duplicator Plugin are leaving sites open to remote code execution attacks.
Kategorie: Hacking & Security

CSS-Based Attack Causes iOS, macOS Devices to Crash

17 Září, 2018 - 17:20
The attack stems from a glitch in WebKit, an HTML layout browser engine in Apple’s Safari browser.
Kategorie: Hacking & Security

Researchers Heat Up Cold-Boot Attack That Works on All Laptops

14 Září, 2018 - 23:45
The attack bypasses BIOS mitigations for cold-boot compromise on models from Apple, Dell, Lenovo and all others made in the last 10 years.
Kategorie: Hacking & Security

E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content

14 Září, 2018 - 22:32
The rules would apply to all hosting service providers offering services in the E.U., regardless of size, even if they’re not based there.
Kategorie: Hacking & Security

Five Weakest Links in Cybersecurity That Target the Supply Chain

14 Září, 2018 - 18:09
Third-party breaches have become an epidemic as cybercriminals target the weakest link. Organizations such as BestBuy, Sears, Delta and even NYU Medical Center are just a few that have felt the impact of cyberattacks through third-party vendors. The fallout from these breaches can be costly, as the average enterprise pays $1.23 million per incident, up […]
Kategorie: Hacking & Security

Magecart Threat Group Racks Up More Hack Victims

14 Září, 2018 - 15:26
The threat group has racked up a list of victims including Feedify, Groopdealz and British Airways.
Kategorie: Hacking & Security

OilRig APT Continues Its Ongoing Malware Evolution

13 Září, 2018 - 23:19
The Iran-linked APT appears to be in a state of continuous tool development, analogous to the DevOps efforts seen in the legitimate software world.
Kategorie: Hacking & Security

ThreatList: Microsoft Macros Remain Top Vector for Malware Delivery

13 Září, 2018 - 21:26
The second-most popular delivery method is CVE-2017-11882, a patched Microsoft vulnerability that allows the attacker to perform arbitrary code-execution.
Kategorie: Hacking & Security

Experts Bemoan Shortcomings with IoT Security Bill

13 Září, 2018 - 15:14
The infosec community say California's IoT security bill is "nice," but doesn't hit on the important issues.
Kategorie: Hacking & Security

PowerShell Obfuscation Ups the Ante on Antivirus

12 Září, 2018 - 22:07
The development fits a trend that sees threat actors turning to well-known, commodity malware, overcoming its easy detection with ever-better obfuscation methods.
Kategorie: Hacking & Security

Apple Yet to Patch Safari Browser Address Bar Spoofing Flaw

12 Září, 2018 - 18:17
A flaw in Safari - that allows an attacker to spoof websites and trick victims into handing over their credentials - has yet to be patched.
Kategorie: Hacking & Security

Osiris Banking Trojan Displays Modern Malware Innovation

12 Září, 2018 - 18:12
Osiris’ fundamental makeup positions it in the fore of malware trends, despite being based on old source code that’s been knocking around for years.
Kategorie: Hacking & Security

Threatlist: Email Attacks Surge, Targeting Execs

12 Září, 2018 - 00:17
Overall, the number of email fraud attacks per targeted company rose 25 percent from the previous quarter (to 35 on average) and 85 percent from the year-ago quarter.
Kategorie: Hacking & Security

Microsoft Patches Actively Exploited Bug as Part of Patch Tuesday

11 Září, 2018 - 23:04
Microsoft's September Patch Tuesday release tackles a vulnerability actively being exploited in the wild.
Kategorie: Hacking & Security