Syndikovat obsah
The First Stop For Security News
Aktualizace: 1 rok 26 týdnů zpět

Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs

8 hodin 36 sek zpět
The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same Linux rootkit and backdoor combo.
Kategorie: Hacking & Security

Black Hat 2020: In a Turnaround, Voting Machine Vendor Embraces Ethical Hackers

8 hodin 5 min zpět
Voting machine technology seller Election Systems & Software (ES&S) offered an olive branch to security researchers with new safe harbor terms and vulnerability disclosure policies at Black Hat USA 2020.
Kategorie: Hacking & Security

Twitter Fixes High-Severity Flaw Affecting Android Users

5 Srpen, 2020 - 23:36
A vulnerability in Twitter for Android could have allowed attackers to access private direct messages (DMs) and other data.
Kategorie: Hacking & Security

Black Hat 2020: Scaling Mail-In Voting Spawns Broad Challenges

5 Srpen, 2020 - 23:00
Voting Village security celeb Matt Blaze delves into the logistics of scaling up mail-in voting ahead of November's election.
Kategorie: Hacking & Security

Black Hat 2020: Open-Source AI to Spur Wave of ‘Synthetic Media’ Attacks

5 Srpen, 2020 - 22:07
The explosion of open-source AI models are lowering the barrier of entry for bad actors to create fake video, audio and images - and Facebook, Twitter and other platforms aren't ready.
Kategorie: Hacking & Security

High-Severity Android RCE Flaw Fixed in August Security Update

5 Srpen, 2020 - 18:14
Google addressed high-severity and critical flaws tied to 54 CVEs in this month's Android security bulletin.
Kategorie: Hacking & Security

Microsoft Teams Patch Bypass Allows RCE

5 Srpen, 2020 - 17:47
An attacker can hide amidst legitimate traffic in the application's update function.
Kategorie: Hacking & Security

NSA Warns Smartphones Leak Location Data

5 Srpen, 2020 - 17:43
The agency known for its own questionable surveillance activity advised how mobile users can limit others’ ability to track where they are.
Kategorie: Hacking & Security

A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return

5 Srpen, 2020 - 15:00
During Black Hat USA 2020, Threatpost talks to Sherrod DeGrippo, with Proofpoint, about Emotet's recent return -and how a cyber vigilante is attempting to thwart the malware's comeback.
Kategorie: Hacking & Security

NetWalker Ransomware Rakes in $29M Since March

4 Srpen, 2020 - 23:36
The ransomware has surged since moving to a RaaS model.
Kategorie: Hacking & Security

Newsletter WordPress Plugin Opens Door to Site Takeover

4 Srpen, 2020 - 20:11
An XSS bug and a PHP object-injection vulnerability are present in a plugin used by hundreds of thousands of websites.
Kategorie: Hacking & Security

Twitter Could Face $250M FTC Fine Over Improper Data Use

4 Srpen, 2020 - 16:46
The potential FTC fine comes after Twitter last year acknowledged that user emails and phone numbers were being used for targeted advertising.
Kategorie: Hacking & Security

Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks

4 Srpen, 2020 - 14:20
COVID-19 pandemic spurs spoofing preference changes, plus a surge in email-based attacks.
Kategorie: Hacking & Security

Podcast: Learning to ‘Speak the Language’ of OT Security Teams

4 Srpen, 2020 - 14:19
Andrew Ginter, VP Industrial Security at Waterfall Security Solutions, talks about the differing priorities between IT and OT security teams as industrial control systems become connected.
Kategorie: Hacking & Security

Google Updates Ad Policies to Counter Influence Campaigns, Extortion

3 Srpen, 2020 - 22:01
Starting Sept. 1, Google will crack down on misinformation, a lack of transparency and the ability to amplify or circulate politically influential content.
Kategorie: Hacking & Security

Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw

3 Srpen, 2020 - 21:03
Almost two months after a high-severity flaw was disclosed - and seven months after it was first reported - Netgear has yet to issue fixes for 45 of its router models.
Kategorie: Hacking & Security

Garmin Pays Up to Evil Corp After Ransomware Attack — Reports

3 Srpen, 2020 - 18:26
The ransom for the decryptor key in the WastedLocker attack could have topped $10 million, sources said.
Kategorie: Hacking & Security

Black Hat USA 2020: Critical Flaws Reveal Common AppSec Holes

3 Srpen, 2020 - 17:13
With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in - and why they are the "holy grail" for attackers.
Kategorie: Hacking & Security

Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft

3 Srpen, 2020 - 15:05
Researchers disclosed critical flaws in the popular Meetup service at Black Hat USA 2020 this week, which could allow takeover of Meetup "Groups."
Kategorie: Hacking & Security

4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users

31 Červenec, 2020 - 23:05
The flaws have been confirmed by Grandstream, but no firmware update has yet been issued.
Kategorie: Hacking & Security