Risk Level: Very Low. Type: Trojan.
February 7, 2019
Reading Time: ~4 min. In my blog, Password Constraints and Their Unintended Security Consequences, I advocate for the use of passphrases. Embedded in the comments section, one of our readers Ben makes a very astute observation: What happens when attackers start guessing by the word instead of by the letter? Then a four-word passphrase effectively becomes […]
February 7, 2019
Flaw in Multiple Airline Systems Exposes Passenger Data
February 7, 2019
Google Chrome extension warns if your password has been leaked
February 7, 2019
DanaBot updated with new C&C communication
ESET researchers have discovered new versions of the DanaBot Trojan, updated with a more complicated protocol for C&C communication and slight modifications to architecture and campaign IDs The post DanaBot updated with new C&C communication appeared first on WeLiveSecurity
February 7, 2019
Smashing Security #114: Darknet Diaries, death, and beauty apps
February 7, 2019
MacOS Zero-Day Exposes Apple Keychain Passwords
February 6, 2019
security update
February 6, 2019
Clever Phishing Attack Enlists Google Translate to Spoof Login Page
February 6, 2019
Google rolls out Chrome extension to warn you about compromised logins
The new tool aims to help in an age when billions of login credentials are floating around the internet The post Google rolls out Chrome extension to warn you about compromised logins appeared first on WeLiveSecurity
February 6, 2019
What are Data Manipulation Attacks, and How to Mitigate Against Them
February 6, 2019
Patch your Android now against critical .PNG image bug
February 6, 2019
Microsoft Confirms Serious ‘PrivExchange’ Vulnerability
February 6, 2019
Modern Cybercrime: It Takes a Village
February 6, 2019
Reading Time: ~3 min. The WordPress website platform is a vital part of the small business economy, dominating the content management system industry with a 60% market share. It gives businesses the ability to run easily-maintained and customizable websites, but that convenience comes at a price. The easy-to-use interface has given even users who are […]
February 6, 2019
Every day should be Safer Internet Day
February 6, 2019
IoT Scale Flaws Enable Denial of Service, Privacy Issues
February 5, 2019
security update
February 5, 2019
Risk Level: Very Low. Type: Trojan.
February 5, 2019
Google Patches Critical .PNG Image Bug
February 5, 2019
Webcast: Arm yourself before you go threat hunting in 2019
February 5, 2019
European Commission orders recall of children’s smartwatch over privacy concerns
The watch has been found to expose its wearers to a high level of risk of being contacted and monitored by attackers The post European Commission orders recall of children’s smartwatch over privacy concerns appeared first on WeLiveSecurity
February 5, 2019
EU Recalls Children’s Smartwatch That Leaks Location Data
February 5, 2019
The APT Name Game: How Grim Threat Actors Get Goofy Monikers
February 5, 2019
The cloud’s weakest security links aren’t where you’re looking
February 5, 2019
Risk Level: Very Low. Type: Trojan, Virus, Worm.
February 5, 2019
Spy Campaign Spams Pro-Tibet Group With ExileRAT
February 4, 2019
security update
February 4, 2019
‘Collection #1’ Data Dump Hacker Identified
February 4, 2019
SpeakUp Linux Backdoor Sets Up for Major Attack
February 4, 2019
Houzz discloses data breach, asks some users to reset passwords
Citing an ongoing investigation, the company wouldn’t say how or when the incident occurred The post Houzz discloses data breach, asks some users to reset passwords appeared first on WeLiveSecurity
February 4, 2019
security update
February 3, 2019
security update
February 3, 2019
security update
February 2, 2019
security update
February 2, 2019
New Mac Malware steals iPhone text messages from iTunes backups
February 2, 2019
Selfie stealing malware found in popular Android beauty camera apps
February 2, 2019
Authorities shut down xDedic marketplace for selling hacked servers
February 2, 2019
New Firmware Version of Nintendo Switch Hacked in just 4 Hours
February 2, 2019
FaceTime bug exposes live audio & video before recipient picks call
February 2, 2019
What If Your VPN Keeps Logs and Why You Should Care
February 2, 2019
Meet Aztarna, a tool to find vulnerable Internet connected robots
February 2, 2019
LinuxSecurity.com: A remote code execution vulnerability exists in PHP’s built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, contrib, and custom) may be performing file operations on insufficiently validated user input, thereby being
February 2, 2019
LinuxSecurity.com: Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly
February 2, 2019
LinuxSecurity.com: New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues.
February 2, 2019
Houzz Urges Password Resets After Data Breach
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Three UK customer details exposed in homepage blunder
February 1, 2019
Reading Time: ~2 min. Facebook Research App Removed from App Store After seeing their Onavo VPN application removed from the Apple App Store last year, Facebook has re-branded the service as a “research” app and made it available through non-Apple testing services. The app itself requires users download and install a Facebook Enterprise Developer Certificate […]
February 1, 2019
Threatpost News Wrap Podcast For Feb. 1
February 1, 2019
Cybercriminals Aim for the Super Bowl Goal Posts
February 1, 2019
Hackers used Karma tool to hack iPhones of prominent Govt officials
February 1, 2019
Four new caches of stolen logins put Collection #1 in the shade
The recently discovered tranches of stolen login credentials freely floating around the internet total 2.2 billion records The post Four new caches of stolen logins put Collection #1 in the shade appeared first on WeLiveSecurity
February 1, 2019
LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.38. Please see the MariaDB 10.0 Release Notes for further details:
February 1, 2019
LinuxSecurity.com: The 4.20.5 stable kernel update contains a number of important fixes across the tree.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
Risk Level: Very Low. Type: Trojan.
February 1, 2019
TheMoon Rises Again, With a Botnet-as-a-Service Threat
January 31, 2019
Reading Time: ~5 min. This is the second of a three-part report on the state of three malware categories: miners, ransomware, and information stealers. As noted in the last blog, mining malware is on a decline, partly due to turmoil affecting cryptocurrencies. Ransomware is also on a decline (albeit a slower one). These dips are at […]
January 31, 2019
security update
January 31, 2019
security update
January 31, 2019
security update
January 31, 2019
Prepare to Defend Your Network Against Swarm-as-a-Service
January 31, 2019
2019 Already Marred By Slew of Data Breach Incidents
January 31, 2019
U.S. Government Goes After North Korea’s Joanap Botnet
January 31, 2019