Menu

Link

Modern Cybercrime: It Takes a Village
Every day should be Safer Internet Day
IoT Scale Flaws Enable Denial of Service, Privacy Issues
Google Patches Critical .PNG Image Bug
EU Recalls Children’s Smartwatch That Leaks Location Data
Remote Desktop Protocol Clients Rife with Remote Code-Execution Flaws
The APT Name Game: How Grim Threat Actors Get Goofy Monikers
Spy Campaign Spams Pro-Tibet Group With ExileRAT
‘Collection #1’ Data Dump Hacker Identified
Donald Trump’s ‘Executive Time’ leak – journalists retype documents to protect White House source
SpeakUp Linux Backdoor Sets Up for Major Attack
New Mac Malware steals iPhone text messages from iTunes backups
Selfie stealing malware found in popular Android beauty camera apps
Authorities shut down xDedic marketplace for selling hacked servers
New Firmware Version of Nintendo Switch Hacked in just 4 Hours
FaceTime bug exposes live audio & video before recipient picks call
What If Your VPN Keeps Logs and Why You Should Care
Meet Aztarna, a tool to find vulnerable Internet connected robots
Beware; hackers are using malicious TeamViewer tool to spread malware
Houzz Urges Password Resets After Data Breach
Chafer APT Takes Aim at Diplomats in Iran with Improved Custom Malware
Ethical hacker may get 8 years in prison for reporting flaws in Magyar Telekom
Threatpost News Wrap Podcast For Feb. 1
Cybercriminals Aim for the Super Bowl Goal Posts
Hackers used Karma tool to hack iPhones of prominent Govt officials
Twitter follow bots cut off from API, as accounts disabled for spreading misinformation from Iran and elsewhere
Facebook Boots Hundreds of Iran-Linked Accounts For Spreading Misinformation
TheMoon Rises Again, With a Botnet-as-a-Service Threat
Prepare to Defend Your Network Against Swarm-as-a-Service
2019 Already Marred By Slew of Data Breach Incidents
Airbus Data Takes Flight; and Billions of Credentials Dumped on Dark Web
U.S. Government Goes After North Korea’s Joanap Botnet
Hackers hit Airbus, steal personal details of employees
Google Pulls Data-Chugging App From iOS Devices
Mac “CookieMiner” Malware Aims to Gobble Crypto Funds
Smashing Security #113: FaceTime, Facebook, faceplant
Attackers Can Track Kids’ Locations via Connected Watches
Stealthy Malware Disguises Itself as a WordPress License Key
Apple Blasts Facebook Over Data-Sucking ‘Research’ App
Researchers Allege ‘Systemic’ Privacy, Security Flaws in Popular IoT Devices
Exposed! Facebook pays teenagers to install app that harvests personal data
Japan to Hunt Down Citizens’ Insecure IoT Devices
2019 and Beyond: The (Expanded) RSAC Advisory Board Weighs in on What’s Next: Pt. 2
Feds Dismantle Dark Web Credentials Market
Mozilla Firefox 65 Ups the Ante on Privacy with Anti-Tracking Efforts
Apple Disables Group FaceTime Following Major Privacy Glitch
Apple races to fix FaceTime bug that lets you spy on someone *before* they pick up your call
2019 and Beyond: The (Expanded) RSAC Advisory Board Weighs in on What’s Next
Dailymotion Fights Ongoing Credential-Stuffing Attack
Active Scans Target Vulnerable Cisco Routers for Remote Code-Execution
WordPress Users Urged to Delete Zero-Day-Ridden Plugin
User of the world’s biggest DDoS-for-hire website? Police say they’re coming after you
Thousands of taxpayers tell HMRC to delete voiceprint data it stored without consent
LabKey Vulnerabilities Threaten Medical Research Data
Threatpost News Wrap Podcast For Jan. 25
Phishing Campaign Delivers Nasty Ransomware, Credential-Theft Two-Punch
Razy Malware Attacks Browser Extensions to Steal Cryptocurrency
Colorado police encrypt *all* their radio communications, frustrating journalists
B&Q data leak exposes information on 70,000 thefts from its stores, including names of suspected offenders
Business payroll compromise – a new way for criminals to steal from your company
Fighting Fire with Fire: API Automation Risks
ThreatList: Credential-Sniffing Phishing Attacks Erupted in 2018
Passwords at risk for users who fall for Eileen’s cousin’s voicemail
Bit-and-Piece DDoS Method Emerges to Torment ISPs
DarkHydrus Phishery tool spreading malware using Google Drive
Malicious apps deploy Anubis banking trojan using motion detection
8-year-old ‘scared to death’ after hacked Nest security camera warns of missile attack
Smashing Security #112: Payroll scams, gold coin heists, web giants spanked
Redaman Spams Russian Banking Customers with Rotating Tactics
Malware in Ad-Based Images Targets Mac Users
Monero: Cybercrime’s Top Choice for Mining Malware
Poisoned PEAR. PHP extension repository download infected for up to six months
Got a Nest security camera? Enable two-step verification now
6 Signs of Successful Threat Hunting
‘Chaos’ iPhone X Attack Alleges Remote Jailbreak
Popular free Android VPN apps on Play Store contain malware
U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks
Microsoft Windows RCE Flaw Gets Temporary Micropatch
RogueRobin Malware Uses Google Drive as C2 Channel
How Web Apps Can Turn Browser Extensions Into Backdoors
Google Fined $57M in Largest GDPR Slap Yet
Adobe Issues Unscheduled Updates for Experience Manager Platform
Twitter exposed some Android users’ protected tweets, and didn’t notice for over four years
Angry ex-employee blamed for hack of WordPress plugin developer, and email to customers warning of security hole
Learn how Starbucks combats credential stuffing & account takeover (ATO)
Twitter bug exposed private tweets of Android users to public for years
New ransomware steals PayPal data with phishing link in ransom note
Google Play Removes Malicious Malware-Ridden Apps
Fallout EK Retools for a Fresh New 2019 Look
Ingenious! The Android malware which only triggers if you’re moving
Threatpost News Wrap Podcast For Jan. 18
Critical, Unpatched Cisco Flaw Leaves Small Business Networks Wide Open
Twitter Android Glitch Exposed Private Tweets for Years
Watch as hackers take over a construction crane
Malware can fully compromise building control systems
Cryptopia cryptocurrency exchange hacked; suffers “significant losses”
Bug bounty: Hack Tesla Model 3 to win your own Model 3
The Pirate Bay malware can empty your Cryptocurrency wallet
Microsoft Launches Azure DevOps Bug Bounty Program
Apple CEO Demands Federal Data Privacy Legislation