Menu

Link

Undocumented Intel VISA Tech Can Be Abused, Researchers Allege
Family locator app leaked real-time location data of 238,000 individuals
Critical RCE Bug in Cisco WebEx Browser Extensions Faces ‘Ongoing Exploitation’
New Gustuff Android malware targets cryptocurrency & messaging apps
Magento Patches Critical SQL Injection and RCE Vulnerabilities
Zero-Day Bug Lays Open TP-Link Smart Home Router
Terrorist’s mainfesto used to spread disk-wiping malware
Critical Rockwell Automation Bug in Drive Component Puts IIoT Plants at Risk
Privacy in 2019: 6 Basic Steps to Keep Yourself Protected
Microsoft seizes 99 websites used by Iranian hackers for phishing attacks
Lazarus Group Widens Tactics in Cryptocurrency Attacks
Gamers Urged to Patch Critical Bugs in GOG Galaxy
Office Depot fined millions for tricking customers into believing their PCs were infected with malware
Smashing Security #121: Hijacked motel rooms, ASUS PCs, and leaky apps
Cisco Releases Flood of Patches for IOS XE, But Leaves Some Routers Open to Attack
FTC Demands Broadband Providers Reveal Data Handling Practices
Grindr Poses National Security Risk, U.S. Gov Says
Gamers Beware: Nvidia Fixes High-Severity GeForce Experience Bug
Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns
Asus pushes out urgent security update after its own automatic Live Update tool was hacked
Ransomware Behind Norsk Hydro Attack Takes On Wiper-Like Capabilities
A PSA for twits on Twitter
ShadowHammer: ASUS software updates exploited to distribute malware
ASUS Patches Live Update Bug That Allowed APT to Infect Thousands of PCs
Apple iOS 12.2 Patches 51 Serious Flaws
Hackers poison Asus software updates, may have infected one million PCs
ThreatList: Remote Workers Threaten 1 in 3 Organizations
Malware Payloads Hide in Images: Steganography Gets a Reboot
Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks
Some ASUS Updates Drop Backdoors on PCs in ‘Operation ShadowHammer’
Firefox, Edge, Safari, Tesla & VMware pwned at Pwn2Own
FEMA leaks sensitive details of 2.3 million disaster survivors
FEMA Exposes PII for Millions of Hurricane, Wildfire Survivors
Facebook stored 600m user passwords in plain text exposed to 20k employees
Panic after hackers take control of emergency tornado alarms in Texas
Flaw in NSA’s GHIDRA leads to remote code execution attacks
PewDiePie ransomware forcing users to subscribe him on YouTube
Spycams Secretly Live-Streamed 1,600 Motel Guests
Firefox and Edge Fall to Hackers on Day Two of Pwn2Own
Google Play Touts Certs in Quest For Enterprise Security
Critical DoS Bug Bubbles Up in Facebook Fizz TLS 1.3 Project
Analysis: Drone Tech Creates New Type of Blended Threat
Medtronic defibrillators vulnerable to life threatening cyber attacks
Medtronic Defibrillators Have Critical Flaws, Warns DHS
WordPress Plugin Patched After Zero Day Discovered
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
Some 2000 Facebook staff had access to millions of Facebook users’ passwords… stored in plaintext
Facebook Stored Passwords in Plain Text For Years
MyPillow and Amerisleep Targeted in Magecart Group Attacks
Cisco Patches High-Severity Flaws in IP Phones
Smashing Security #120: Silk Road with Deliveroo
Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
Post-Perimeter Security: Addressing Evolving Mobile Enterprise Threats
Years-Long Phishing Campaign Targets Saudi Gov Agencies
Fin7 Ramps Up Campaigns With Two Fresh Malware Samples
Uber Deployed ‘Surfcam Spyware’ in Australia to Crush the Competition – Report
MySpace loses 12 years worth of photos, songs & video files
Hydro working hard to recover following ransomware attack
Israeli fintech firms hit by Cardinal RAT malware
Cardinal RAT Resurrected to Target FinTech Firms
Host of Flaws Found in CUJO Smart Firewall
Podcast: The High-Risk Threats Behind the Norsk Hydro Cyberattack
Old Tech Spills Digital Dirt on Past Owners
Researcher Says NSA’s Ghidra Tool Can Be Used for RCE
Norsk Hydro Calls Ransomware Attack ‘Severe’
ThreatList: DDoS Attack Sizes Drop 85 Percent Post FBI Crackdown
Fourth Major Credential Spill in a Month Hits DreamMarket
Mirai Variant Goes After Enterprise Systems
Google Gives Users More Choice with Location-Tracking Apps
Privacy Regulations Needed for Next-Gen Cars
Counter-Strike 1.6 game client 0-day exploited to spread Belonard trojan
Hackers are using 19-year-old WinRAR bug to install nasty malware
SimBad malware on Play Store infected millions of Android devices
53% of Britain’s most frequent porn watchers aren’t aware that they’re about to be blocked
MySpace has lost all the music users uploaded between 2003 and 2015
Zillow sued for $60 million after mansion listing hijacked
Lenovo Patches High-Severity Arbitrary Code Execution Flaws
Unpatched Fujitsu Wireless Keyboard Bug Allows Keystroke Injection
Threatlist: IMAP-Based Attacks Compromising Accounts at ‘Unprecedented Scale’
Zero-Days in Counter-Strike Client Used to Build Major Botnet
Cisco Patches Critical ‘Default Password’ Bug
GlitchPOS Malware Appears to Steal Credit-Card Numbers
Online training site says it is spamming insecure printers with adverts
“BreedReady” database of 1.8m Chinese women surfaced online
More than Half of Android apps ask for dangerous permissions. Is yours among?
Pakistani Govt’s passport application tracking site hacked with Scanbox framework
US Senators say it shouldn’t be a secret when they’ve been hacked
Insider Threats Get Mean, Nasty and Very Personal
Smashing Security #119: Hijacked homes, porn passports, and ransomware regret
New Samsung Galaxy S10 review and features
Purveyor of Cracked Netflix, Hulu, Spotify Accounts Arrested
Intel Windows 10 Graphics Drivers Riddled With Flaws
Facebook and Instagram are down around the world
MAGA ‘Safe Space’ App Developer Threatens Security Researcher
Three Ways DNS is Weaponized and How to Mitigate the Risk
Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw
Online safety cartoons for young kids
Man arrested for selling one million Netflix, Spotify, Hulu passwords
Federal Focus on Cyber Plays Out in President’s Budget, IoT Legislation
Microsoft Patches Two Win32k Bugs Under Active Attack