Threatpost

Syndikovat obsah
The First Stop For Security News
Aktualizace: 1 rok 50 týdnů zpět

Microsoft Edge, Google Chrome Roll Out Password Protection Tools

22 Leden, 2021 - 22:57
The new tools on Chrome and Edge will make it easier for browser users to discover - and change - compromised passwords.
Kategorie: Hacking & Security

Amazon Kindle RCE Attack Starts with an Email

22 Leden, 2021 - 22:55
The "KindleDrip" attack would have allowed attackers to siphon money from unsuspecting victims.
Kategorie: Hacking & Security

ADT Tech Hacks Home-Security Cameras to Spy on Women

22 Leden, 2021 - 20:08
A former ADT employee pleads guilty of accessing customers’ cameras so he could spy on them.
Kategorie: Hacking & Security

Discord-Stealing Malware Invades npm Packages

22 Leden, 2021 - 19:35
The CursedGrabber malware has infiltrated the open-source software code repository.
Kategorie: Hacking & Security

Ransomware Attackers Publish 4K Private Scottish Gov Agency Files

22 Leden, 2021 - 18:30
Up to 4,000 stolen files have been released by hackers who launched a ransomware attack against the Scottish Environmental Protection Agency on Christmas Eve.
Kategorie: Hacking & Security

Threat Actors Can Exploit Windows RDP Servers to Amplify DDoS Attacks

22 Leden, 2021 - 13:45
Netscout researchers identify more than 14,000 existing servers that can be abused by ‘the general attack population’ to flood organizations’ networks with traffic.
Kategorie: Hacking & Security

Einstein Healthcare Network Announces August Breach

21 Leden, 2021 - 21:00
Einstein is in violation of the the HHS 60-day breach notification rule, but unlikely to face penalty.
Kategorie: Hacking & Security

SQL Server Malware Tied to Iranian Software Firm, Researchers Allege

21 Leden, 2021 - 20:42
Researchers have traced the origins of a campaign - infecting SQL servers to mine cryptocurrency - back to an Iranian software firm.
Kategorie: Hacking & Security

Google Forms Set Baseline For Widespread BEC Attacks

21 Leden, 2021 - 16:02
Researchers warn that attackers are collecting reconnaissance for future business email compromise attacks using Google Forms.
Kategorie: Hacking & Security

Google Searches Expose Stolen Corporate Credentials

21 Leden, 2021 - 15:00
A phishing campaign spoofs Xerox notifications to lure victims into clicking on malicious HTML attachments.
Kategorie: Hacking & Security

Critical Cisco SD-WAN Bugs Allow RCE Attacks

20 Leden, 2021 - 22:47
Cisco is stoppering critical holes in its SD-WAN solutions and its smart software manager satellite.
Kategorie: Hacking & Security

NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs

20 Leden, 2021 - 21:45
The company also issued patches for Tesla-based GPUs as part of an updated, separate security advisory.
Kategorie: Hacking & Security

Malwarebytes Hit by SolarWinds Attackers

20 Leden, 2021 - 18:36
The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365.
Kategorie: Hacking & Security

Investment Scammers Prey on Dating App Users, Interpol Warns

20 Leden, 2021 - 17:42
Users of dating apps - like Tinder, Match and Bumble - should be on the lookout for investment-fraud scammers.
Kategorie: Hacking & Security

Google Research Pinpoints Security Soft Spot in Multiple Chat Platforms

20 Leden, 2021 - 16:21
Mystery of spying using popular chat apps uncovered by Google Project Zero researcher.
Kategorie: Hacking & Security

DNSpooq Flaws Allow DNS Hijacking of Millions of Devices

19 Leden, 2021 - 22:25
Seven flaws in open-source software Dnsmasq could allow DNS cache poisoning attacks and remote code execution.
Kategorie: Hacking & Security

Rob Joyce to Take Over as NSA Cybersecurity Director

19 Leden, 2021 - 21:20
Joyce will replace Anne Neuberger, who is now deputy national security advisor for the incoming Biden administration.
Kategorie: Hacking & Security

SolarWinds Malware Arsenal Widens with Raindrop

19 Leden, 2021 - 17:40
The post-compromise backdoor installs Cobalt Strike to help attackers more laterally through victim networks.
Kategorie: Hacking & Security

Linux Devices Under Attack by New FreakOut Malware

19 Leden, 2021 - 16:51
The FreakOut malware is adding infected Linux devices to a botnet, in order to launch DDoS and cryptomining attacks.
Kategorie: Hacking & Security

Attackers Steal E-Mails, Info from OpenWrt Forum

19 Leden, 2021 - 15:45
Users of the Linux-based open-source firmware—which include developers from commercial router companies--may be targeted by phishing campaigns, administrators warn.
Kategorie: Hacking & Security