Showing only posts tagged Web Security. Show all posts.

Apr 05 2021 LinkedIn Spear-Phishing Campaign Targets Job Hunters

Fake job offers lure professionals into downloading the more_eggs backdoor trojan. [...]

Apr 05 2021 Apple Mail Zero-Click Security Vulnerability Allows Email Snooping

The researcher is offering details on CVE-2020-9922, which can be triggered just by sending a target an email with two.ZIP files attached. [...]

Apr 05 2021 How To Defend the Extended Network Against Web Risks

Source

Aamir Lakhani, cybersecurity researcher for Fortinet’s FortiGuard Labs, discusses criminals flocking to web server and browser attacks, and what to do about it. [...]

Apr 05 2021 15 Cybersecurity Pitfalls and Fixes for SMBs

Source

In this roundtable, security experts focus on smaller businesses offer real-world advice for actionable ways to shore up defenses using fewer resources. [...]

Apr 02 2021 Call of Duty Cheats Expose Gamers to Malware, Takeover

Source

Activision is warning that cyberattackers are disguising malware -- a remote-access trojan (RAT) -- in cheat programs. [...]

Apr 01 2021 Building a Fortress: 3 Key Strategies for Optimized IT Security

Source

Chris Hass, director of information security and research at Automox, discusses how to shore up cybersecurity defenses and what to prioritize. [...]

Apr 01 2021 Google: North Korean APT Gearing Up to Target Security Researchers Again

Source

Cyberattackers have set up a website for a fake company called SecuriElite, as well as associated Twitter and LinkedIn accounts. [...]

Mar 31 2021 Fraud Ring Launders Money Via Fake Charity Donations

Source

The Cart Crasher gang is testing stolen payment cards while cleaning ill-gotten funds. [...]

Mar 31 2021 Child Tweets Gibberish from U.S. Nuke Account

Source

Telecommuting social-media manager for the U.S. Strategic Command left the laptop open and unsecured while stepping away. [...]

Mar 29 2021 Pair of Apex Legends Players Banned for DDoS Server Attacks

Source

Predator-ranked players on Xbox console game version rigged matches with DDoS attacks. [...]

Mar 29 2021 PHP Infiltrated with Backdoor Malware

Source

The server for the web-application scripting language was compromised on Sunday. [...]

Mar 26 2021 Employee Lockdown Stress May Spark Cybersecurity Risk

Source

Younger employees and caregivers report more stress than other groups-- and more shadow IT usage. [...]

Mar 26 2021 Insurance Giant CNA Hit with Novel Ransomware Attack

Source

The incident, which forced the company to disconnect its systems, caused significant business disruption. [...]

Mar 25 2021 Facebook Disrupts Spy Effort Aimed at Uyghurs

Source

The social-media giant took down legions of fake profiles aimed at spreading espionage malware. [...]

Mar 25 2021 Manufacturing’s Cloud Migration Opens Door to Major Cyber-Risk

Source

New research shows that while all sectors are at risk, 70 percent of manufacturing apps have vulnerabilities. [...]

Mar 24 2021 Microsoft Exchange Servers See ProxyLogon Patching Frenzy

Source

Vast swathes of companies were likely compromised before patches were applied, so the danger remains. [...]

Mar 23 2021 Security Analysis Clears TikTok of Censorship, Privacy Accusations

Source

TikTok’s source code is in line with industry standards, security researchers say. [...]

Mar 23 2021 Office 365 Cyberattack Lands Disgruntled IT Contractor in Jail

Source

A former IT contractor is facing jailtime after a retaliatory hack into a company’s network and wiping the majority of its employees’ Microsoft Office 365 accounts. [...]

Mar 23 2021 MangaDex Site Offline Following Hacking Incident

Source

A cyberattacker taunted the site about open security vulnerabilities, prompting a code review. [...]

Mar 22 2021 Adobe Fixes Critical ColdFusion Flaw in Emergency Update

Source

Attackers can leverage the critical Adobe ColdFusion flaw to launch arbitrary code execution attacks. [...]

Mar 19 2021 Office 365 Phishing Attack Targets Financial Execs

Source

Attackers move on new CEOs, using transition confusion to harvest Microsoft credentials. [...]

Mar 18 2021 Fiserv Forgets to Buy Domain It Used as System Default

Source

Fintech security provider Fiserv acknowledges it used unregistered domain as default email. [...]

Mar 18 2021 Zoom Screen-Sharing Glitch ‘Briefly’ Leaks Sensitive Data

Source

A glitch in Zoom's screen-sharing feature shows parts of presenters' screens that they did not intend to share - potentially leaking emails or passwords. [...]