Cybersecurity News
Apple Update Fixes WebKit Flaws in iOS, Safari
Apple's security update included a slew of vulnerabilities in various components of iOS, macOS and Safari - the most severe of which could enable remote code execution.
25 March 2020
Tupperware Hit By Card Skimmer Attack
Malicious code was found hidden inside graphics files on the storage container maker's e-commerce website.25 March 2020
What Should I Do If Someone Is Impersonating My Company in a Phishing Campaign?
Two security awareness advocates from KnowBe4 provide some solid suggestions.
25 March 2020
US Government Sites Give Bad Security Advice
Many U.S. government Web sites now carry a message prominently at the top of their home pages meant to help visitors better distinguish between official U.S. government properties and phishing pages. Unfortunately, part of that message is misleading and may help perpetuate a popular misunderstanding about Web site security and trust that phishers have been exploiting for years now.25 March 2020
Public health vs. personal privacy: Choose only one?
As the world turns to technology to track and contain the COVID-19 pandemic, could this sound the death knell for digital privacy?
The post Public health vs. personal privacy: Choose only one? appeared first on WeLiveSecurity
25 March 2020
Do DevOps Teams Need a Company Attorney on Speed Dial?
In today's regulatory and legislative environment, companies and individuals are exposed to lawsuits over security breaches, resulting in significant fines and ending careers.25 March 2020
Beware of COVID-19 Online Scams and Threats
PCI SSC shares guidance on protecting against COVID-19 scams and threats.
25 March 2020
Tupperware website hacked and infected with payment card skimmer
Malicious code still active at the time of writing.25 March 2020
Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign
Researchers say that APT41's exploits are part of one of the broadest espionage campaigns they've seen from a Chinese-linked actor "in recent years."
25 March 2020
GE Employees Lit Up with Sensitive Doc Breach
Marriage, divorce and death certificates, beneficiary info, passports and more were all caught up in an email takeover hack.
25 March 2020
FBI Shutters Russian-Based Hacker Platform, Makes Arrest
The Deer.io platform let cybercriminals buy access to virtual storefronts where they could sell illicit products and services.25 March 2020
COVID-19: Getting Ready for the Next Business Continuity Challenge
What comes after you've empowered your remote workforce in the wake of the coronavirus pandemic? Dealing with a large portion of that workforce getting sick at the same time.25 March 2020
World Health Organization, Facebook, Microsoft team up in COVID-19 hackathon
#BuildforCOVID19 focuses on the development of technology of value during the coronavirus outbreak.25 March 2020
TrickBot App Bypasses Non-SMS Banking 2FA
TrickBot victims are being fooled into downloading an app that records their screens - stealing non-SMS 2FA passcodes for banking websites.
25 March 2020
Apple Safari Blocks Ad-Targeting Cookie Support
The move follows Google’s announcement last May that it would do the same in Chrome by 2022.
25 March 2020
Privacy
Privacy is more than just settings in your Social Media account or using the Tor Browser. Your data and actions are collected in a variety of ways. The more aware you are of just how much of your data is collected, the better you can protect it.25 March 2020
Microsoft announces new 'Hardware-enforced Stack Protection' feature
The new "Hardware-enforced Stack Protection" feature is under development and an early preview is available in Windows 10 Insider previews builds (fast ring).25 March 2020
Android lets advertisers get a list of all your apps -- and this API feature is broadly used
In-depth study looks at the usage of installed application methods (IAMs) API calls across the Android ecosystem.24 March 2020
Apple blocks third-party cookies in Safari
Safari becomes second browser after the Tor Browser to block third-party cookies by default for all users.24 March 2020
How Attackers Could Use Azure Apps to Sneak into Microsoft 365
Researchers warn Microsoft 365 account holders to pay attention to unknown applications that request permissions.24 March 2020