Cybersecurity News
How Can I Help My Users Spot Disinformation?
A combination of clever tools, good education, and better mindfulness might keep users from being manipulated.
20 April 2020
Mootbot Botnet Targets Fiber Routers with Dual Zero-Days
Researchers saw several IoT botnets using one of the bugs in the wild after a proof-of-concept was published in March.
20 April 2020
Starbleed bug impacts FPGA chips used in data centers, IoT devices, industrial equipment
Xilinx 7-series and some 6-series FPGAs deemed vulnerable to new Starbleed vulnerability.20 April 2020
Maze Ransomware Attack Hits Cognizant
Cognizant has confirmed that a Friday evening Maze ransomware attack has disrupted its systems.
20 April 2020
Stimulus Payments Are Popular Leverage for Cyberattacks
More than 4,300 domains related to stimulus and relief packages, many of them malicious, have been registered since January.20 April 2020
Who’s Behind the “Reopen” Domain Surge?
The past few weeks have seen a large number of new domain registrations beginning with the word "reopen" and ending with U.S. city or state names. The largest number of them were created just hours after President Trump sent a series of all-caps tweets urging citizens to "liberate" themselves from new gun control measures and state leaders who've enacted strict social distancing restrictions in the face of the COVID-19 pandemic. Here's a closer look at who and what appear to be behind these domains.20 April 2020
IT Services Firm Cognizant Hit with Maze Ransomware
Cognizant is working with cyber defense firms and law enforcement to investigate the attack, disclosed April 17.20 April 2020
Foxit PDF Reader, PhantomPDF Open to Remote Code Execution
Foxit Reader and PhantomPDF are plagued by several high-severity flaws that, if exploited, could enable remote code execution.
20 April 2020
It was a tough choice! And the winner is...
Bitcoin Stealers Hide in 700+ Ruby Developer Libraries
Cybercriminals uploaded typosquatted malicious libraries to RubyGems, which contains open-source components that are used as basic application building blocks by software developers.
20 April 2020
Remote Access Makes a Comeback: 4 Security Challenges in the Wake of COVID-19
As companies continue to support increasing numbers of work-from-home employees, the pressure to secure access and reduce risk has never been greater.20 April 2020
Work from home: Should your digital assistant be on or off?
Being at your beck and call is central to the "personality" of your digital friend, but there are situations when the device could use some time off
The post Work from home: Should your digital assistant be on or off? appeared first on WeLiveSecurity
20 April 2020
Cloudflare debuts Border Gateway Protocol safety check tool
The tool can be used to see if your ISP is adhering to modern BGP security frameworks.20 April 2020
Students, university clash over forced installation of remote exam monitoring software on home PCs
The use of remote spying software to prevent cheating has raised an outcry from students.20 April 2020
Hey there! Are you using WhatsApp? Your account may be hackable
Can someone take control of your WhatsApp account by just knowing your phone number? We ran a small test to find out.
The post Hey there! Are you using WhatsApp? Your account may be hackable appeared first on WeLiveSecurity
20 April 2020
Proposed government coronavirus tracking app falls at the first hurdle due to data breach
The source code of a proposed app for tracing COVID-19 exposed user data after being published online.20 April 2020
Leading privacy and cybersecurity law firm investigates Tandem Diabetes Care data breach
By William Knowles @c4i Senior Editor InfoSec News April 20, 2020 Its almost cliche at this point. We take the privacy and confidentiality of our customers’ information very seriously and apologize for any inconvenience or concern this incident may cause our customers. With the next sentence… Tandem Diabetes Care, Inc. (“Tandem”) is committed to protecting the confidentiality and […]20 April 2020
DEF CON Spot The Fed, C4I.org, 303, Phrack Magazine, Toool T-Shirts For Sale on eBay
By William Knowles @c4i Senior Editor InfoSec News April 19, 2020 Just a quick note, the house I have been renting for the last four years has sold and while packing things up it, I felt I should sell some classic hacking, infosec, and security shirts acquired […]20 April 2020
Hackers steal $25 million worth of cryptocurrency from Uniswap and Lendf.me
Hacker is believed to have used an exploit shared on GitHub last year to steal funds from both platforms.19 April 2020
Hacker leaks 23 million usernames and passwords from Webkinz children's game
Exclusive: Webkinz security breach occurred earlier this month, sources have told ZDNet.18 April 2020