Cybersecurity News
TikTok Flaw Allows Threat Actors to Plant Forged Videos in User Feeds
The popular video-sharing apps’s use of HTTP to download media content instead of a secure protocol could lead to the spread of misinformation on the platform.
14 April 2020
Malware Risks Triple on WFH Networks: Experts Offer Advice
New research found that almost half of companies had malware on their corporate-associated home networks - in comparison to malware being found on only 13 percent of corporate networks.
14 April 2020
7 Ways COVID-19 Has Changed Our Online Lives
The pandemic has driven more of our personal and work lives online - and for the bad guys, business is booming. Here's how you can protect yourself.
14 April 2020
Is “global privacy” an oxymoron?
While in France, a citizen of Brazil who resides in California books a bungee jump in New Zealand. Is it a leap of faith into the unknown, for both the operator and the thrill-seeker?
The post Is “global privacy” an oxymoron? appeared first on WeLiveSecurity
14 April 2020
Account details for 4 million Quidd users shared on hacking forum
Users of Quidd, an online marketplace for trading stickers, cards, toys, and other collectibles, are advised to change account passwords as soon as possible.14 April 2020
Network Data Shows Spikes, Vulnerability of Work-at-Home Shift
Traffic on the public Internet has grown by half this year, and videoconferencing bandwidth has grown by a factor of five, all driven by remote-work edicts.
13 April 2020
Dell Releases Security Tool to Defend PCs from BIOS Attacks
The SafeBIOS Events & Indicators of Attack tool gives admins visibility into BIOS configuration changes and alerts them to potential threats.13 April 2020
Oracle Tackles a Massive 405 Bugs for Its April Quarterly Patch Update
Oracle will detail 405 new security vulnerabilities Tuesday, part of its quarterly Critical Patch Update Advisory.
13 April 2020
Dutch Police Shut Down 15 DDoS-for-Hire Services
Officials arrested a man suspected of launching a DDoS attack against two websites that send government updates to citizens.13 April 2020
Overlay Malware Leverages Chrome Browser, Targets Banks and Heads to Spain
The Grandoreiro banking malware uses remote overlay and a fake Chrome browser plugin to steal from banking customers.
13 April 2020
Pandemic Could Make Schools Bigger Targets of Ransomware Attacks
Most have had to implement distance learning, making them much more vulnerable, Armor says.13 April 2020
Dell releases new tool to detect BIOS attacks
Dell makes new tool named SafeBIOS Events & Indicators of Attack available for download for all Dell commercial PCs.13 April 2020
Cybercrime May Be the World's Third-Largest Economy by 2021
The underground economy is undergoing an industrialization wave and booming like never before.13 April 2020
Unclassified and Secure
By William Knowles @c4i Senior Editor InfoSec News April 12, 2020 A new report from the RAND Corporation, by Daniel Gonzales, Sarah Harting, Mary Kate Adgie, Julia Brackup, Lindsey Polley, and Karlyn D. Stanley The defense industrial base (DIB) is under attack. Foreign actors are stealing large amounts of sensitive data, trade secrets, and intellectual property every […]12 April 2020
SFO Websites Hacked: Airport Discloses Data Breach
San Francisco International Airport notified users of two low-traffic websites of a data breach that occurred in March.
10 April 2020
Apple, Google Team on Coronavirus Tracking – Sparking Privacy Fears
Apple and Google announced that decentralized Bluetooth technology will soon be rolled out for coronavirus contact tracing. The privacy implications are worrisome for some.
10 April 2020
New IRS Site Could Make it Easy for Thieves to Intercept Some Stimulus Payments
The U.S. federal government is now in the process of sending Economic Impact Payments by direct deposit to millions of Americans. Most who are eligible for payments can expect to have funds direct-deposited into the same bank accounts listed on previous years' tax filings sometime next week. Today, the Internal Revenue Service (IRS) stood up a site to collect bank account information from the many Americans who don't usually file a tax return. The question is, will those non-filers have a chance to claim their payments before fraudsters do?10 April 2020
WooCommerce Falls to Fresh Card-Skimmer Malware
The payment-card stealer differs from typical malware targeting WordPress-based e-commerce environments.
10 April 2020
SFO Hit by Web Compromise
Web app credentials were stolen in attacks on two airport websites.10 April 2020
Only 40% of Small Business Owners Have a Cybersecurity Policy
Small business owners are concerned about cyberattacks targeting remote workers but lack the resources to invest in security.10 April 2020