Cybersecurity News


IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk

IoT Cybersecurity Improvement Act Passed, Heads to President’s Desk Security experts praised the newly approved IoT law as a step in the right direction for insecure connected federal devices.
19 November 2020

New Proposed DNS Security Features Released

Verisign's R&D team has developed new ways to authenticate and optimize DNS traffic on the client side of the domain-name resolution process.
19 November 2020

LidarPhone attack converts smart vacuums into microphones

LidarPhone attack works by converting a smart vacuum's LiDAR navigational component into a laser microphone.
19 November 2020

Payment Security in India: 2020 India Forum


As Associate Director for India, Nitin Bhatnagar is responsible for driving awareness and adoption of PCI Security Standards in the country. Bhatnagar works closely with merchants, acquirers, financial institutions, security practitioners, law enforcement and other key stakeholders across the Indian payment ecosystem. Here he discusses payment security challenges and opportunities in India and the second annual PCI SSC India Forum  planned for 9 December online

19 November 2020

2021 Cybersecurity Spending: How to Maximize Value

This is a pivotal moment for CISOs. As their influence increases, so does the pressure for them to make the right decisions.
19 November 2020

APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies

APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies Threat actors mount year-long campaign of espionage, exfiltrating data, stealing credentials and installing backdoors on victims’ networks.
19 November 2020

The worst passwords of 2020: Is it time to change yours?

They’re supremely easy to remember, as well as easy to crack. Here’s how to improve your password security.

The post The worst passwords of 2020: Is it time to change yours? appeared first on WeLiveSecurity

19 November 2020

Unpatched Browsers Abound, Study Shows

Unpatched Browsers Abound, Study Shows Google Chrome users don't always take time to relaunch browser updates, and some legacy applications don't support new versions of Chrome, Menlo Security says.
19 November 2020

Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks

Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks While the industry focus is on vehicle hacking, when it comes to the automotive industry cybercriminals are opting for less complex and sophisticated attacks - from phishing to ransomware.
19 November 2020

New Grelos skimmer variant reveals overlap in Magecart group activities, malware infrastructure

The discovery of a new skimmer variant reveals the difficulties associated with tracking separate Magecart campaigns.
19 November 2020

Fearing drama, Mozilla opens public consultation before worldwide Firefox DoH rollout

Mozilla wants to enable DNS-over-HTTPS (DoH) in Firefox for all users worldwide, but wants to hear from ISPs, governments, and companies beforehand.
19 November 2020

Online Shopping Surge Puts Focus on Consumer Security Habits

Companies will have to tread a fine line between delivering security and a frictionless shopping experience, security firms say.
18 November 2020

Cisco Webex Vulns Let 'Ghost' Attendees Spy on Meetings

Three vulnerabilities, patched today, could let an attacker snoop on meetings undetected after the host removes them.
18 November 2020

Widespread Scans Underway for RCE Bugs in WordPress Websites

Widespread Scans Underway for RCE Bugs in WordPress Websites WordPress websites using buggy Epsilon Framework themes are being hunted by hackers.
18 November 2020

LAPD Bans Facial Recognition, Citing Privacy Concerns

LAPD Bans Facial Recognition, Citing Privacy Concerns The department has said no thanks to the Clearview AI platform, after an expose showing that officers had used it 475 times during a trial period alone.
18 November 2020

Starting next year, Chrome extensions will show what data they collect from users

Google will add a "Privacy practices" section on each Chrome extension's Web Store page listing what data they collect from users and what the developer plans to do with it.
18 November 2020

Out With the Old Perimeter, in With the New Perimeters

A confluence of trends and events has exploded the whole idea of "the perimeter." Now there are many perimeters, and businesses must adjust accordingly.
18 November 2020

Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping

Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping Cisco patched the Webex flaw, as well as three critical-severity vulnerabilities, in a slew of security updates on Wednesday.
18 November 2020

Trump Fires CISA Director Chris Krebs

Christopher Krebs was fired via tweet shortly after the Cybersecurity and Infrastructure Security Agency called the 2020 election "the most secure in American history."
18 November 2020

Bumble bugs could have exposed personal data of all users

The information at risk of theft due to API flaws included people’s pictures, locations, dating preferences and Facebook data

The post Bumble bugs could have exposed personal data of all users appeared first on WeLiveSecurity

18 November 2020