Cybersecurity News
CallStranger vulnerability lets attacks bypass security systems and scan LANs
The CallStranger vulnerability can also be used to launch major DDoS attacks.08 June 2020
SMBGhost RCE Exploit Threatens Corporate Networks
The release of a PoC for the Windows flaw known as "SMBGhost" could set off cyberattack waves, CISA warned.
08 June 2020
Phishing Attack Hits German Coronavirus Task Force
More than 100 executives at a multinational company that's part of a German task force for creating coronavirus protective gear, were targeted in an ongoing phishing attack.
08 June 2020
Safeguard Your Remote Workforce
DDoS attacks on VPN servers can not only bring remote work to a standstill but also cut off admins from accessing their systems. Here are three ways to stay safer.08 June 2020
Apple hopes to bolster password security with open source project
The tech giant wants developers of password managers to collaborate for better user experience and security
The post Apple hopes to bolster password security with open source project appeared first on WeLiveSecurity
08 June 2020
Can Governments Defeat Nation-State Attacks on Critical Infrastructures?
The one cyber risk that governments are much better at controlling than we are is insider threats. Governments have been dealing with people threats for centuries and have powerful tools at their disposal for such investigations.
08 June 2020
Vulnerabilities in popular open source projects doubled in 2019
Jenkins and MySQL vulnerabilities have had the most weaponized vulnerabilities in the past five years.08 June 2020
Defense Contractor Compromised with MAZE Ransomware
Westech MAZE Ransomware Compromise; InfoSec News asks an Expert About the Fallout By William Knowles @c4i Senior Editor InfoSec News June 8, 2020 Troubling Cybersecurity/National Security news via Sky News, which is reporting that criminal hackers have stolen confidential information from Westech International. Westech serves as a U.S. military contractor for a number of Washington […]08 June 2020
Owners of DDoS-for-Hire Service vDOS Get 6 Months Community Service
The co-owners of vDOS, a now-defunct service that for four years helped paying customers launch more than two million distributed denial-of-service (DDoS) attacks that knocked countless Internet users and websites offline, each have been sentenced to six months of community service by an Israeli court.07 June 2020
Apple publishes free resources to improve password security
The new tools are meant to help the developers of password managers and Apple hopes the tools will reduce the instances where users chose their own password rather than rely on the password manager.05 June 2020
Q&A: Eugene Spafford on the Risks of Internet Voting
Allowing people to cast their ballots online to circumvent coronavirus-related health concerns introduces problems that we simply don't know how to manage, says the Purdue University professor and security leader.
05 June 2020
Spear Phishing Campaign Hits Developer Collaboration System Users
Users of Zeplin, a popular developer and designer collaboration system, have been hit with new waves of spearphishing attacks in the last month.05 June 2020
Flaws Found in Some Open Source Projects Exploited More Often
A study of major open source projects finds that 3.3% of vulnerabilities are exploited, but the rate of exploitation varies significantly.05 June 2020
FTC Slams Children’s App Developer for COPPA Violations
Children's app developer HyperBeard must pay $150,000 after the FTC claimed it violated privacy laws.
05 June 2020
Electrolux, Others Conned Out of Big Money by BEC Scammer
Kenenty Hwan Kim has pleaded guilty to swindling the appliance giant and other companies in a set of elaborate schemes.
05 June 2020
News Wrap: Fake Minneapolis Police Breach, Zoom End-To-End Encryption Debate
Threatpost editors discuss debunked reports of a Minneapolis police department breach and Zoom announcing only paying users would get end-to-end encryption.
05 June 2020
QNAP NAS devices targeted in another wave of ransomware attacks
eCh0raix ransomware gang returns with a new wave of attacks against QNAP NAS devices.05 June 2020
Name That Toon: Sign of the Tides
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.
05 June 2020
WhatsApp Phone Numbers Pop Up in Google Search Results — But is it a Bug?
A researcher found that phone numbers tied to WhatsApp accounts are indexed publicly on Google Search creating what he claims is a “privacy issue” for users.
05 June 2020
Local, State Governments Face Cybersecurity Crisis
Ransomware hit small government organizations hard in 2019. Now they have to deal with budget cuts, pandemic precautions, social unrest, and the coming election cycle.05 June 2020