Cybersecurity News


Security Researchers Sound Alarm on Smart Doorbells

A new analysis of 11 relatively inexpensive video doorbells uncovered high-risk vulnerabilities in all of them.
23 November 2020

As 'Anywhere Work' Evolves, Security Will Be Key Challenge

Companies should plan their future workforce model now, so they have time to implement the necessary tools, including cybersecurity and seamless remote access, a Forrester report says.
23 November 2020

Ransomware Grows Easier to Spread, Harder to Block

Researchers illustrate the evolution toward more complete and effective ransomware attacks designed to cripple target organizations.
23 November 2020

Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending

Critical VMware Zero-Day Bug Allows Command Injection; Patch Pending VMware explained it has no patch for a critical escalation-of-privileges bug that impacts both Windows and Linux operating systems and its Workspace One.
23 November 2020

Evidence-Based Trust Gets Black Hat Europe Spotlight

An FPGA-based system could change the balance of power between hardware attackers and defenders within IT security.
23 November 2020

GoDaddy Employees Tricked into Compromising Cryptocurrency Sites

GoDaddy Employees Tricked into Compromising Cryptocurrency Sites ‘Vishing’ attack on GoDaddy employees gave fraudsters access to cryptocurrency service domains NiceHash, Liquid.
23 November 2020

Security flaws in smart doorbells may open the door to hackers

The peace of mind that comes with connected home security gadgets may be false – your smart doorbell may make an inviting target for unwanted visitors

The post Security flaws in smart doorbells may open the door to hackers appeared first on WeLiveSecurity

23 November 2020

Manchester United Suffers Cyberattack

Premier League soccer club says the attack didn't affect its website and app, and it doesn't appears to have exposed any fan or customer data either.
23 November 2020

TA416 APT Rebounds With New PlugX Malware Variant

TA416 APT Rebounds With New PlugX Malware Variant The TA416 APT has returned in spear phishing attacks against a range of victims - from the Vatican to diplomats in Africa - with a new Golang version of its PlugX malware loader.
23 November 2020

Chinese APT Group Returns to Target Catholic Church & Diplomatic Groups

APT group TA416 reemerges with new changes to its documented tool sets so it can continue launching espionage campaigns.
23 November 2020

Spotify Users Hit with Rash of Account Takeovers

Spotify Users Hit with Rash of Account Takeovers Users of the music streaming service were targeted by attackers using credential-stuffing approaches.
23 November 2020

Tesla Model X hacked and stolen in minutes using new key fob hack

Tesla is rolling out over-the-air software updates this week to prevent the attack from hijacking owner key fobs.
23 November 2020

Manchester United: IT Systems Disrupted in Cyberattack

Manchester United: IT Systems Disrupted in Cyberattack The popular U.K. soccer club confirmed an attack but said personal fan data remains secure.
23 November 2020

Joe Biden Campaign Subdomain Down After Hacktivist Defacement

Joe Biden Campaign Subdomain Down After Hacktivist Defacement A Turkish hacktivist defaced a subdomain of the president-elect's campaign website.
23 November 2020

Vote Now for 2020 Special Interest Group Projects

 

From now through 21 December 2020, PCI SSC Participating Organizations are invited to vote on proposals for 2021 Special Interest Group (SIG) projects.  

23 November 2020

Malware creates scam online stores on top of hacked WordPress sites

The malware gang also poisoned the victims' XML sitemaps with thousands of scammy entries, lowering the sites' SERP ranking.
23 November 2020

3 Steps CISOs Can Take to Convey Strategy for Budget Presentations

Answering these questions will help CISOs define a plan and take the organization in a positive direction.
23 November 2020

How Retailers Can Fight Fraud and Abuse This Holiday Season

Online shopping will be more popular than ever with consumers... and with malicious actors too.
23 November 2020

GoDaddy staff fall prey to social engineering scam in cryptocurrency exchange attack wave

The domain registrar has confirmed that employees became embroiled in wider attacks.
23 November 2020

10 Undergraduate Security Degree Programs to Explore

10 Undergraduate Security Degree Programs to Explore Colleges and universities are ramping up cybersecurity education with a wider range of degree programs and more resources for students to build their infosec careers.
23 November 2020