Cybersecurity News
2021 Cybersecurity Spending: How to Maximize Value
This is a pivotal moment for CISOs. As their influence increases, so does the pressure for them to make the right decisions.19 November 2020
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
Threat actors mount year-long campaign of espionage, exfiltrating data, stealing credentials and installing backdoors on victims’ networks.
19 November 2020
The worst passwords of 2020: Is it time to change yours?
They’re supremely easy to remember, as well as easy to crack. Here’s how to improve your password security.
The post The worst passwords of 2020: Is it time to change yours? appeared first on WeLiveSecurity
19 November 2020
Unpatched Browsers Abound, Study Shows
Google Chrome users don't always take time to relaunch browser updates, and some legacy applications don't support new versions of Chrome, Menlo Security says.
19 November 2020
Cybercriminals Batter Automakers With Ransomware, IP Theft Cyberattacks
While the industry focus is on vehicle hacking, when it comes to the automotive industry cybercriminals are opting for less complex and sophisticated attacks - from phishing to ransomware.
19 November 2020
New Grelos skimmer variant reveals overlap in Magecart group activities, malware infrastructure
The discovery of a new skimmer variant reveals the difficulties associated with tracking separate Magecart campaigns.19 November 2020
Fearing drama, Mozilla opens public consultation before worldwide Firefox DoH rollout
Mozilla wants to enable DNS-over-HTTPS (DoH) in Firefox for all users worldwide, but wants to hear from ISPs, governments, and companies beforehand.19 November 2020
Online Shopping Surge Puts Focus on Consumer Security Habits
Companies will have to tread a fine line between delivering security and a frictionless shopping experience, security firms say.18 November 2020
Cisco Webex Vulns Let 'Ghost' Attendees Spy on Meetings
Three vulnerabilities, patched today, could let an attacker snoop on meetings undetected after the host removes them.18 November 2020
Widespread Scans Underway for RCE Bugs in WordPress Websites
WordPress websites using buggy Epsilon Framework themes are being hunted by hackers.
18 November 2020
LAPD Bans Facial Recognition, Citing Privacy Concerns
The department has said no thanks to the Clearview AI platform, after an expose showing that officers had used it 475 times during a trial period alone.
18 November 2020
Starting next year, Chrome extensions will show what data they collect from users
Google will add a "Privacy practices" section on each Chrome extension's Web Store page listing what data they collect from users and what the developer plans to do with it.18 November 2020
Out With the Old Perimeter, in With the New Perimeters
A confluence of trends and events has exploded the whole idea of "the perimeter." Now there are many perimeters, and businesses must adjust accordingly.18 November 2020
Cisco Webex ‘Ghost’ Flaw Opens Meetings to Snooping
Cisco patched the Webex flaw, as well as three critical-severity vulnerabilities, in a slew of security updates on Wednesday.
18 November 2020
Trump Fires CISA Director Chris Krebs
Christopher Krebs was fired via tweet shortly after the Cybersecurity and Infrastructure Security Agency called the 2020 election "the most secure in American history."18 November 2020
Bumble bugs could have exposed personal data of all users
The information at risk of theft due to API flaws included people’s pictures, locations, dating preferences and Facebook data
The post Bumble bugs could have exposed personal data of all users appeared first on WeLiveSecurity
18 November 2020
Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
Overall Google's Chrome 87 release fixed 33 security vulnerabilities.
18 November 2020
As Businesses Move to Multicloud Approach, Ransomware Follows
The average US company uses 16 cloud services, but only a third of IT professional believe their security measures have kept up with the change.18 November 2020
Cisco Webex bugs allow attackers to join meetings as ghost users
Attackers can join Webex meetings as ghost users, and even remain inside rooms after getting kicked.18 November 2020
Liquid crypto-exchange says hacker accessed internal network, stole user data
Liquid admins said the intrusion was detected before any funds were stolen.18 November 2020