---

Half of Firms Likely Running Vulnerable Oracle E-Business Suite

Two security vulnerabilities could open up companies to financial attacks and compliance violations if the software is not updated, Onapsis says.

---

Just Updated: PTS POI Standard

 

Today, PCI SSC has PCI PIN Transaction Security (PTS) Point-of-Interaction (POI) Modular Security Requirements v6.0. Updates are designed to meet the accelerating changes of payment device technology, while providing protections against criminals who continue to develop new ways to steal payment card data.

---

Survey shows rise in robocalls amid COVID‑19 fears

The unsolicited phone calls tout everything from miracle cures to financial relief – here's how you can stay safe

The post Survey shows rise in robocalls amid COVID‑19 fears appeared first on WeLiveSecurity

---

Avon recovering after mysterious cyber-security incident

Parts of the Avon It network has been down since last week, according to SEC documents.

---

IoT Security Trends & Challenges in the Wake of COVID-19

The demand for Internet of Things security practices that protect sensitive medical equipment and data will double within the next five years. Here's why.

---

Ripple20 vulnerabilities will haunt the IoT landscape for years to come

Security researchers disclose 19 vulnerabilities impacting a TCP/IP library found at the base of many IoT products.

---

Shadow IT: Why It’s Still a Major Risk in Today’s Environments

According to industry analyst firm Gartner, as many as one-third of successful attacks on enterprises target data that are housed in unsanctioned IT resources.

---

Old GTP protocol vulnerabilities will also impact future 5G networks

Bugs allow denial-of-service, user impersonation, user tracking, and fraud attacks, two separate reports warn.

---

Ryuk Continues to Dominate Ransomware Response Cases

Analysis reveals how Ryuk's operators are changing their techniques and using new means to break in.

---

Now-Former eBay Security Team Members Charged in Bizarre Cyberstalking Campaign

A bloody pig mask, doxing threats, and a foiled surveillance attempt were among the actions six ex-eBay employees took against an editor and publisher of a newsletter.

---

Twitter Disrupts Wide-Ranging Political Disinformation Campaigns

This removal, of 32K accounts, is not the first time Twitter has taken action to protect its users from influence operations. Researchers weighed in on the practice with Threatpost.

---

Intel Tackles Malware Related to Memory Security at Hardware Level

New control-flow enforcement technology will become available with upcoming Tiger Lake mobile processor, chipmaker says.

---

Intel Adds Anti-Malware Protection in Tiger Lake CPUs

Intel's Tiger Lake CPUs will come with Control-flow Enforcement Technology (CET), aimed at battling common control-flow hijacking attacks.

---

WFH Alert: Critical Bug Found in Old D-Link Router Models

Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.

---

WFH Alert: Critical Bug Found in Old D-Link Router Models

Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.

---

Microsoft Releases Update for DoS Flaw in .NET Core

Customers are advised to install the latest version of PowerShell to fully address CVE-2020-1108.

---

Claire’s Customers Targeted with Magecart Payment-Card Skimmer

The Magecart group targeted the tween accessories specialist starting the day after it shuttered its retail locations due to coronavirus.

---

‘Lamphone’ Hack Uses Lightbulb Vibrations to Eavesdrop on Homes

A new hack allowed researchers to discern sound -- including "Let it Be" by the Beatles, and audio from a Donald Trump speech -- from lightbulb vibrations.

---

Warning issued over hackable security cameras

The owners of the vulnerable indoor cameras are advised to unplug the devices immediately

The post Warning issued over hackable security cameras appeared first on WeLiveSecurity

---

South African bank to replace 12m cards after employees stole master key

Postbank says employees printed its master key at one of its data centers and then used it to steal $3.2 million.