Cybersecurity News
Attackers target critical flaw in popular networking gear
The vulnerability, which received the highest possible severity score, leaves thousands of devices at risk of being taken over by remote attackers. A patch is available.
The post Attackers target critical flaw in popular networking gear appeared first on WeLiveSecurity
07 July 2020
Citrix Bugs Allow Unauthenticated Code Injection, Data Theft
Admins should patch their Citrix ADC and Gateway installs immediately.
07 July 2020
'Keeper' hacking group behind hacks at 570 online stores
Hackers also accidentally leaked more than 184,000 stolen cards through an improperly secured backend server.07 July 2020
Applying the 80-20 Rule to Cybersecurity
How security teams can achieve 80% of the benefit for 20% of the work.
07 July 2020
Credit-Card Skimmer Has Unlikely Target: Microsoft ASP.NET Sites
A campaign discovered by Malwarebytes Labs in mid-April has lifted credentials from a number of e-commerce portals.
07 July 2020
Researchers learn how to pinpoint malicious drone operators
With high accuracy, it is now possible to trace drone operators that could be ill-wishers near protected airspace.07 July 2020
Energy company EDP confirms cyberattack, Ragnar Locker ransomware blamed
The energy firm denies the loss of customer data. Attackers claim to have stolen 10TB in business records.07 July 2020
First-Ever Russian BEC Gang, Cosmic Lynx, Uncovered
Researchers warn that Cosmic Lynx targets firms that don't use DMARC and uses a "mergers and acquisitions" pretext that can lead to large sums of money being stolen.
07 July 2020
Cerberus banking Trojan infiltrates Google Play
The malware was found buried within a seemingly-innocent currency converter.07 July 2020
Raising children in the social media limelight? Pause before you post
How (over)sharing your children’s triumphs and antics with the world may impact their immediate and distant future – and how to reduce the risks of ‘sharenting’
The post Raising children in the social media limelight? Pause before you post appeared first on WeLiveSecurity
07 July 2020
BEC Busts Take Down Multimillion-Dollar Operations
The two extraditions of business email compromise attackers indicate a step forward for international law enforcement collaboration.06 July 2020
Attackers Scan for Vulnerable BIG-IP Devices After Flaw Disclosure
The US Cybersecurity and Infrastructure Security Agency encourages organizations to patch a critical flaw in the BIG-IP family of application delivery controllers, as firms find evidence that attackers are scanning for the critical vulnerability.06 July 2020
North Korea's Lazarus Group Diversifies Into Card Skimming
Since at least May 2019, the state-sponsored threat actor has stolen card data from dozens of retailers, including major US firms.06 July 2020
Android Users Hit with ‘Undeletable’ Adware
Researcher say that 14.8 percent of Android users who were targeted with mobile malware or adware last year were left with undeletable files.
06 July 2020
Credit-Card Skimmer Seeks Websites Running Microsoft's ASP.NET
The payment-card skimmer targets websites hosted on Microsoft IIS servers and running the ASP.NET web framework.06 July 2020
Admins Urged to Patch Critical F5 Flaw Under Active Attack
Security experts and the U.S. Cyber Command are urging admins to update a critical flaw in F5 Networks, which is under active attack.
06 July 2020
Android Adware Tied to Undeletable Malware
Adware on inexpensive Android smartphone can carry additional malware and be undeletable.06 July 2020
Lazarus Group Adds Magecart to the Mix
North Korea-based APT is targeting online payments made by American and European shoppers.
06 July 2020
US Secret Service reports an increase in hacked managed service providers (MSPs)
US Secret Service says hackers are breaching MSPs to orchestrate ransomware attacks, point-of-sale intrusions, and business email compromise (BEC) scams.06 July 2020
Purple Fox EK Adds Microsoft Exploits to Arsenal
Two exploits for Microsoft vulnerabilities have been added to the Purple Fox EK, showing ongoing development.
06 July 2020