Cybersecurity News


Almost 4,000 databases now wiped in ‘Meow’ attacks

The attackers and their motivations remain unknown; however, the incidents yet again highlight the risks of careless data security

The post Almost 4,000 databases now wiped in ‘Meow’ attacks appeared first on WeLiveSecurity

27 July 2020

Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills

Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills The U.S. government and tech companies continue to butt heads over the idea of encryption and what that means for law enforcement.
27 July 2020

Hackers stole GitHub and GitLab OAuth tokens from Git analytics firm Waydev

OAuth tokens have been abused for intrusions at least two other companies, Dave.com and Flood.io.
27 July 2020

Pandemic Credential Stuffing: Cybersecurity's Ultimate Inside Job

How stolen credentials for services like Zoom and password reuse practices threaten to compromise other accounts and applications.
27 July 2020

Cerberus banking Trojan team breaks up, source code goes to auction

The Android malware’s operator is hoping the code and client list will net them up to $100,000.
27 July 2020

Block/Allow: The Changing Face of Hacker Linguistics

Terms such as "whitelist," "blacklist," "master," and "slave" are being scrutinized again and by a wider range of tech companies than ever before.
27 July 2020

FBI warns of new DDoS attack vectors: CoAP, WS-DD, ARMS, and Jenkins

FBI believes device vendors won't disable these protocols and warns companies to take preventive and protective measures.
27 July 2020

Apple sued for not taking action against iTunes gift card scams

Plaintiffs in new class-action lawsuit claim Apple is directly benefiting and enabling iTunes gift card scams.
26 July 2020

Tech unicorn Dave admits to security breach impacting 7.5 million users

Dave user data is now available for download on a public hacking forum.
25 July 2020

7 Summer Travel Security Tips

7 Summer Travel Security Tips With staying safe during the pandemic high priority, it's easy to let your guard down about the security of the devices you take along your travels.
25 July 2020

Thinking of a Cybersecurity Career? Read This

Thousand of people graduate from colleges and universities each year with cybersecurity or computer science degrees only to find employers are less than thrilled about their hands-on, foundational skills. Here's a look at a recent survey that identified some of the bigger skills gaps, and some thoughts about how those seeking a career in these fields can better stand out from the crowd.
24 July 2020

Academics smuggle 234 policy-violating skills on the Alexa Skills Store

Academics said they also identified 52 problematic skills already available on the Alexa store, all targeted at children.
24 July 2020

Organizations Continue to Struggle With App Vulns

A high percentage of discovered bugs remain unremediated for a long time, a new study shows.
24 July 2020

Garmin Takes App & Services Offline After Suspected Ransomware Attack

Wearables company Garmin shut down its website, app, call centers, and other services in the aftermath of a security incident.
24 July 2020

DJI Drone App Riddled With Privacy Issues, Researchers Allege

DJI Drone App Riddled With Privacy Issues, Researchers Allege The DJI GO 4 application open users’ sensitive data up for the taking, researchers allege.
24 July 2020

Remote Work Could Help Cybersecurity's Diversity Problem - But Will It?

Job market data from the second quarter suggests there are increasing opportunities for women and minorities in the world of remote work, but long-standing biases may provide resistance.
24 July 2020

Access to Internal Twitter Admin Tools Is Widespread

More than 1,000 individuals have access to tools that could have aided the attackers in the recent Twitter attack on high-profile accounts.
24 July 2020

Rise of the Robots: How You Should Secure RPA

Rise of the Robots: How You Should Secure RPA Robotic Process Automation (RPA) is the next big thing in innovation and digital strategy. But what security details are overlooked in the rush to implement bots?
24 July 2020

A vigilante is sabotaging the Emotet botnet by replacing malware payloads with GIFs

Emotet botnet activity goes down as Emotet admins are wrestling with a vigilante for control over parts of their infrastructure.
24 July 2020

NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug

NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug Power plants, factories, oil and gas refineries and more are all in the sights of foreign adversaries, the U.S. warns.
24 July 2020