Cybersecurity News
Texas Gold-Dealer Mined for Payment Details in Months-Long Data Breach
JM Bullion fell victim to a payment-card skimmer, which was in place for five months.
02 November 2020
Google discloses Windows zero‑day bug exploited in the wild
The security hole isn’t expected to be plugged until the forthcoming Patch Tuesday bundle of security fixes
The post Google discloses Windows zero‑day bug exploited in the wild appeared first on WeLiveSecurity
02 November 2020
Scammers Abuse Google Drive to Send Malicious Links
Cybercriminals are sending malicious links to hundreds of thousands of users via Google Drive notifications.
02 November 2020
Fraud Prevention Strategies to Prepare for the Future
While companies have largely adjusted to the new normal for security management, here are some tips for combatting fraud, post-COVID.02 November 2020
Unpatched Windows Zero-Day Exploited in the Wild for Sandbox Escape
Google Project Zero disclosed the bug before a patch becomes available from Microsoft.
02 November 2020
How Can I Help Remote Workers Secure Their Home Routers?
The most effective way is with employee security education.
02 November 2020
As Businesses Go Remote, Hackers Find New Security Gaps
Improper access control, information disclosure, and SSRF are among the most impactful, and most awarded, security flaws found this year.02 November 2020
Marriott fined £18.4 million by UK watchdog over customer data breach
The fine has been slashed from over £99 million originally proposed In light of the pandemic.02 November 2020
CERT/CC launches Twitter bot to give security bugs random names
CERT/CC attempts to reduce the use of sensationalized vulnerability names that needlessly scare software users.02 November 2020
US Cyber Command exposes new Russian malware
Together with CISA and the FBI, US Cyber Command wish Russian state hackers a "Happy Halloween!"01 November 2020
Chrome will soon have its own dedicated certificate root store
Currently, Chrome uses the certificate root store part of each operating system. Google plans to manage its own list of "approved" certificates from now on, similar to Firefox.31 October 2020
Rising Ransomware Breaches Underscore Cybersecurity Failures
Ransomware's continued success speaks volumes about what's at stake for businesses and people, and, perhaps, the cybersecurity industry's inability to adapt quickly enough to protect everyone.31 October 2020
Crippling Cyberattacks, Disinformation Top Concerns for Election Day
Cyber-researchers weigh in on what concerns them the most as the U.S. heads into the final weekend before the presidential election -- and they also highlight the positives.
30 October 2020
WordPress Patches 3-Year-Old High-Severity RCE Bug
In all, WordPress patched 10 security bugs as part of the release of version 5.5.2 of its web publishing software.
30 October 2020
Firestarter Android Malware Abuses Google Firebase Cloud Messaging
The DoNot APT threat group is leveraging the legitimate Google Firebase Cloud Messaging server as a command-and-control (C2) communication mechanism.
30 October 2020
New Wroba Campaign Is Latest Sign of Growing Mobile Threats
After years of mostly targeting users in Japan, Korea, and other countries in the region, operators of the Trojan expanded their campaign to the US this week.30 October 2020
Wisc. GOP’s $2.3M MAGA Hat Debacle Showcases Fraud Concerns
Scammers bilked Wisconsin Republicans out of $2.3 million in a basic BEC scam — and anyone working on the upcoming election needs to pay attention.
30 October 2020
Halloween News Wrap: The Election, Hospital Deaths and Other Scary Cyberattack Stories
Threatpost breaks down the scariest stories of the week ended Oct. 30 haunting the security industry -- including bugs that just won't die.
30 October 2020
Wroba Mobile Banking Trojan Spreads to the U.S. via Texts
The Roaming Mantis group is targeting the States with a malware that can steal information, harvest financial data and send texts to self-propagate.
30 October 2020
Google discloses Windows zero-day exploited in the wild
Windows zero-day (not yet patched) is used as part of an exploit chain that also includes a Chrome zero-day (already patched).30 October 2020