Cybersecurity News
Week in security with Tony Anscombe
ESET research unearths a previously unknown espionage gang and a new version of Android spyware - Elucidating connections between Latin American banking trojans
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
02 October 2020
Years-Long ‘SilentFade’ Attack Drained Facebook Victims of $4M
Facebook detailed an ad-fraud cyberattack that's been ongoing since 2016, stealing Facebook credentials and browser cookies.
02 October 2020
Google sets up research grant for finding bugs in browser JavaScript engines
Eligible browser JavaScript engines include JavaScriptCore (Safari), V8 (Chrome, Edge), and Spidermonkey (Firefox).02 October 2020
3 Months for the Cybercrime Books
From July through September, US law enforcement handed down major indictments or sanctions against foreign threat groups at least six times.
02 October 2020
3 Months for the Cybercrime Books
From July through September, US law enforcement handed down major indictments or sanctions against foreign threat groups at least six times.
02 October 2020
305 CVEs and Counting: Bug-Hunting Stories From a Security Engineer
Larry Cashdollar, senior security response engineer at Akamai, talks about the craziest stories he's faced, reporting CVEs since 1994.
02 October 2020
Truncated URLs Look to Make Big Dent in Phishing
The approach is a long time in coming and will test the premise that users can more easily detect a suspicious domain from the name alone.02 October 2020
Researchers track hacking ‘fingerprints,’ link Russian attackers to Windows exploit sellers
The new technique was used to profile prolific Windows LPE exploit sellers.02 October 2020
ESET discovers a rare APT that stayed undetected for nine years
Active since 2011 but only discovered this year, the XDSpy hacker group targeted government and private companies in Belarus, Moldova, Russia, Serbia, and Ukraine.02 October 2020
XDSpy: Stealing government secrets since 2011
ESET researchers uncover a new APT group that has been stealing sensitive documents from several governments in Eastern Europe and the Balkans since 2011
The post XDSpy: Stealing government secrets since 2011 appeared first on WeLiveSecurity
02 October 2020
4G, 5G networks could be vulnerable to exploit due to ‘mishmash’ of old technologies
The decades-old SS7 signaling system is one of numerous protocols exposing 5G networks to abuse.02 October 2020
Kids and Family Members
If you have children visiting or staying with family members (such as grandparents), make sure the family members know your rules concerning technology that your kids must follow. Just because your kids leave the house does not mean the rules about what they can do online change.02 October 2020
Facebook sues two Chrome extension makers for scraping user data
Facebook has sued today the makers of the UpVoice and Ads Feed Chrome extensions.01 October 2020
Singapore Asks Big Cybersecurity Questions to Improve National Defense
An executive from Singapore's Cyber Security Agency examines the role of security in a nation increasingly dependent on technology.01 October 2020
Emotet Emails Strike Thousands of DNC Volunteers
Hundreds of U.S. organizations on Thursday received emails purporting to come from the Democratic National Committee, in a new politically charged Emotet spear-phishing attack.
01 October 2020
New HP Bug Bounty Program Targets Vulns in Printer Cartridges
White-hat hackers will receive $10,000 for each security bug they discover plus a base fee, under this invitation-only initiative.01 October 2020
QR Codes: A Sneaky Security Threat
What to watch out for, and how to protect yourself from malicious versions of these mobile shortcuts.
01 October 2020
US Treasury Warns of Sanctions Violations for Paying Ransomware Attackers
An alarming new advisory issued today by the federal government could upend ransomware response.01 October 2020
CFAA 101: A Computer Fraud & Abuse Act Primer for InfoSec Pros
From WarGames, to Aaron Swartz, to bug bounties, to Van Buren, here's what cybersecurity researchers should know about the US's primary anti-hacking law before it gets its day in the Supreme Court.
01 October 2020
