Cybersecurity News
OkCupid Security Flaw Threatens Intimate Dater Details
Attackers could exploit various flaws in OkCupid's mobile app and webpage to steal victims' sensitive data and even send messages out from their profiles.
29 July 2020
ESET Threat Report Q2 2020
A view of the Q2 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts
The post ESET Threat Report Q2 2020 appeared first on WeLiveSecurity
29 July 2020
Today’s ‘mega’ data breaches now cost companies $392 million to recover from
When consumer PII is involved, the cost increases.29 July 2020
Lazarus Group Shifts Gears with Custom Ransomware
The North Korea-linked APT group has developed its own ransomware strain to better conduct financial theft, researchers report.28 July 2020
Lazarus Group Brings APT Tactics to Ransomware
A new ransomware, VHD, was seen being delivered by the nation-state group's multiplatform malware platform, MATA.
28 July 2020
Avon Server Leaks User Info and Administrative Data
An unprotected server has exposed more than 7GB of data from the beauty brand.28 July 2020
Hacker gang behind Garmin attack doesn't have a history of stealing user data
There's a high probability that Garmin user data might be safe, after all.28 July 2020
Out-of-Date and Unsupported Cloud Workloads Continue as a Common Weakness
More than 80% of companies have at least one Internet-facing cloud asset that is more than six months out of date or running software that is no longer supported, according to scan data.28 July 2020
Researchers Foil Phishing Attempt on Netflix Customers
Hackers use two stolen domains to steal credentials from Netflix users and then send them to the real Netflix site.28 July 2020
7.5M Banking Customers Affected in Dave Security Breach
The financial services app confirms user data was compromised in a data breach at its former third-party provider, WayDev.28 July 2020
Autonomous IT: Less Reacting, More Securing
Keeping data secure requires a range of skills and perfect execution. AI makes that possible.28 July 2020
FBI warns of disruptive DDoS amplification attacks
The Bureau expects cybercriminals to increasingly abuse new threat vectors for large-scale DDoS attacks
The post FBI warns of disruptive DDoS amplification attacks appeared first on WeLiveSecurity
28 July 2020
As Businesses Move to the Cloud, Cybercriminals Follow Close Behind
In the wake of COVID-19, data theft is by far the top tactic, followed by cryptomining and ransomware.28 July 2020
Kaspersky: North Korean hackers are behind the VHD ransomware
North Korean hackers return to actively deploying ransomware after the huge WannaCry debacle.28 July 2020
Podcast: Security Lessons Learned In Times of Uncertainty
Derek Manky, Chief, Security Insights & Global Threat Alliances at Fortinet's FortiGuard Labs, discusses the top threats and lessons learned from the first half of 2020.
28 July 2020
Researchers Warn of High-Severity Dell PowerEdge Server Flaw
A path traversal vulnerability in the iDRAC technology can allow remote attackers to take over control of server operations.
28 July 2020
New Linux malware uses Dogecoin API to find C&C server addresses
Security researchers discover Doki, a new backdoor malware strain targeting Docker instances.28 July 2020
Business ID Theft Soars Amid COVID Closures
Identity thieves who specialize in running up unauthorized lines of credit in the names of small businesses are having a field day with all of the closures and economic uncertainty wrought by the COVID-19 pandemic, KrebsOnSecurity has learned. This story is about the victims of a particularly aggressive business ID theft ring that's spent years targeting small businesses across the country and is now pivoting toward using that access for pandemic assistance loans and unemployment benefits.27 July 2020
ShinyHunters Offers Stolen Data on Dark Web
The threat actor offers more than 26 million records from a series of data breaches.27 July 2020
Ratings for Open Source Projects Aim to Make Software More Secure
Two companies have teamed up to rate open source projects, but can adopting repository ratings help developers make better decisions regarding open source?27 July 2020