Cybersecurity News
Tor team warns of Tor Browser bug that runs JavaScript on sites it shouldn't
Tor team says it's working on a fix, but has no timeline.4:15 p.m.: An urgent message from the CEO
What is CEO fraud, why is it so prevalent, and how can organizations recognize and defend themselves against these attacks?
The post 4:15 p.m.: An urgent message from the CEO appeared first on WeLiveSecurity
Europol takes down SIM-swap hacking rings responsible for theft of millions of euros
Arrests have been made across Europe in an effort to stamp out gangs specializing in SIM-swapping attacks.The pitfalls of being an influencer: What parents should know and do
Does your child dream of becoming a YouTube or Instagram celebrity? The influencer lifestyle is not as picture-perfect as it may seem.
The post The pitfalls of being an influencer: What parents should know and do appeared first on WeLiveSecurity
State-sponsored hackers are now using coronavirus lures to infect their targets
Chinese, North Korean, and Russian government cyberspies caught using COVID-19-themed emails to infect victims with malware.Russia-Based Turla APT Group's Infrastructure, Activity Traceable
Threat actor's practice of using known malware and tactics gives an opening for defenders, says Recorded Future.New Report Shows Breach Costs Continuing to Grow
The costs associated with data breaches climb alongside the amount of data managed by the enterprise according to the latest Global Protection Index Snapshot.Researchers Warn of Novel PXJ Ransomware Strain
While PXJ performs typical ransomware functions, it does not appear to share the same underlying code with most known ransomware families.
How Industry Feedback is Shaping the Future of PCI DSS
The Council recently conducted its most successful Request for Comment (RFC) ever - on the initial draft of Payment Card Industry Data Security Standard (PCI DSS) v4.0. To say the participation and contributions were surprising is an understatement. Our stakeholders stepped forward with more responses than we have ever seen before.
New Android Malware Strain Sneaks Cookies from Facebook
Two malware modifications, when combined, can snatch cookies collected by browsers and social networking apps.Trojan Raids Android Users’ Cookie Jars
Cookiethief steals cookies to infiltrate Facebook and other web service accounts.
CASB 101: Why a Cloud Access Security Broker Matters
A CASB isn't a WAF, isn't an NGF, and isn't an SWG. So what is it, precisely, and why do you need one to go along with all the other letters? Read on for the answer.
Microsoft discontinues RDCMan app following security bug
Microsoft recommends using the Windows in-box remote desktop client (MSTSC) instead.Working from Home? These Tips Can Help You Adapt
COVID-19 means many people are doing their jobs from outside the confines of the office. That may not be as easy as it sounds.Microsoft Patches Leaked Remote Code Execution Flaw
A vulnerability in Microsoft's Server Message Block protocol prompted concerns of wormable exploits when it was disclosed this week.Microsoft patches SMBv3 wormable bug that leaked earlier this week
Fix for CVE-2020-0796 is now rolling out to Windows 10 and Windows Serve 2019 systems worldwide.Live Coronavirus Map Used to Spread Malware
Cybercriminals constantly latch on to news items that captivate the public's attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software.European power grid organization hit by cyberattack
The incident affected our office network, says ENTSO-E, as it implements measures to avoid future cyber-incursions
The post European power grid organization hit by cyberattack appeared first on WeLiveSecurity
$100K Paid Out for Google Cloud Shell Root Compromise
A Dutch researcher claimed Google's very first annual Cloud Platform bug-bounty prize, for a clever container escape exploit.