Cybersecurity News
New iOS Jailbreak Tool Works on iPhone Models iOS 11 to iOS 13.5
Latest version of UnC0ver uses unpatched zero-day exploit to take complete control of devices, even those running iOS 13.5.
26 May 2020
Europol, Capgemini team up in cybercrime prevention, awareness campaigns
Capgemini is now also supporting the No More Ransom Project.26 May 2020
Forescout files lawsuit against Advent for withdrawal of merger plans due to COVID-19
Advent says the pandemic has resulted in “material” changes at Forescout. The company disagrees.26 May 2020
EasyJet faces £18 billion class-action lawsuit over data breach
The lawsuit aims to secure up to £2,000 per impacted customer.26 May 2020
From Agent.BTZ to ComRAT v4: A ten‑year journey
Turla has updated its ComRAT backdoor and now uses the Gmail web interface for Command and Control
The post From Agent.BTZ to ComRAT v4: A ten‑year journey appeared first on WeLiveSecurity
26 May 2020
Turla hacker group steals antivirus logs to see if its malware was detected
Turla, one of Russia's most advanced hacker groups, has created malware that gets its orders from email attachments sent to an arbitrary Gmail inbox.26 May 2020
Ransomware
Ransomware is a special type of malware. Once it infected your computer, it encrypts all of your files and demands you pay a ransome if you want your files back. Be suspicious of any emails trying to trick you into opening infected attachments or click on malicious links, common sense is your best defense. In addition. backups are often the only way you can recover from ransomware.26 May 2020
Content Delivery Networks Adding Checks for Magecart Attacks
Modern web applications make significant use of third-party code to drive innovation, but the software supply chain has also turned into a major source of threat. CDNs aim to change that.26 May 2020
RangeAmp attacks can take down websites and CDN servers
Twelve of thirteen CDN providers said they fixed or planned to fix the problem.25 May 2020
Thousands of enterprise systems infected by new Blue Mockingbird malware gang
Hackers are exploiting a dangerous and hard to patch vulnerability to go after enterprise servers.25 May 2020
ThreatList: People Know Reusing Passwords Is Dumb, But Still Do It
Even seeing data breaches in the news, more than half of consumers are still reusing passwords.
25 May 2020
70 Percent of Mobile, Desktop Apps Contain Open-Source Bugs
A lack of awareness about where and how open-source libraries are being used is problematic, researchers say.
25 May 2020
Two years later, has GDPR fulfilled its promise?
Has the landmark law helped build a culture of privacy in organizations and have consumers become more wary of sharing their personal data?
The post Two years later, has GDPR fulfilled its promise? appeared first on WeLiveSecurity
25 May 2020
New Unc0ver jailbreak released, works on all recent iOS versions
New "Unc0ver" jailbreak unlocks devices, even those running the current iOS 13.5 release.24 May 2020
Riding the State Unemployment Fraud ‘Wave’
When a reliable method of scamming money out of people, companies or governments becomes widely known, underground forums and chat networks tend to light up with activity as more fraudsters pile on to claim their share. And that's exactly what appears to be going on right now as multiple U.S. states struggle to combat a tsunami of phony Pandemic Unemployment Assistance (PUA) claims. Meanwhile, a number of U.S. states are possibly making it easier for crooks by leaking their citizens' personal data from the very websites the unemployment scammers are using to file bogus claims.23 May 2020
Chrome: 70% of all security bugs are memory safety issues
Google software engineers are looking into ways of eliminating memory management-related bugs from Chrome.23 May 2020
5 Tips for Fighting Credential Stuffing Attacks
With stolen credentials an easy find online, what are some measures to put in place to keep hackers from breaking into secure accounts?
22 May 2020
25 million user records leak online from popular math app Mathway
The Mathway user data has been previously on sale on the dark web, hacker forums, and Telegram channels for the past two weeks.22 May 2020
Former Salesforce Execs Launch Data Protection Startup
Cloud-based API service stores and manages sensitive consumer data with a zero-trust, database-as-a service approach.22 May 2020
Dark Reading Edge Cybersecurity Crossword Puzzle, May 22th
Have a hard time coming up with the answers to these puzzle questions? We know a great place to look for more clues...
22 May 2020