Cybersecurity News
Clever Phishing Attack Bypasses MFA to Nab Microsoft Office 365 Credentials
The attack discovered by Cofense can steal sensitive user data stored on the cloud as well as find other victims to target.19 May 2020
Hundreds of thousands of QNAP devices vulnerable to remote takeover attacks
A firmware patch has been released last year, in November.19 May 2020
EasyJet reveals cyber-attack exposed 9m customers' details
Airline apologises after credit card details of about 2,200 passengers were stolen
EasyJet has revealed that the personal information of 9 million customers was accessed in a “highly sophisticated” cyber-attack on the airline.
The company on Tuesday disclosed that email addresses and travel details were accessed and said it will contact all of the customers affected.
Continue reading...19 May 2020
France defends 'centralized' coronavirus tracing app, insists privacy held sacred
The country says StopCovid could be valuable in preventing a second COVID-19 wave.19 May 2020
FBI warns about attacks on Magento online stores via old plugin vulnerability
FBI says hackers have been planting card skimmers on online stores by exploiting a 2017 bug in the MAGMI plugin.19 May 2020
Verizon Data Breach Report: DoS Skyrockets, Espionage Dips
Denial of Service (DoS), ransomware, and financially-motivated data breaches were the winners in this year's Verizon DBIR.19 May 2020
Supreme Court rejects lawsuit claiming Facebook provided terrorist forum support
The case accused Facebook of being materially responsible for user-generated terrorist content.18 May 2020
Smartphones, laptops, IoT devices vulnerable to new BIAS Bluetooth attack
New BIAS attack works agaisnt Bluetooth devices and firmware from Apple, Broadcom, Cypress, Intel, Samsung, and others.18 May 2020
Ransomware Gang Arrested for Spreading Locky to Hospitals
A group of four people calling themselves "Pentaguard" were arrested in house raids.18 May 2020
As DevOps Accelerates, Security's Role Changes
There remains a disconnect between developers and security teams, with uncertainty around who should handle software security.18 May 2020
ProLock Ransomware Teams Up With QakBot Trojan to Infect Victims
ProLock is relatively new, but already the ransomware is making waves by using QakBot infections to access networks, gain persistence and avoid detection.18 May 2020
FBI criticizes Apple for not helping crack Pensacola shooter's iPhones
Apple said back in January that it helped within hours and handed over to the FBI gigabytes of information.18 May 2020
Private Equity Firm Stalls $1.9B Forescout Acquisition
Officials say "there can be no assurance" Forescout and Advent International will reach an agreement, though talks are ongoing.18 May 2020
Edison Mail iOS Bug Exposes Emails to Strangers
A bug introduced in an iOS software update on the Edison Mail app allowed emails to be viewed by strangers.18 May 2020
This Service Helps Malware Authors Fix Flaws in their Code
Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne’er-do-wells to liberate or else seize control over already-hacked systems. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals.18 May 2020
Mercedes-Benz onboard logic unit (OLU) source code leaks online
Daimler allowed anyone to register on one of its on-premise GitLab servers.18 May 2020
The 3 Top Cybersecurity Myths & What You Should Know
With millions of employees now attempting to work from home, it's vital to challenge misconceptions about cybersecurity.18 May 2020
European supercomputers hacked to mine cryptocurrency
Several high-performance computers working on COVID-19 research have been forced offline following a string of attacks
The post European supercomputers hacked to mine cryptocurrency appeared first on WeLiveSecurity
18 May 2020
Face masks prompt London police to consider pause in rollout of facial recognition cameras
The controversial scheme may be halted due to the widespread adoption of face coverings.18 May 2020
FBI: ProLock ransomware gains access to victim networks via Qakbot infections
The FBI also warns that the ProLock decryptor doesn't always work correctly, even after victims pay the ransom.18 May 2020