Cybersecurity News


EternalBlue Longevity Underscores Patching Problem

Three years after the Shadow Brokers published zero-day exploits stolen from the National Security Agency, the SMB compromise continues to be a popular Internet attack.
04 March 2020

The Perfect Travel Security Policy for a Globe-Trotting Laptop

The Perfect Travel Security Policy for a Globe-Trotting Laptop There are many challenges to safely carrying data and equipment on international travels, but the right policy can make navigating the challenges easier and more successful.
04 March 2020

Fraud Prevention Month: How to protect yourself from scams

ESET Chief Security Evangelist Tony Anscombe sat down with us to share his insights on how to avoid falling prey to online fraud

The post Fraud Prevention Month: How to protect yourself from scams appeared first on WeLiveSecurity

04 March 2020

Loyalty Cards Targeted in Tesco Clubcard Attack

Loyalty Cards Targeted in Tesco Clubcard Attack Around 600,000 of the supermarket's 12 million loyalty program members have been warned about a cyberattack.
04 March 2020

Cathay Pacific Hit with Fine for Long-Lasting Breach

The breach, which was active for four years, resulted in the theft of personal information on more than 9 million people.
04 March 2020

3 Ways to Strengthen Your Cyber Defenses

By taking proactive action, organizations can face down threats with greater agility and earned confidence.
04 March 2020

Voice assistants can be hacked with ultrasonic waves

With access to text messages and the ability to make fraudulent phone calls, attackers could wreak more damage than you'd think

The post Voice assistants can be hacked with ultrasonic waves appeared first on WeLiveSecurity

04 March 2020

Coronavirus claims another major tech event: Kaspersky’s Security Analyst Summit postponed

Organizers say that it won’t be a “real” SAS without the hugs and clinking of beer glasses.
04 March 2020

7 Loyalty Program and Rewards App Attacks

7 Loyalty Program and Rewards App Attacks The number of attacks targeting loyalty and rewards programs is growing. Here are some of the lowlights.
04 March 2020

7 Loyalty Program and Rewards App Attacks

7 Loyalty Program and Rewards App Attacks The number of attacks targeting loyalty and rewards programs is growing. Here are some of the lowlights.
04 March 2020

Messaging / Smishing Attacks

Cyber attackers can just as easily trick or fool you in messaging apps as they can in email. Be on the look-out for scams or attacks via apps such as Slack, Skype, WhatsApp or event simple text messaging. The most common clues are tremendous sense of urgency or curioustiy.
04 March 2020

Let's Encrypt to revoke 3 million certificates on March 4 due to software bug

Let's Encrypt issued 3,048,289 TLS certificates without checking the CAA field for the requesting domain.
03 March 2020

Cobalt Ulster Strikes Again With New ForeLord Malware

Cobalt Ulster Strikes Again With New ForeLord Malware Threatpost talks to Alex Tilley, senior security researcher with Dell SecureWorks' Counter Threat Unit Research Team, about a recently discovered campaign linked to an Iranian APT.
03 March 2020

Gotta Patch 'Em All? Not Necessarily, Experts Say

When it's impossible to remediate all vulnerabilities in an organization, data can indicate which bugs should be prioritized.
03 March 2020

Academics find 30 file upload vulnerabilities in 23 web apps, CMSes, and forums

Impacted projects include WordPress, Concrete5, Composr, SilverStripe, ZenCart, and others.
03 March 2020

Let’s Encrypt to Revoke Millions of TLS Certs

Let’s Encrypt to Revoke Millions of TLS Certs On Wednesday millions of Transport Layer Security certificates will be revoked because of a Certificate Authority Authorization bug.
03 March 2020

MediaTek Bug Actively Exploited, Affects Millions of Android Devices

MediaTek Bug Actively Exploited, Affects Millions of Android Devices An exploit published by a developer is easy to use and has already been used to build malicious apps that gain root access on Android devices.
03 March 2020

Avoiding the Perils of Electronic Communications

Twitter, Slack, etc., have become undeniably important for business today, but they can cause a lot of damage. That's why an agile communications strategy is so important.
03 March 2020

With New SOL4Ce Lab, Purdue U. and DoE Set Sights on National Security

With New SOL4Ce Lab, Purdue U. and DoE Set Sights on National Security The cooperative research initiative brings together faculty and students to "focus on problems and cutting-edge ways to solve them."
03 March 2020

NSS Labs Revises Endpoint Security Test Model

New product ratings system comes amid growing shift in the testing market toward more "open and transparent" evaluation of security tools.
03 March 2020