---

Week in security with Tony Anscombe

Zero-day in Internet Explorer – Microsoft cloud leaked big – Dating apps accused of sharing user data with advertisers

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

---

Week in security with Tony Anscombe

Zero-day in Internet Explorer – Microsoft cloud leaked big – Dating apps accused of sharing user data with advertisers

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

---

5 Resume Basics for a Budding Cybersecurity Career

You'll need to add resume tactician to your skill set in order to climb up the next rung on the security job ladder. Here's how.

---

Online Employment Scams on the Rise, Says FBI

Looking to change jobs? Watch out for fraudsters who use legitimate job services, slick websites, and an interview process to convince applicants to part with sensitive personal details.

---

Fake Smart Factory Honeypot Highlights New Attack Threats

The honeypot demonstrates the various security concerns plaguing vulnerable industrial control systems.

---

Hackers target unpatched Citrix servers to deploy ransomware

REvil ransomware gang has been spotted abusing Citrix bug to infect victims.

---

Privacy worries cited as possible reason for DNA test firm 23andMe's sales downturn

It may be no surprise considering US law enforcement was recently granted permission to plunder DNA databases.

---

Google: Flaws in Safari’s privacy tool could enable tracking

The browser's anti-tracking feature could apparently give access to users’ browsing habits

The post Google: Flaws in Safari’s privacy tool could enable tracking appeared first on WeLiveSecurity

---

Google: Flaws in Apple’s privacy tool could enable tracking

Safari’s anti-tracking feature could apparently give access to users’ browsing habits

The post Google: Flaws in Apple’s privacy tool could enable tracking appeared first on WeLiveSecurity

---

Citrix releases new patches to plug critical server vulnerability

Additional versions of Citrix ADC and Citrix Gateway can now be protected against the severe security issue.

---

Owner of stolen data marketplace Cardplanet pleads guilty

The trading post was a hotbed of stolen US credit card information.

---

Dark Web

The Dark Web is a network of systems connected to the Internet designed to share information securely and anonymously. These capabilities are abused by cyber criminals to enable their activities, for example selling hacking tools or purchasing stolen information such as credit card data. Be aware that your information could be floating around the Dark Web, making it easier for cyber criminals to create custom attacks targeting you..

---

The Annoying MacOS Threat That Won't Go Away

In two years, the adware-dropping Shlayer Trojan has spread to infect one in 10 MacOS systems, Kaspersky says.

---

'CardPlanet' Operator Pleads Guilty in Federal Court

Russian national faced multiple charges in connection with operating the marketplace for stolen credit-card credentials, and a forum for VIP criminals to offer their services.

---

New York state wants to ban government agencies from paying ransomware demands

Another NY Senate bill would create a cyber security enhancement fund and restricting the use of taxpayer moneys in paying ransoms

---

DHS Warns of Increasing Emotet Risk

Emotet is considered one of the most damaging banking Trojans, primarily through its ability to carry other malware into an organization.

---

NSA Offers Guidance on Mitigating Cloud Flaws

A new document separates cloud vulnerabilities into four classes and offers mitigations to help businesses protect cloud resources.

---

Critical, Unpatched ‘MDhex’ Bugs Threaten Hospital Devices

The Feds have warned on six vulnerabilities in GE medical equipment that could affect patient monitor alarms and more.

---

U.S. Gov Agency Targeted With Malware-Laced Emails

The malicious email campaign included a never-before-seen malware downloader called Carrotball, and may be linked to the Konni Group APT.

---

Shlayer, No. 1 Threat for Mac, Targets YouTube, Wikipedia

The malware uses thousands of partner websites to spread malvertising code.