Cybersecurity News


Firefox for Android Bug Allows ‘Epic Rick-Rolling’

Firefox for Android Bug Allows ‘Epic Rick-Rolling’ Anyone on the same Wi-Fi network can force websites to launch, with no user interaction.
21 September 2020

Android Malware Bypasses 2FA And Targets Telegram, Gmail Passwords

Android Malware Bypasses 2FA And Targets Telegram, Gmail Passwords A new Android malware strain has been uncovered, part of the Rampant Kitten threat group's widespread surveillance campaign that targets Telegram credentials and more.
21 September 2020

Mozilla fixes flaw that let attackers hijack Firefox for Android via Wi‑Fi

Attackers could have exploited the flaw to steal victims’ login credentials or install malware on their devices

The post Mozilla fixes flaw that let attackers hijack Firefox for Android via Wi‑Fi appeared first on WeLiveSecurity

21 September 2020

Patch by Tonight: CISA Issues Emergency Directive for Critical Netlogon Flaw

The directive requires all federal agencies to apply a patch for Windows Netlogon vulnerability CVE-2020-1472 by midnight on Sept. 21.
21 September 2020

5 Steps to Greater Cyber Resiliency

Work from home isn't going away anytime soon, and the increased vulnerability means cyber resiliency will continue to be critical to business resiliency.
21 September 2020

Hacking Yourself: Marie Moe and Pacemaker Security

Future consumer devices, including pacemakers, should be built with security from the start.
21 September 2020

Phishing awareness training wears off after a few months

Retraining employees after six months is recommended.
21 September 2020

Code execution, defense evasion are top tactics used in critical attacks against corporate endpoints

Cisco examines MITRE ATT&CK data to suggest the threat vectors enterprise security staff should focus their efforts on.
21 September 2020

Consultants charged for bribing Amazon Marketplace employees to game the platform

Prosecutors allege the group paid handsome bribes to give clients a competitive advantage.
21 September 2020

US govt orders federal agencies to patch dangerous Zerologon bug by Monday

DHS CISA tells government agencies to patch Zerologon bug by Monday, citing "unacceptable risk" posed to federal networks.
20 September 2020

Hackers leak details of 1,000 high-ranking Belarus police officers

Hackers promise to leak more if police crackdown against anti-government protesters continues.
20 September 2020

The TikTok Ban: Security Experts Weigh in on the App’s Risks

The TikTok Ban: Security Experts Weigh in on the App’s Risks With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.
18 September 2020

Firefox bug lets you hijack nearby mobile browsers via WiFi

Mozilla says users should update as soon as possible to Firefox v79 for Android.
18 September 2020

Stubborn WooCommerce Plugin Bugs Get Third Patch

Stubborn WooCommerce Plugin Bugs Get Third Patch Users of the Discount Rules for WooCommerce WordPress plugin are urged to apply a third and (hopefully) final patch.
18 September 2020

A Hacker's Playlist

A Hacker's Playlist Nine security researchers share their favorite songs and genres.
18 September 2020

Deadly Ransomware Story Continues to Unfold

A ransomware attack with fatal consequences is attracting notice and comment from around the world.
18 September 2020

Week in security with Tony Anscombe

Zoom now supports two-factor authentication. A cyber attack, which affected 14 inboxes belonging to Quebec’s Department of Justice, was confirmed by ESET researchers.

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

18 September 2020

SecOps Teams Wrestle with Manual Processes, HR Gaps

SecOps Teams Wrestle with Manual Processes, HR Gaps Enterprise security teams are "drowning in alerts."
18 September 2020

Security Takeaways from the Great Work-from-Home Experiment

Security Takeaways from the Great Work-from-Home Experiment As the pandemic drags on and remote workforces stay remote, zero-trust and other lessons learned should come to the fore.
18 September 2020

Spammers use hexadecimal IP addresses to evade detection

Links in spam emails looked like http://0xD83AC74E instead of "domain.com."
18 September 2020