The iOS applications of Twitter, LinkedIn and possibly other major vendors can be abused by hackers to initiate phone calls to arbitrary numbers. The attacker can also prevent the victim from ending the call.
read more
Yahoo Reveals More Details About Massive Hack
read more
Continue readingCyberspies Ramped Up Attacks After Exposure of Zero-Days
The Russia-linked threat actor known as Pawn Storm ramped up its attacks against governments and embassies after seeing that researchers discovered the Windows and Flash Player zero-day exploits it had been using.
read more
The Answer is Right in Front of You
I have lost count of the number of conversations I’ve either observed or been involved in where people simply aren’t listening to one another. Whether it’s in a meeting, at a conference, in a social setting, or elsewhere, sometimes I take a step back and marvel at the complete breakdown in communication. In some cases, it almost seems as if there are two different conversations happening at the same time between the same two people.
read more
Privilege Escalation Flaw Affects Several Siemens Products
Siemens has released updates and temporary fixes to address a medium-severity privilege escalation vulnerability affecting many of its industrial products.
read more
Tesco Bank ‘Hack’ Still a Mystery
Little is currently known about how money was stolen from thousands of Tesco Bank current account (checking account) holders last weekend. It is clear now, however, that approximately 9,000 customers rather than the initial estimate of 20,000 were affected.
read more
Attackers Exploited Chrome Zero-Day to Deliver Android Trojan
Cybercriminals delivered the Svpeng Trojan to Android users via Google AdSense and a zero-day vulnerability in the Android version of the Chrome web browser.
read more
Fully Operational TrickBot Banking Trojan Targets UK, Australia
TrickBot, a new piece of malware that experts believe is somehow linked to the notorious Dyre Trojan, is now fully operational and it has been used to target banks in the United Kingdom, Australia and other countries.
read more
Microsoft Patches Windows Zero-Day Exploited by Russian Hackers
The 14 security bulletins released on Tuesday by Microsoft address many serious issues, including a couple of Windows vulnerabilities actively exploited by malicious actors and bugs for which exploits are already publicly available.
read more
Security Industry Could Light Path for Data Analytics
A new survey and report shows strong faith but poor confidence in current data analytics. For example, 70% of respondents to the survey believe that analytics are integral to understanding how products are used; 71% to understanding business performance, and 70% to understanding fraud. But at the same time, only 43% are confident in the analytics insights for risk and security; 38% for customer insights; and just 38% for business operations.
read more
