Collaborate Disseminate
Foxit patched a dozen vulnerabilities in its PDF reader software this week, more than half of which could be used to directly execute arbitrary code on vulnerable installations of the product.
Continue reading Foxit Patches 12 Vulnerabilities in PDF Reader
The FTC closes roughly 70 percent of the investigations it opens and is weighing how to better handle PCI-DSS and other standards, an agency official said this week. Continue reading FTC Closes 70 Percent of Data Breach Investigations, Weighing PCI-DSS Standard
A botnet comprised entirely of closed circuit TV devices used a barrage of HTTP requests to knock a small jewelry store offline for days.
Continue reading Botnet Powered by 25,000 CCTV Devices Uncovered
The hacker selling upwards to 655,000 healthcare records on the dark web obtained them after exploiting a vulnerability in how companies implement RDP. Continue reading 655,000 Healthcare Records Being Sold on Dark Web
Mike Mimoso and Chris Brook recap the news of the week, including a Bitcoin phishing campaign, the Kaspersky Lab ransomware report, misconfigured email servers, and a decline in Angler exploit kit traffic. Continue reading Threatpost News Wrap, June 24, 2016
A mobile advertising company that settled charges with the Federal Trade Commission this week will pay nearly $1M after it was determined the company tracked customers – including children – without their consent. Continue reading Mobile Advertising Firm Found Tracking Users To Pay $950K
More than half of the world’s top sites suffer from misconfigured email servers, something that heightens the risk of having spoofed emails sent from their domains, researchers warn. Continue reading Email Servers For More Than Half of World’s Top Sites Can Be Spoofed
For the last month attackers have been using a combination of phishing and typosquatting in order to carry out a Bitcoin phishing campaign. Continue reading Bitcoin Phishing Campaign Uncovered
Taiwanese electronics company Acer sent letters to customers indicating that some of their financial information – credit card data included – may have been accessed over the last year. Continue reading Acer Ecommerce Site Spills Credit Card Information of Thousands
At last week’s Apple Worldwide Developer Conference, Apple announced some security upgrades around Gatekeeper and a new filesystem that includes native support for encryption. Mac hacker Patrick Wardle, director of research at Synack, explains whether … Continue reading Patrick Wardle on macOS Gatekeeper, Crypto Enhancements