Collaborate Disseminate
Researchers have disclosed two zero-day vulnerabilities affecting Foxit’s PDF Reader after the vendor revealed it has no plans to fix the security flaws.
David Bisson reports.
Continue reading Two zero-day vulnerabilities disclosed after Foxit refuses to patch PDF Reader
New Jersey law enforcement has arrested a couple for abusing a vulnerability affecting Lowe’s website in order to steal merchandise. On 15 August, Ocean County Prosecutor Joseph D. Coronato and Brick Township Police Chief James Riccio announced the arrests of Romela Velazquez, 24, and Kimy Velazquez, 40. Together, the couple allegedly orchestrated a scheme by […]… Read More
The post Couple Arrested for Exploiting Lowe’s Website Flaw to Steal Merchandise appeared first on The State of Security.
Continue reading Couple Arrested for Exploiting Lowe’s Website Flaw to Steal Merchandise
Bad actors are constantly looking for ways to target unsuspecting users with malware or other digital threats. To increase the likelihood of a successful infection, these nefarious individuals incorporate holidays, current events and significant dates into their attack campaigns. It’s, therefore, no surprise that digital miscreants are capitalizing on the end of summer by pushing […]… Read More
The post Malicious ‘Back to School’-Themed Apps Target Young Users Who Don’t Know Better appeared first on The State of Security.
Continue reading Malicious ‘Back to School’-Themed Apps Target Young Users Who Don’t Know Better
Hackers could use a sonar-based attack to infer information about what a target is doing, including when they might be engaging in sexual activity.
David Bisson reports.
Continue reading Sonar-based attack could help hackers infer when you’re having sex
Ransomware has infected self-service kiosks at some service centers operated by the multinational conglomerate LG Electronics. On 14 August, the electronic giant discovered that its kiosks were suffering from access problems. It subsequently took the kiosks offline and reported the issue to the Korea Internet & Security Agency (KISA), a web security subsidiary organization which […]… Read More
The post Ransomware Strikes Kiosks at South Korean LG Service Centers appeared first on The State of Security.
Continue reading Ransomware Strikes Kiosks at South Korean LG Service Centers
The Internet is a potentially dangerous place for users. This is especially so for children. Oftentimes, these younger users don’t yet understand that some people harbor bad intentions. They are therefore prime targets of digital predators who would seek to prey upon them online. Information security writer Kimberly Crawley explains that there are some truly […]… Read More
The post Hacking for Innocent Lives: Using OSINT against Online Child Predators appeared first on The State of Security.
Continue reading Hacking for Innocent Lives: Using OSINT against Online Child Predators
“You could disable the air bags, the anti-lock brakes, or the door locks, and steal the car,” says researcher.
David Bisson reports.
Continue reading Vendor-neutral smart car bug has ‘dangerous’ and ‘even fatal’ consequences
Locky ransomware is now appending the “.lukitus” extension to victims’ files after it’s completed its encryption routine. On 16 August, Fortinet junior anti-virus analyst Rommel Joven came across one of Locky’s newest variants. New locky SPAM campaign uses .lukitus ext, URI /imageload.cgi4baa57a08c90b78d16c634c22385a748#locky #lukitus #kadenacc: @malwrhunterteam pic.twitter.com/5SRk74DeEz — Rommel Joven (@rommeljoven17) August 16, 2017 The ransomware […]… Read More
The post Locky Ransomware Now Appending .Lukitus to Encrypted Files appeared first on The State of Security.
Continue reading Locky Ransomware Now Appending .Lukitus to Encrypted Files
A supply chain attack is believed to have been responsible for surreptitiously inserting a backdoor into widely used server management software.
David Bisson reports.
Continue reading Supply chain attack inserted backdoor into popular server management software
Bad actors have targeted the Scottish Parliament with a brute force attack designed to crack weak passwords used by MSPs and staff. In a message sent to MSPs and staff members with parliamentary email addresses, chief executive Sir Paul Grice compared the attack to an assault that targeted the British Parliament in June. It’s unclear […]… Read More
The post Scottish Parliament Targeted by Brute Force Attackers appeared first on The State of Security.
Continue reading Scottish Parliament Targeted by Brute Force Attackers