Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content
Adobe issued patches for seven critical arbitrary-code-execution flaws plaguing Windows and MacOS users. Continue reading Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content
Author Archives: Lindsey O'Donnell
Europol Reveals Dismantling of ‘Largest’ Underground Marketplace
Europol announced a wide-ranging investigation that led to the arrest of the alleged DarkMarket operator and the seizure of the marketplace’s infrastructure, including more than 20 servers. Continue reading Europol Reveals Dismantling of ‘Largest’ Underground Marketplace
Post-Backlash, WhatsApp Spells Out Privacy Policy Updates
WhatsApp aimed to clear the air about its updated privacy policy after reports of mandatory data sharing with Facebook drove users to Signal and Telegram in troves. Continue reading Post-Backlash, WhatsApp Spells Out Privacy Policy Updates
Researcher Builds Parler Archive Amid Amazon Suspension
A researcher scraped and archived public Parler posts before the conservative social networking service was taken down by Amazon, Apple and Google. Continue reading Researcher Builds Parler Archive Amid Amazon Suspension
A Look Ahead at 2021: SolarWinds Fallout and Shifting CISO Budgets
Threatpost editors discuss the SolarWinds hack, healthcare ransomware attacks and other threats that will plague enterprises in 2021. Continue reading A Look Ahead at 2021: SolarWinds Fallout and Shifting CISO Budgets
SolarWinds Hires Chris Krebs, Alex Stamos in Wake of Hack
Former CISA director Chris Krebs and former Facebook security exec Alex Stamos have teamed up to create a new consulting group – and have been hired by SolarWinds. Continue reading SolarWinds Hires Chris Krebs, Alex Stamos in Wake of Hack
Nvidia Warns Windows Gamers of High-Severity Graphics Driver Flaws
In all, Nvidia patched flaws tied to 16 CVEs across its graphics drivers and vGPU software, in its first security update of 2021. Continue reading Nvidia Warns Windows Gamers of High-Severity Graphics Driver Flaws
New Year, New Ransomware: Babuk Locker Targets Large Corporations
Despite being a mostly run-of-the-mill ransomware strain, Babuk Locker’s encryption mechanisms and abuse of Windows Restart Manager sets it apart. Continue reading New Year, New Ransomware: Babuk Locker Targets Large Corporations
NSA Urges SysAdmins to Replace Obsolete TLS Protocols
The NSA released new guidance providing system administrators with the tools to update outdated TLS protocols. Continue reading NSA Urges SysAdmins to Replace Obsolete TLS Protocols
Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw
More than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover. Continue reading Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw