Collaborate Disseminate
Threatpost breaks down the scariest stories of the week ended Oct. 30 haunting the security industry — including bugs that just won’t die. Continue reading Halloween News Wrap: The Election, Hospital Deaths and Other Scary Cyberattack Stories
Attackers are compromising email accounts from popular universities, including Purdue and Oxford, to launch attacks that get around DMARC and SPF. Continue reading University Email Hijacking Attacks Push Phishing, Malware
The flaw in the console component of the WebLogic Server, CVE-2020-14882, is under active attack, researchers warn. Continue reading Oracle WebLogic Server RCE Flaw Under Active Attack
While Microsoft patched the bug known as CVE-2020-0796 back in March, more than one 100,000 Windows systems are still vulnerable. Continue reading Microsoft’s SMBGhost Flaw Still Haunts 108K Windows Systems
Bugcrowd Founder Casey Ellis talks about COVID-19’s impact on bug bounty hunters, bug bounty program adoption and more. Continue reading How the Pandemic is Reshaping the Bug-Bounty Landscape
The Phosphorous APT has launched successful attacks against world leaders who are attending the Munich Security Conference and the Think 20 (T20) Summit in Saudi Arabia, Microsoft warns. Continue reading Iran-linked APT Targets T20 Summit, Munich Security Conference Attendees
Amazon notified customers and law enforcement of the insider-threat incident this week. Continue reading Amazon Fires Employee Who Leaked Customer Names, Emails
Beyond admins, researchers say that 97 percent of all total Microsoft 365 users do not use multi-factor authentication. Continue reading Majority of Microsoft 365 Admins Don’t Enable MFA
Veracode’s Chris Eng discusses the cyber threats facing shoppers who are going online due to the pandemic and the imminent holiday season. Continue reading Holiday Shopping Craze, COVID-19 Spur Retail Security Storm
Cybercriminals have already reportedly posted the details of 300 Vastaamo patients – and are threatening to release the data of others unless a ransom is paid. Continue reading Vastaamo Breach: Hackers Blackmailing Psychotherapy Patients