Collaborate Disseminate
From stalkerware to Amazon Ring doorbell outrage, Threatpost editors break down the top news stories of the week. Continue reading News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws
Amazon’s Ring data collection policies are in the spotlight. Continue reading Senators Demand Amazon Disclose Ring Privacy Policies
A newly-discovered peer-to-peer (P2P) botnet has been found targeting a remote code execution vulnerability in Linux Webmin servers. Continue reading Linux Webmin Servers Under Attack by Roboto P2P Botnet
In scope RCE Mozilla bug bounty payouts have also tripled to reach $15,000. Continue reading Mozilla Bug Bounty Program Doubles Payouts, Adds Firefox Monitor
Further details of the flaw, which has recently been patched by Microsoft, were disclosed Tuesday by researchers. Continue reading High-Severity Windows UAC Flaw Enables Privilege Escalation
Google has disclosed a now-fixed issue that enabled third-party apps to access a disturbing set of permissions for its Camera App built into Android phones. Continue reading Google Discloses Android Camera Hijack Hack
Obfuscated Magecart script was discovered on two Macys.com webpages, scooping up holiday shoppers’ payment card information. Continue reading Macy’s Suffers Data Breach by Magecart Cybercriminals
The flaw can be trivially exploited. Continue reading WhatsApp Remote Code Execution Triggered by Videos
The web skimmer has been spotted on at least 17 popular eCommerce websites, a new Visa alert warns. Continue reading Pipka Card Skimmer Removes Itself After Infecting eCommerce Sites
Threatpost talks to Anthony di Bello with OpenText, at ENFUSE 2019, about the successes and failures of security regulations, and how companies are changing as they struggle to keep up with compliancy issues. Continue reading ‘Wildly Different’ Privacy Regulations Causing Compliancy Chaos