Collaborate Disseminate
Developers from hundreds of companies have included access tokens for their Slack accounts in public projects on GitHub, putting their teams’ internal chats and other data at risk.Slack has become one of the most popular collaboration and internal c… Continue reading Developers leak Slack access tokens on GitHub, putting sensitive business data at risk
Developers from hundreds of companies have included access tokens for their Slack accounts in public projects on GitHub, putting their teams’ internal chats and other data at risk.
Slack has become one of the most popular collaboration and internal… Continue reading Developers leak Slack access tokens on GitHub, putting sensitive business data at risk
An Estonian man has been sentenced to seven years and three months in prison in the U.S. for his role in a cybercriminal operation that infected over 4 million computers with DNS hijacking malware.Vladimir Tsastsin, 35, from Tartu, Estonia, was one … Continue reading Estonian man gets over 7 years in prison for role in global DNS hijacking botnet
Extorting money from companies under the threat of launching distributed denial-of-service attacks (DDoS) against their online properties has proven lucrative for cybercriminals. So much so that one group has managed to earn over $100,000 without a… Continue reading Empty DDoS threats earn extortion group over $100,000
Attackers are using two known exploits to silently install ransomware on older Android devices when their owners browse to websites that load malicious advertisements.Web-based attacks that exploit vulnerabilities in browsers or their plug-ins to in… Continue reading Malvertising attack silently infects old Android devices with ransomware
The hackers who stole US $81 million from Bangladesh’s central bank likely used custom malware designed to interfere with the SWIFT transaction software used by many financial institutions.The attackers attempted to transfer $951 million out of Bang… Continue reading Bangladesh Bank attackers used custom malware that hijacked SWIFT software
Cisco Systems has released patches to fix serious denial-of-service flaws in its Wireless LAN Controller (WLC) software, Cisco Adaptive Security Appliance (ASA) software and the Secure Real-Time Transport Protocol (SRTP) library that’s used in many … Continue reading Cisco fixes serious denial-of-service flaws in wireless LAN controllers, other products
A security researcher has created a free security tool that can detect attempts by ransomware programs to encrypt files on users’ Macs and then block them before they do a lot of damage.Called RansomWhere? the application is the creation of Patrick … Continue reading This tool can block ransomware on Mac OS X, for now
Security researchers have found a new memory-scraping malware program that steals payment card data from point-of-sale (PoS) terminals and sends it back to attackers using the Domain Name System (DNS).Dubbed Multigrain, the threat is part of a famil… Continue reading New point-of-sale malware Multigrain steals card data over DNS
Security researchers have found a new memory-scraping malware program that steals payment card data from point-of-sale (PoS) terminals and sends it back to attackers using the Domain Name System (DNS).Dubbed Multigrain, the threat is part of a famil… Continue reading New point-of-sale malware Multigrain steals card data over DNS