Collaborate Disseminate
A survey from GSMA and Trend Micro shows a concerning lack of security capabilities for private 5G networks (think factories, smart cities, industrial IoT, utilities and more). Continue reading 5G Security Vulnerabilities Fluster Mobile Operators
One of the Carbanak cybergang’s highest-level hackers is destined to serve seven years while making $2.5 million in restitution payments. Continue reading FIN7 ‘Pen Tester’ Headed to Jail Amid $1B in Payment-Card Losses
In-the-wild XSS attacks have commenced against the security appliance (CVE-2020-3580), as researchers publish exploit code on Twitter. Continue reading Cisco ASA Bug Now Actively Exploited as PoC Drops
Beware: The swindle uses legitimately purchased YouTube ads, real liquidity, legitimate DEX Uniswap, and the real wallet extension MetaMask to create an entirely convincing fake coin gambit. Continue reading Musk-Themed ‘$SpaceX’ Cryptoscam Invades YouTube Advertising
Four separate security bugs would give attackers almost complete control and persistence over targeted devices, thanks to a faulty update mechanism. Continue reading 30M Dell Devices at Risk for Remote BIOS Attacks, RCE
Remote, unauthenticated cyberattackers can infiltrate and take over the Cortex XSOAR platform, which anchors unified threat intelligence and incident responses. Continue reading Critical Palo Alto Cyber-Defense Bug Allows Remote ‘War Room’ Access
The LV ransomware operators likely used a hex editor to repurpose a REvil binary almost wholesale, for their own nefarious purposes. Continue reading REvil Ransomware Code Ripped Off by Rivals
A pair of zero-days affecting Pling-based marketplaces could allow for some ugly attacks on unsuspecting Linux enthusiasts — with no patches in sight. Continue reading Unpatched Linux Marketplace Bugs Allow Wormable Attacks, Drive-By RCE
These code bombs lurk in the PyPI package repository, waiting to be inadvertently baked into software developers’ applications. Continue reading Cryptominers Slither into Python Projects in Supply-Chain Campaign
One in five of the most-popular apps for kids under 13 on Google Play don’t comply with COPPA regulations on how children’s information is collected and used. Continue reading Kids’ Apps on Google Play Rife with Privacy Violations