Collaborate Disseminate
The vulnerability allows attackers to bypass Content Security Policy (CSP) protections and steal data from website visitors. Continue reading Google Chrome Browser Bug Exposes Billions of Users to Data Theft
Attacks were way up year-over-year in the second quarter as people continue to work from home. Continue reading DDoS Attacks Cresting Amid Pandemic
Legacy applications don’t support modern authentication — and cybercriminals know this. Continue reading Attackers Horn in on MFA Bypass Options for Account Takeovers
Fully opening the door to allow people to contribute to – and notably, tinker with – the code for the data-breach information service will be an entirely next-level effort, according to founder Troy Hunt. Continue reading Have I Been Pwned Set to Go Open-Source
The consumer-electronics giant had suffered partial outages across its U.S. website and internal systems reportedly, thanks to the Maze gang. Continue reading UPDATE: Canon Ransomware Attack Results in Leaked Data, Report
Attackers can listen in on internet traffic for high-value targets a continent away, like shipping fleets and oil installations, using some basic home-television gear. Continue reading Black Hat 2020: Satellite Comms Globally Open to $300 Eavesdropping Hack
The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same Linux rootkit and backdoor combo. Continue reading Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs
Voting Village security celeb Matt Blaze delves into the logistics of scaling up mail-in voting ahead of November’s election. Continue reading Black Hat 2020: Scaling Mail-In Voting Spawns Broad Challenges
An attacker can hide amidst legitimate traffic in the application’s update function. Continue reading Microsoft Teams Patch Bypass Allows RCE
The ransomware has surged since moving to a RaaS model. Continue reading NetWalker Ransomware Rakes in $29M Since March