Collaborate Disseminate
A platform that allows online applications for copies of birth certificates did not store its data properly. Continue reading Birth Certificate Data Laid Bare on the Web in Multiple States
A phishing attack is masquerading as messages from the game’s developers. Continue reading Elder Scrolls Online Targeted by Cybercrooks Hunting In-Game Loot
Most counties are not protected from impersonation-based spearphishing attacks. Continue reading Email Voted a Weak Link for Election Security, with DMARC Lagging
In a coffee-shop scenario, attackers can hijack “secure” VPN sessions of those working remotely, injecting data into their TCP streams. Continue reading Linux Bug Opens Most VPNs to Hijacking
Names, addresses, phone numbers, call and text message records and account PINs were all caught up in a cloud misconfiguration. Continue reading AT&T, Verizon Subscribers Exposed as Mobile Bills Turn Up on the Open Web
The authentication bypass (CVE-2019-19521) is remotely exploitable. Continue reading OpenBSD Hit with Authentication, LPE Bugs
Larger SMBs are more likely to feel targeted by APTs. Continue reading ThreatList: 1 in 9 SMBs Believe Nation-State Actors Are Targeting Them
Likely the work of APT34, ZeroCleare is bent on destruction and disruption, rather than information-stealing. Continue reading Iran Targets Mideast Oil with ZeroCleare Wiper Malware
A successful attack could wreak havoc, given the potential for biometric forgery, and a lack of options in the event one’s biometric profile is stolen. Continue reading ThreatList: A Third of Biometric Systems Targeted by Malware in Q3
More than 90 percent of Android apps running on the latest OS encrypt their traffic by default. Continue reading Android Ups the Mobile Security Ante with Default TLS Encryption