Collaborate Disseminate
Although the data was legitimately scraped by legally operating firms, the security and privacy implications are numerous. Continue reading Data-Enriched Profiles on 1.2B People Exposed in Gigantic Leak
Successful exploitation allows attackers to steal potentially sensitive information, change appearance of the web page, and perform phishing, spoofing and drive-by-download attacks. Continue reading Microsoft Outlook for Android Bug Opens Door to XSS
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future. Continue reading Gnip Banking Trojan Shows Ongoing, Aggressive Development
The Coalition Against Stalkerware launched this week, with the aim of offering a centralized location for helping victims of stalkerware, as well as defining what stalkerware is in the first place. Continue reading Security Firms, Nonprofits Team to Fight Stalkerware
The majority give outside partners, contractors and suppliers administrative access — without strong security policies in place. Continue reading ThreatList: Admin Rights for Third Parties is the Norm
The infection apparently made its way in through third-party systems. Continue reading 400 Vet Locations Nipped by Ryuk Ransomware
The malware has backdoor functionality and the ability to steal payment cards and credentials. Continue reading McDonalds-Themed Facebook Ads Serve Up Banking Trojans
Thousands of accounts showed up on hacking forums — and customers say Disney has been no help. Continue reading The Unhappiest Subscribers on Earth? Disney+ Accounts Hacked & Hijacked
Using a real Office 365 account at a legitimate company to send out lures helps phishers evade email defenses. Continue reading Office 365 Admins Targeted in Ongoing Phishing Scam
The copycat sites are using valid certificates to be more convincing. Continue reading Holiday Shoppers Beware: 100K Malicious Sites Found Posing as Well-Known Retailers