Collaborate Disseminate
Brazil’s biggest cosmetics company Natura accidentally left hundreds of gigabytes of its customers’ personal and payment-related information publicly accessible online that could have been accessed by anyone without authentication.
SafetyDetective res… Continue reading Brazil’s Biggest Cosmetic Brand Natura Exposes Personal Details of Its Users
A cybersecurity researcher at ESET today published an analysis of a new piece of malware, a sample of which they spotted on the Virustotal malware scanning engine and believe the hacker behind it is likely interested in some high-value computers protec… Continue reading Researcher Spots New Malware Claimed to be ‘Tailored for Air‑Gapped Networks’
If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a critical vulnerability.
Maintainers of the vBulletin project recently announced an important… Continue reading An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now
A cybersecurity researcher today uncovers a set of 7 new unpatchable hardware vulnerabilities that affect all desktops and laptops sold in the past 9 years with Thunderbolt, or Thunderbolt-compatible USB-C ports.
Collectively dubbed ‘ThunderSpy,’ the … Continue reading 7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years
In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore.
Dubbed ‘PerSwaysion,’ the ne… Continue reading Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies
It’s not ‘Patch Tuesday,’ but software giant Adobe today released emergency updates for three of its widely used products that patch dozens of newly discovered critical vulnerabilities.
The list of affected software includes Adobe Illustrator, Adobe B… Continue reading Critical Security Patches Released for Magento, Adobe Illustrator and Bridge
The Duality of Attackers – Or Why Bad Guys are a Good Thing™
It’s no secret I’ve been on a spiritual journey the last few years. I tell most people it’s fundamentally changed my life and how I look at the world. I’m also a… Continue reading The Duality of Attackers – Or Why Bad Guys are a Good Thing™
Watch out Apple users!
The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are exploiting in the wild, at least, from the last two years to spy on high-profile victims.
… Continue reading Zero-Day Warning: It’s Possible to Hack iPhones Just by Sending Emails
After finishing the wave of research that covered pentesting, monitoring use cases, SOAR and TI, I’m excited to start research for a net new document covering an exciting topic rarely covered in Gartner research: Open source tools! The intent is … Continue reading From my Gartner Blog – New Research: Open Source Tools!
The United States agencies today released a joint advisory warning the world about the ‘significant cyber threat’ posed by North Korean state-sponsored hackers to the global banking and financial institutions.
Besides a summary of recent cyberattacks … Continue reading U.S. Offers Rewards up to $5 Million for Information on North Korean Hackers