Collaborate Disseminate
Mozilla last week fired off an important memo to all Firefox extension developers telling them to turn on authentication (2FA) on their addons.mozilla.org (AMO) accounts. Continue reading Mozilla mandates 2FA security for Firefox developers
44 million Microsoft Azure AD and Microsoft Services accounts were vulnerable to account hijacking due to use of compromised passwords, Microsoft has shared. The discovery was made in the first quarter of 2019, when the company’s identity threat … Continue reading Compromised passwords used on 44 million Microsoft accounts
Debug, another Chuckling Squadder, told Motherboard that the kid was weird, “Swatting celebrities for a follow back.”
Continue reading Police arrest alleged Chuckling Squad member who hijacked @Jack Dorsey
Researchers have brought to light a longstanding phishing campaign aimed at the UN and its various networks, and a variety of humanitarian organizations, NGOs, universities and think tanks. Some of these phishing pages are still up and are still not fl… Continue reading Phishers have been targeting UN, UNICEF, Red Cross officials for months – and still do
Czech security software maker Avast has suffered another malicious intrusion into their networks, but the attackers didn’t accomplish what they apparently wanted: compromise releases of the popular CCleaner utility. What happened? The discovery o… Continue reading Avast breached by hackers who wanted to compromise CCleaner again
100K or so creators in the YouTube car community were targeted by a phishing campaign that captured 2FA codes. Continue reading YouTube ‘influencers’ get 2FA tokens phished
Two problems, Twitter says: vulnerabilities that mobile carriers need to fix & its reliance on linked numbers for 2FA. Continue reading Twitter turns off SMS texting after @Jack hijacking
Most attacks are from botnets. The goals: spreading spam, stealing data, spreading propaganda, and social-engineering consumers for profit. Continue reading Report: 53% of social media logins are fraudulent
Emails coming from legitimate, compromised accounts are difficult to spot, both for existing email protection systems and the recipients themselves. Lateral phishing tactics Researchers from Barracuda, UC Berkeley and UC San Diego have studied 180 late… Continue reading Researchers reveal the latest lateral phishing tactics
As most technologies, bots can be used for good and bad purposes, and the information security industry is doing its best to minimize the adverse effects of the latter activities. Bots everywhere “At its core, automation enables a bad actor to sc… Continue reading Business security in the age of malicious bots