Collaborate Disseminate
Campaign emails company insiders and initially offers 1 million in Bitcoin if they install DemonWare on an organization’s network. Continue reading Nigerian Threat Actors Solicit Employees to Deploy Ransomware for Cut of Profits
Yaron Kassner, CTO at Silverfort, discusses authentication-bypass bugs in Cisco ASA, F5 Big-IP, IBM QRadar and Palo Alto Networks PAN-OS. Continue reading Kerberos Authentication Spoofing: Don’t Bypass the Spec
Valve plugs an API bug found in its Steam platform that that abused the Smart2Pay system to add unlimited funds to gamer digital wallets. Continue reading Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets
Data theft, insider threats and imposters accessing sensitive customer data have apparently gotten so bad inside Amazon, the company is considering rolling out keyboard-stroke monitoring for its customer-service reps. A confidential memo from inside Am… Continue reading Amazon’s Plan to Track Worker Keystrokes: A Sign of Controls to Come?
Illicit underground marketplace relaunches years after takedown. Continue reading Rogue Marketplace AlphaBay Reboots
Threatpost interviews Wiz CTO about a vulnerability recently patched by Amazon Route53’s DNS service and Google Cloud DNS. Continue reading Black Hat: Novel DNS Hack Spills Confidential Corp Data
In one of the largest cryptocurrency hacks to date, cyberattackers reportedly stole millions from the decentralized finance (DeFi) platform Poly Network. Continue reading Crypto Hack Earned Crooks $600 Million
John Deere security bugs could allow cyberattackers to damage crops, surrounding property or even people; impact harvests; or destroy farmland for years. Continue reading Connected Farms Easy Pickings for Global Food Supply-Chain Hack
A dump of hundreds of thousands of active accounts is aimed at promoting AllWorld.Cards, a recently launched cybercriminal site for selling payment credentials online. Continue reading 1M Stolen Credit Cards Hit Dark Web for Free
Researchers have found an entirely new attack vector for eavesdropping on Zoom and other virtual meetings. Continue reading ‘Glowworm’ Attack Turns Power Light Flickers into Audio