Collaborate Disseminate
It’s hard enough to get people to use multi-factor authentication (MFA)—you know, something you know, you have and you are. Most websites, email accounts and other devices are secured (if at all) with a simple user ID (or email address) and password—a… Continue reading Hang up the Phone: MFA’s Insecure Reliance on SMS→
With the election just a week away, cybercriminals are ramping up mobile attacks on citizens under the guise of campaign communications. Continue reading Election Security: How Mobile Devices Are Shaping the Way We Work, Play and Vote→
A new Emotet campaign is spread via SMS messages pretending to be from banks and may have ties to the TrickBot trojan. Continue reading SMS Attack Spreads Emotet, Steals Bank Credentials→
Researchers discovered an unprotected TrueDialog database hosted by Microsoft Azure with diverse and business-related data from tens of millions of users. Continue reading Insecure Database Exposes Millions of Private SMS Messages→
The spyware poses as a legitimate application, spreading via SMS messages to victims’ contact lists. Continue reading FunkyBot Malware Intercepts Android Texts, 2FA Codes→
Apps most often blacklisted by enterprises provide messenger, VoIP and navigation services. Continue reading ThreatList: Popular Apps Get Enterprise Blacklisted→
Google discovered a spyware app that uses nearly a dozen old vulnerabilities to root devices and steal sensitive data from social media applications. Continue reading Google Detects and Boots Tizi Spyware Off Google Play→
The market for automated credential stuffing tools is growing fast, because of a record number of breaches. Continue reading Password Breaches Fueling Booming Credential Stuffing Business→