Malwarebytes

SEPTEMBER 14, 2022

We have tracked and observed a malvertising campaign on the Microsoft Edge News Feed used to redirect victims to tech support scam pages. In this blog post, we raise awareness and expose this scam operation that has been going on for at least two months. The redirection flow can be summarized in the diagram below: Technical details.

Scams 83

Scams Advertising Software 83

Security Affairs

NOVEMBER 12, 2019

New problems for Facebook, it seems that the social networking giant is secretly using the camera while iPhone users are scrolling their feed. The iPhone users Joshua Maddux speculates that Facebook might be actively using your camera without your knowledge while you’re scrolling your feed. Is this another privacy issue for Facebook?

Advertising 111

Advertising Engineering Hacking Mobile 111

Schneier on Security

DECEMBER 1, 2017

Beaked whales, living off the coasts of Ireland, feed on squid. Read my blog posting guidelines here. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered.

113

113

Schneier on Security

APRIL 16, 2021

My Twitter feed just mirrors my blog. (If Security Boulevard recently listed the “Top-21 Cybersecurity Experts You Must Follow on Twitter in 2021.” ” I came in at #7. I thought that was pretty good, especially since I never tweet. If you are one of the 134K people who read me from Twitter, “hi.”).

Cybersecurity 275

Cybersecurity 275

Schneier on Security

MARCH 23, 2018

An interesting hunting strategy : Off of northern Spain, giant squid often feed on schools of fish called blue whiting. Read my blog posting guidelines here. The schools swim 400 meters or less below the surface, while the squid prefer to hang out around a mile deep. It's called "food piracy.".

110

110

Adam Shostack

AUGUST 25, 2021

If you’re seeing this in your feed, have you also seen a bad Star Wars joke? Because I’ve got one on the new blog. Please add [link] , or replace the feed you’re reading with it. This is the adam.shostack.org version of this post; the new post is just at shostack.org).

100

100

Quick Heal Antivirus

FEBRUARY 13, 2024

Ever notice how your day starts with a quick scroll through your social media feeds or a swift. The post Upgrade your #DigitalSafety: Bank and Browse Safely with Quick Heal Antivirus appeared first on Quick Heal Blog.

Antivirus 52

Antivirus Banking Media Scams 52

Adam Shostack

SEPTEMBER 2, 2021

Soon, soon we’ll turn off the lights, migrate these posts, and have everything at our shiny new blog at [link]. And if you’re seeing this in an RSS feed, please update to [link].

100

100

Heimadal Security

JULY 28, 2023

Open-source threat intelligence feeds shed very little insight on the preferred vector […] The post Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow appeared first on Heimdal Security Blog.

Ransomware 71

Ransomware Encryption Malware 71

Troy Hunt

FEBRUARY 9, 2023

We always had both as a downloadable corpus but as of just over a year ago with the introduction of the FBI data feed , we stopped maintaining downloadable behemoths of data.

Passwords 287

Passwords 287

Graham Cluley

MARCH 11, 2021

A hacking group has gained access to the feeds of 150,000 surveillance cameras used inside businesses, schools, police departments, hospitals, and well-known companies. Read more in my article on the Bitdefender BOX blog.

Hacking 92

Hacking Surveillance Data breaches 92

Anton on Security

APRIL 28, 2022

You can review my ideas on the topic in this blog series “Anton and The Great XDR Debate, Part 1” “Anton and The Great XDR Debate, Part 2” “Anton and The Great XDR Debate, Part 3.” A: Please review this blog for a discussion of deploying multiple SIEM tools. see blog from 2016 where we first spotted it). see this blog.

Threat Detection 189

Threat Detection Technology VPN Architecture 189

Security Boulevard

JUNE 13, 2023

The offering of free threat intelligence tools includes everything from feeds to blogs to open source intelligence platforms. When knowing is more than half the battle, you need reliable tools. With a limited budget, finding inexpensive – or better yet free – technologies is critical.

Cyber threats 57

Cyber threats Technology Risk 57

Heimadal Security

OCTOBER 11, 2021

Cox Media Group (CMG), an American media conglomerate, reported that it was attacked by a ransomware assault in June 2021, which knocked off live TV and radio broadcast feeds. The post Cox Media Group Ransomware Attack Confirmed appeared first on Heimdal Security Blog. On June 3, 2021, CMG experienced […].

Media 99

Media Ransomware Data breaches Cybersecurity 99

Heimadal Security

FEBRUARY 2, 2023

Have you ever seen a pop-up asking for permission to post on your social media feed, access your smart devices, or share files across different platforms?

Media 75

Media Authentication Cybersecurity 75

Security Boulevard

JUNE 16, 2023

Let’s talk about the darker side of the ChatGPT security story: a recent DarkReading report found that 4% of workers are leaking protected corporate information into AI tools by feeding schematics, statistics, instructions, and other intellectual property into large language learning models (LLMs).

104

104

Security Affairs

JANUARY 9, 2023

The cybersecurity blog inSicurezzaDigitale has launched the Italian Dashboard Ransomware Monitor to analyze the principal RaaSs’ activities. “The strength of this OSINT Italian project , quite unique in its kind, is the chance of following it with a standard, worldwide and easy RSS feed.”

Ransomware 95

Ransomware Data collection Hacking Cybersecurity 95

Troy Hunt

DECEMBER 8, 2019

References It's not just Let's Encrypt issuing certs to phishing sites (and that's fine, so let's stop throwing them under the bus for it) Plain text password storage - even generated ones - is wrong on many levels (the UX alone just doesn't make any sense) Big thanks to Whois XML API for sponsoring my blog this week!

Data breaches 137

Data breaches Encryption Phishing Passwords 137

eSecurity Planet

MARCH 11, 2024

JetBrains released a detailed blog post explaining the specific timeline of discovering the vulnerabilities, the conflict with Rapid7, and JetBrains’ stance on releasing vulnerability information. We’ve seen multiple over the last couple of months, but these are new and not to be confused with CVEs from 2023.

Authentication 96

Authentication Software VPN Security Defenses 96

Security Affairs

MAY 2, 2023

A remote attacker can trigger the flaw to obtain administrative privileges and eventually gain access to camera video feeds. The CVE-2018-9995 flaw is due to an error when handling a maliciously crafted HTTP cookie.

Authentication 98

Authentication Retail Surveillance Education 98

Troy Hunt

FEBRUARY 23, 2019

There's also a very stead feed of breaches making their way into HIBP after appearing for sale on dark web marketplaces so I give a bit of an update on those as well. All that and more this week in a slightly shorter form than usual, enjoy!

Password Management 135

Password Management Passwords Risk 135

Security Boulevard

MARCH 12, 2021

Verkada was the target of a successful cyberattack that allowed the perpetrators unfettered access to the live video feeds of 150,000 surveillance cameras. Network monitoring technology could have alerted them to the attack - and helped them contain and mitigate its impact.

IoT 98

IoT Hacking Surveillance Technology 98

Troy Hunt

NOVEMBER 2, 2020

I've had this blog post in draft for quite some time now, adding little bits to it as the opportunity presented itself. Ricky Gervais does an amazing job of explaining what I'm about to delve into so do yourself a favour and spend a minute watching this first: And therein lies the inspiration for the title of this blog.

Data breaches 349

Data breaches InfoSec Media Technology 349

Kali Linux

DECEMBER 20, 2020

And RSS feeds have not been as common as they once were. The contents of the newsletter will mirror our blog posts (we are not trying to market or sell anything to you). It is easy to be drowned out in social networks with everything else going on. How can you keep up-to-date with what’s going on with Kali Linux? Take your pick!

InfoSec 52

InfoSec Marketing 52

Security Boulevard

NOVEMBER 18, 2021

If you’ve been on LinkedIn recently, you’ve probably seen your feed littered with polling questions.

104

104

Security Affairs

DECEMBER 14, 2022

All too often, this gives them a false sense of security: when in fact, threat actors can not only access and watch your camera feed but exploit the unsecured device to hack into your network. Sometimes, they don’t even mention it in the initial setup process, with the recommendation being on a blog post instead.

Surveillance 135

Surveillance Manufacturing Passwords Internet 135

SecureBlitz

MARCH 4, 2024

pic.twitter.com/KgDnTMvgKt — SecureBlitz Cybersecurity Blog (@secureblitz) April 11, […] The post Cybersecurity Explained: Protecting Yourself in the Digital Age appeared first on SecureBlitz Cybersecurity.

Cybersecurity 102

Cybersecurity Internet Internet Software 102

Security Affairs

APRIL 30, 2022

Retrieve the target’s common name from the Certificate Transparency feed. The two flaws are a PostgreSQL privilege escalation bug and a cross-account authentication bypass using a forged certificate issue. Below is the step by step attack procedure: Choose a target?PostgreSQL PostgreSQL Flexible Server. To nominate, please visit:?

Authentication 97

Authentication Accountability Hacking Cybersecurity 97

McAfee

OCTOBER 3, 2021

While we will no longer publish our work under McAfee Labs, you can still find and follow our research on our new McAfee Enterprise ATR Twitter feed: @McAfee_ATR. The post McAfee Enterprise Advanced Threat Research Report: Ransomware’s Increasing Prevalence appeared first on McAfee Blogs.

Threat Reports 98

Threat Reports Ransomware Healthcare Government 98

Security Affairs

MAY 17, 2019

” reads a blog post published by the expert. The expert discovered that an unauthenticated attacker can change the location of downloaded files using RSS feeds. can subscribe to RSS feeds to populate a channel with site updates which can contain links. . . “Crafting a link like “ slack : //settings/ ?

Advertising 84

Advertising Authentication Hacking Malware 84

The Last Watchdog

NOVEMBER 7, 2023

Rogers Reported attacks help build a threat intelligence feed that organizations and law enforcement agencies monitor worldwide. Reporting these incidents, regardless of size, is crucial in proactively preventing similar cyberattacks for individuals and organizations.

Cyber threats 163

Cyber threats Cybercrime Internet Internet 163

The Last Watchdog

JULY 5, 2022

And this is where strategic intelligence feeds into the cyber security puzzle. The technical side of protecting a company from cyberattack is important, but taking a step back and considering the who and the why can add shape to one’s security strategy.

Cyber Risk 256

Cyber Risk Risk Marketing Data privacy 256

SC Magazine

MAY 28, 2021

Troy Hunt, founder of Have I Been Pwned, reached out to coders on his blog to help design intake software for the data via the Have I Been Pwned GitHub. .” The FBI will provide breached SHA-1 and NTLM-hashed passwords to Have I Been Pwned when they are discovered during investigations.

Passwords 113

Passwords Password Management Small Business Media 113

Security Boulevard

APRIL 18, 2022

Unlike automated threat feeds or keyword alerts, finished intelligence is actionable […]. Cornerstone of Effective Decision-Making Producing timely, relevant, and actionable intelligence at scale is integral to the success of a threat intelligence and risk remediation program.

Risk 52

Risk 52

Krebs on Security

MARCH 16, 2020

Shadowserver provides free daily live feeds of information about systems that are either infected with bot malware or are in danger of being infected to more than 4,600 ISPs and to 107 national computer emergency response teams (CERTs) in 136 countries. Image: Ghostbusters. “These reports notify our constituents ? .

Malware 245

Malware Internet Internet Government 245

McAfee

JUNE 14, 2021

Collect — gather threat data from multiple feeds or reporting services. At this stage, organizations advance beyond vendor-provided intelligence and adapt their protection by adding indicators from third-party threat feeds or from other organizational SOC processes such as malware analysis. MVISION Insights Dashboard.

Security Defenses 56

Security Defenses Media Government Ransomware 56

Krebs on Security

SEPTEMBER 28, 2018

In a short blog post published this afternoon, Facebook said hackers have been exploiting a vulnerability in Facebook’s site code that impacted a feature called “View As,” which lets users see how their profile appears to other people.

Accountability 233

Accountability Passwords Data breaches 233