Sat.Jan 23, 2021

article thumbnail

Rogue CCTV technician spied on hundreds of customers during intimate moments

Zero Day

Prosecutors said the technician accessed more than 200 customer CCTV systems on more than 9,600 occasions to spy on them getting naked and engaging in sexual activity.

138
138
article thumbnail

Security firm SonicWall was victim of a coordinated attack

Security Affairs

The Hacker News reported in exclusive that the security firm SonicWall was hacked as a result of a coordinated attack on its internal systems. TheHackerNews revealed in an exclusive that the security provider SonicWall was hacked on Friday. The company was targeted with a coordinated attack on its internal systems, threat actors exploited zero-day vulnerabilities in their VPN solutions, such as NetExtender VPN client version 10.x and Secure Mobile Access ( SMA ). “The San Jose-based compa

VPN 125
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

SonicWall says it was hacked using zero-days in its own products

Zero Day

The networking device vendor has published a series of mitigations as it's investigating the incident and preparing patches.

Hacking 142
article thumbnail

ADT employee pleads guilty for accessing cameras installed by the company

Security Affairs

A former ADT employee pleads guilty for accessing the cameras he installed at the home of the company’s customers in the Dallas area. Telesforo Aviles (35) is a former ADT employee that pleaded for accessing the cameras he installed at the home of the company’s customers. Every time the man worked at the home of a customer in the Dallas area where an attractive woman was living, he added his personal email address to customers’ “ADT Pulse” accounts, to have real-time access to the vi

article thumbnail

The Importance of User Roles and Permissions in Cybersecurity Software

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

article thumbnail

Experts Detail A Recent Remotely Exploitable Windows Vulnerability

The Hacker News

More details have emerged about a security feature bypass vulnerability in Windows NT LAN Manager (NTLM) that was addressed by Microsoft as part of its monthly Patch Tuesday updates earlier this month. The flaw, tracked as CVE-2021-1678 (CVSS score 4.

102
102
article thumbnail

The FTC Cracks Down on Bot-Wielding Ticket Scalpers

WIRED Threat Level

Plus: A security company creeper, Biden’s cyberteam, and the rest of this week’s security news.

98

More Trending

article thumbnail

School Gives Malware Infected Laptops to Students

SecureWorld News

The U.K. government recently sent out roughly 800,000 laptops to disadvantaged students who may not have access to one at home. This is part of its plan to distribute one million laptops in an effort to make remote learning easy and accessible for all. Unfortunately, a number of the laptops sent out were discovered to have malware. English students' laptops infected with malware.

Malware 61
article thumbnail

Chrome and Edge Want to Help Solve Your Password Problems

WIRED Threat Level

The line between browsers and password managers is blurring.

article thumbnail

MrbMiner cryptojacking campaign linked to Iranian software firm

Security Affairs

Sophos experts believe that an Iranian company is behind a recently uncovered MrbMiner crypto-jacking campaign targeting SQL servers. Sophos researchers that investigated the recently uncovered crypto-mining campaign targeting SQL servers with MrbMiner malware believe that it was conducted by an Iran-based company. In September, a group of hackers launched brute-force attacks on MSSQL servers with the intent to compromise them and install crypto-mining malware dubbed MrbMiner.

Software 107