Troy Hunt

JANUARY 1, 2021

It's a new year! With lots of breaches to discuss already ? Ok, so these may not be 2021 breaches but I betcha that by next week's update there'll be brand new ones from the new year to discuss. I managed to get enough connectivity in the middle of the Australian outback in front of Uluru to do the live stream this week, plus talk a bunch more about what we've been doing on our epic Australian journey.

Data breaches 307

Data breaches Password Management Scams Passwords 307

Security Affairs

JANUARY 1, 2021

Cybercriminals are abusing Facebook ads in a large-scale phishing scam aimed at stealing victims’ login credentials. Researchers from security firm ThreatNix spotted a new large-scale campaign abusing Facebook ads. Threat actors are using Facebook ads to redirect users to Github accounts hosting phishing pages used to steal victims’ login credentials.

Phishing 145

Phishing Scams Accountability Malware 145

Threatpost

JANUARY 1, 2021

Reflecting on 2020's record-breaking year of spam and inbox threats.

Phishing 112

Phishing Malware Hacking 112

Security Affairs

JANUARY 1, 2021

Zyxel addressed a critical flaw in its firmware, tracked as CVE-2020-29583 , related to the presence of a hardcoded undocumented secret account. The Taiwanese vendor Zyxel has addressed a critical vulnerability in its firmware related to the presence of a hardcoded undocumented secret account. The vulnerability, tracked as CVE-2020-29583 received a CVSS score of 7.8, it could be exploited by an attacker to login with administrative privileges and take over the networking devices. “Firmw

Firewall 138

Firewall VPN Firmware Passwords 138

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Spinone

JANUARY 1, 2021

The differences in full vs differential vs incremental backups play a key role in forming a backup strategy for your company. “Which backup type will be the most beneficial for my organization?” As a data protection company, we hear this question all the time. The right answer to this question can be a big money […] The post Full vs Differential vs Incremental Backups: Which One Is The Best?

Backups 52

Backups 52

Security Affairs

JANUARY 1, 2021

Today Adobe Flash Player has reached its end of life (EOL), its vulnerabilities were exploited by multiple threat actors in attacks in the wild over the years. Adobe Flash Player has reached the end of life (EOL) today, over the years, threat actors have exploited multiple vulnerabilities in the popular software. Adobe will no longer release updates for its Flash Player and web browsers will not offer the support for the Adobe Flash Plugin. “Since Adobe will no longer be supporting Flash P

Software 135

Software Media Hacking Information Security 135

Security Affairs

JANUARY 1, 2021

Experts from threat intelligence firm Cyble have found documents relating to Covid-19 vaccine of European Medicines Agency in the Darkweb. Security experts from threat intelligence firm Cyble have found several documents relating to the Covid-19 vaccine allegedly stolen from the European Medicines Agency (EMA) leaked in the Darkweb. While the pandemic is spreading on a global scale, threat actors continue to target government organizations and entities in the pharmaceutical industry.

Cyber Attacks 124

Cyber Attacks Marketing Authentication Hacking 124

Schneier on Security

JANUARY 1, 2021

Delicious seafood pasta dish — includes squid — from America’s Test Kitchen. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.

237

237