SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2019-10-01 15:00:14	For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware (lien direct)	Starting today, two hallmark holidays are upon us. No, it's not Halloween and Thanksgiving. It's both Cybersecurity Awareness Month and Domestic Violence Awareness Month. It's no coincidence these two awareness campaigns overlap. What were once seen as separate realities-the physical and the digital-are increasingly blurred as our offices, schools, and hospitals move from paper to... Categories: Stalkerware Tags: Browser guard cyberstalking domestic violence domestic violence awareness month domestic violence victims monitoring apps national cyber security awareness month national cybersecurity awareness month NCSAM privacy spyware stalkers stalkerware tracking apps (Read more...)
	2019-09-30 15:43:14	A week in security (September 23 – 29) (lien direct)	A roundup of the security news from September 23–29 including Emotet, checkm8, securing webcams, insurance data, Nodersok, voting machines, iHandy, CCleaner, encryption and breaches. Categories: A week in security Tags: ccleaner checkm8 doordash emotet ihandy insurance data nodersok webcams (Read more...)		CCleaner
	2019-09-27 16:48:42	New iOS exploit checkm8 allows permanent compromise of iPhones (lien direct)	A new exploit for iOS enables attackers to gain permanent access to iPhones, iPads, Apple Watches, and more-with zero potential for patching. Learn why this is possibly the biggest security news for iOS since its inception. Categories: Mac Tags: Apple apple security apple vulnerability checkm8 exploit exploits iOS iOS exploit vulnerability (Read more...)
	2019-09-25 22:44:47	Insurance data security laws skirt political turmoil (lien direct)	Across the United States, a unique approach to lawmaking has seen radical success in making data security a little bit stronger for one industry-insurance providers. Categories: Privacy Tags: Anthem California California Consumer Privacy Act CCPA Connecticut Data privacy data privacy law data privacy laws data privacy legislation data security data security law Delaware Health Insurance Portability and Accessibility HIPAA insurance cybersecurity insurance data security insurance data security model law Maine McCarran Ferguson Act Michigan Mississippi model law NAIC National Association of Insurance Commissioners New Hampshire New York New York Department of Financial Services NYDFS Ohio South Carolina US data privacy laws US data privacy legislation (Read more...)
	2019-09-24 17:19:23	15,000 webcams vulnerable to attack: how to protect against webcam hacking (lien direct)	We take a look at the ever-present threat of webcam hacking, and what you can do to avoid being caught out. Categories: Hacking Tags: cam camera devices hackers hacking hub Internet of Things IoT IoT devices monitor security by design vulnerabilities webcam webcam hacks (Read more...)	Threat
	2019-09-23 18:40:44	Emotet malspam campaign uses Snowden\'s new book as lure (lien direct)		Spam
	2019-09-23 15:55:30	A week in security (September 16 -22) (lien direct)	A roundup of the security news from September 16–22 including Emotet, student-targeted visa scams, data privacy laws, Malwarebytes' new Browser Guard, data destruction, and more. Categories: A week in security Tags: amazon Browser guard data destruction education cybersecurity emotet Google Google Chrome Instagram phishing privacy law S3buckets visa visa scam youtube (Read more...)
	2019-09-20 18:18:26	What role does data destruction play in cybersecurity? (lien direct)	Organizations are keen to protect the personal data of their employees and customers from cyberattack. But what about the data they no longer need? We discuss why data destruction is just as important to cybersecurity as protection. Categories: Business Tags: data data breach data destruction Data privacy degaussing gdpr NIST overwrite ovewriting personal information personally identifiable information PII (Read more...)
	2019-09-19 18:27:51	Browser Guard combats privacy abuse, tracking, clickbait, and scammers (lien direct)	The free Malwarebytes Browser Guard extension combats privacy abuse, user tracking, clickbait, unwanted advertisements, and tech support scammers while offering granular control and faster browsing. Categories: Malwarebytes news Tags: ad blocking browser Browser guard browser safety browser security browsers control extension faster load times Malwarebytes Malwarebytes Browser Guard plugin plugins privacy tracker trackers (Read more...)
	2019-09-19 15:54:43	CEOs offer their own view of a US data privacy law (lien direct)	Should this proposed privacy law come into effect, if a company violates that law, you, your neighbor, and your family do not have the right to sue them. Categories: Privacy Tags: Brave Brave browser Business Roundatble California California Consumer Privacy Act Center for Democracy and Technology consumer privacy consumer privacy law Data privacy data privacy law data privacy laws data privacy legislation EFF Electronic Frontier Foundation EU European Union facebook Federal Trade Commission gdpr General Data Protection Regulation Maine montana Nevada pay-for-privacy Purism Senator Ron Wyden Technet US data privacy laws US data privacy legislation US Federal Trade Commission Vermont (Read more...)
	2019-09-18 16:49:40	International students in UK targeted by visa scammers (lien direct)	Visa scammers are at it again, this time targeting Chinese international students in the UK. Learn how these scams work in order to steer clear, and advise others to do the same. Categories: Scams Tags: china Chinese students home office hong kong money mule scam uk UKVI universities university visa wire fraud (Read more...)
	2019-09-16 17:04:53	Emotet is back: botnet springs back to life with new spam campaign (lien direct)	After months of laying dormant, the notorious Emotet is back, with its botnet spewing spam globally. Categories: Botnets Tags: botnet botnets downloader emotet information stealer malicious email malspam phishing Ryuk ransomware spam spear phishing trickbot (Read more...)	Spam
	2019-09-16 15:35:21	A week in security (September 9 – 15) (lien direct)	A roundup of the security news from September 9–15, including locking down AWS, mobile malware, phishing threats, and more. Categories: A week in security Tags: a week in security infosec malware Mobile phishing social network weekly roundup (Read more...)
	2019-09-13 20:44:52	Hacking with AWS: incorporating leaky buckets into your OSINT workflow (lien direct)	When penetration testing for an organization, what OSINT tactics can researchers employ? We discuss how hacking with AWS buckets can provide more recon data and uncover any leaks. Categories: Researcher's corner Tags: amazon aws AWS buckets data hacking Intel intelligence gathering open source intelligence OSINT pen-testing penetration testing recon reconnaisance vulnerabilities (Read more...)
	2019-09-12 20:15:02	YouTube ordered to cough up $170M settlement over COPPA infraction (lien direct)	Last week, the FTC announced its settlement with Google over YouTube's COPPA violations, including requirements for better protecting children's data. But is it enough? Categories: Privacy (Read more...)
	2019-09-12 15:00:00	(Déjà vu) Five years later, Heartbleed vulnerability still unpatched (lien direct)	The Heartbleed vulnerability was discovered and fixed in 2014, yet today-five years later-there are still unpatched systems. Categories: Malwarebytes news Tags: cryptography EKs exploit kits exploits heartbeat extension heartbleed heartbleed vulnerability IT IT teams open source OpenSSL SSL TSL (Read more...)	Vulnerability
	2019-09-11 19:29:03	Vital infrastructure: emergency services (lien direct)	We all depend on emergency services to come to the rescue in case of serious problems. How does malware hinder them? Categories: Vital infrastructure Tags: ambulance emergency fire department infrastructure police services vital (Read more...)	Malware
	2019-09-10 16:41:04	300 shades of gray: a look into free mobile VPN apps (lien direct)	Mobile VPN apps are one of the best tools for protecting user privacy. Unfortunately, a notable number of are deemed unsafe. Read on to find out how to assess the best mobile VPN for you. Categories: Privacy Tags: Android anonymity Apple App Store black mirror CDT centennials Commonwealth Scientific and Industrial Research Organization CSIRO Dark Web DNS hijacking DNS leak emerging markets encryption fake av free free VPN Global Web Index GlobalWebIndex Google Play Store Guideline 5.4 Hotspot Shield Hotspot Shield complaint Innet VPN iOS IPv6 leak KilpVip Luminati malvertising millenials mobile VPN apps motivations for VPN usage MyMobileSecure netflix onion browser privacy Queen Mary University of London risk-free Rob Mardisalu
	2019-09-09 16:01:03	A week in security (September 2 – 8) (lien direct)	A roundup of the latest cybersecurity news for the week of September 2 – 8, including TrickBot's new trick, a social engineering toolkit, and how to keep remote workers safe. Categories: A week in security Tags: back to school back to school cybersecurity Capital One data breach china cyber insurance deepfake deepfake for voices facebook iphone compromise Paige Thompson ransomware remote workers romance scam scammers Social Engineering spear phishing targeted attacks trickbot Uyghur Muslims (Read more...)
	2019-09-09 15:36:01	When corporate communications look like a phish (lien direct)	Before organizations engage in gnashing of teeth over the "ignorant user" and the cost of training, think about how much email users encounter and whether corporate communications look like phishes themselves. Categories: Business Tags: anti-phishing bec Business Email Compromise corporate communications email communications emails phishing phishing training training and awareness program (Read more...)
	2019-09-04 14:06:02	5 simple steps to securing your remote employees (lien direct)	Modern businesses require modern cybersecurity, and modern cybersecurity means more than just implementing the latest tech. It also means implementing good governance. Categories: Business Tags: 2fa approved device list bring your own device byod encryption Find my iPhone Find my Mobile governance IDG Connect jailbreak man-in-the-middle man-in-the-middle attack multi-factor authentication passcode password public Wi-Fi RBAC remote remote employees remote wiping remote workforce role-based access control single sign-on sso two-factor authentication vpn (Read more...)
	2019-09-03 19:02:01	A week in security (August 26 – September 1) (lien direct)	A roundup of the latest cybersecurity news for the week of August 26-September 1 including xHelper Trojan, Nextdoor app, clickjacking problem, investing cybersecurity, and iPhone malware Categories: A week in security Tags: asruex blockchain clickjacking coinmining emotet iPhone nextdoor retadup trickbot vpn xHelper (Read more...)
	2019-09-03 15:26:00	TrickBot adds new trick to its arsenal: tampering with trusted texts (lien direct)	TrickBot's latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers. Categories: Trojans Tags: 2fa account takeover fraud ATO Authy C&C Dell Secureworks dynamic webinject dyreza emotet Eternal Romance EternalBlue EternalChampion Gold Blackburn Google Authenticator hasherezade point-of-sale port-out fraud POS SIM hijacking SIM swapping Sprint T-Mobile thetrick trickbot trickloader trickster Trojan.TrickBot two-factor authentication Verizon Wireless (Read more...)
	2019-09-03 15:15:03	New social engineering toolkit draws inspiration from previous web campaigns (lien direct)	We discovered a web social engineering toolkit that allows crooks to create fake update notification campaigns on both desktop and mobile in up to 30 different languages. Categories: Social engineering Social engineering Tags: Domen eitest FakeUpdates hoeflertext NetSupport rat SocGholish Social Engineering (Read more...)
	2019-08-30 17:40:02	Unprecedented new iPhone malware discovered (lien direct)	Google announced late last night that hacked websites have been used to drop iPhone malware on unsuspecting users over a two-year period. Thomas Reed investigates. Categories: Mac Tags: Apple iOS ios infection ios malware iPhone iphone malware mac malware infection trident zero day zero-day vulnerability (Read more...)	Malware
	2019-08-30 16:16:00	Everything you need to know about the Heartbleed vulnerability (lien direct)	The Heartbleed vulnerability was discovered and fixed in 2014, yet today-five years later-there are still unpatched systems. Categories: Exploits and vulnerabilities Tags: cryptography EKs exploit kits exploits heartbeat extension heartbleed heartbleed vulnerability IT IT teams open source OpenSSL SSL TSL (Read more...)	Vulnerability		★★★
	2019-08-28 17:31:00	Making the case: How to get the board to invest in higher education cybersecurity (lien direct)	CISOs working in institutions of higher learning have their own considerations when communicating with the board about risk management. One of the top security officials at Boston College offers his takeaway on what it takes to get board buy-in on campus. Categories: Business Tags: boston college c-level CIO CISO CISOs enterprise higher education higher education cybersecurity higher education security investment in cybersecurity non-profit zero trust security model (Read more...)
	2019-08-27 17:36:05	Study explores clickjacking problem across top Alexa-ranked websites (lien direct)	We look at recent research exploring the threat of clickjacking, along with other solutions considered by site owners and analysts for protecting users against these online attacks. Categories: Web threats Tags: advertising alexa alexa-ranked websites chromium clickjacking clickjacking attacks clickjacking research observer ranking research study web threats websites (Read more...)	Threat
	2019-08-27 16:35:03	Nextdoor neighborhood app sends letters on its users\' behalf (lien direct)	Read more...)
	2019-08-26 19:04:01	Mobile Menace Monday: Android Trojan raises xHelper (lien direct)	Since its introduction in May 2019, the xHelper dropper, an Android Trojan, has climbed to our top 10 list of most detected mobile malware. Categories: Android Tags: Android android malware Android/Trojan.Dropper.xHelper mobile malware mobile menace monday xHelper (Read more...)
	2019-08-26 15:38:03	A week in security (August 19 – 25) (lien direct)	A roundup of the latest cybersecurity news for the week of August 19–25, including Magecart attacks on poker software, a new Bluetooth vulnerability, continuing ransomware attacks on US cities, Bitcoin sextortion, and a look back at one researcher's DEF CON experience. Categories: A week in security Tags: AhMyth APT awis Bitcoin sextortion Bolik banking Trojan crypomining DEF CON 27 facebook facebook hoax fortnite Google hong kong Instagram hoax Key Negotiation of Bluetooth KNOB attack Magecart misinformation NordVPN ransomware recap Security Service of Ukraine Sodinokibi spyware Syrk ransomware twitter Valve Corporation week in security weekly blog roundup youtube Yuzhnoukrainsk (Read more...)	Ransomware
	2019-08-23 15:00:05	Ransomware continues assault against cities and businesses (lien direct)	We take a look at the current chaos faced by local governments across the US, as ransomware continues to snap at its cities' heels. Categories: Ransomware Tags: attack backup critical infrastructure emotet Florida local government organisation locked out louisiana ransom ransomware robinhood ryuk Ryuk ransomware samsam ransomware texas trickbot (Read more...)	Ransomware
	2019-08-22 15:00:00	The lucrative business of Bitcoin sextortion scams (lien direct)	Sextortion scams are back on the radar, and many say they're on the uptick. We investigate an email campaign to see how lucrative the business of sextortion can be. Categories: Scams Tags: 163qcNngcPxk7njkBGU3GGtxdhi74ycqzk 3HXdb3HAw1wVzU9b7ZSigvGaStd8KoZ3zJ bitcoin Bitcoin sextortion blackmail Digital Shadows EFF Electronic Frontier Foundation scams sextortion email sextortion scams (Read more...)
	2019-08-21 15:56:04	Bluetooth vulnerability can be exploited in Key Negotiation of Bluetooth (KNOB) attacks (lien direct)	Researchers called it KNOB, a clever attack against the firmware of a Bluetooth chip that can allow hackers to successfully hijack paired devices and steal their sensitive data. Are users at risk? Categories: Awareness Tags: Apple blackberry bluetooth Cisco CVE-2019-9506 iOS Key Negotiation of Bluetooth KNOB attack macOS man-in-the-middle attack microsoft mitm ret hat watchos windows (Read more...)	Vulnerability
	2019-08-20 16:42:02	DEF CON 27 retrospective: badge life redux (lien direct)	Learn about one of our researcher's badge experiences at DEF CON 27. Categories: Researcher's corner (Read more...)
	2019-08-20 15:00:03	Magecart criminals caught stealing with their poker face on (lien direct)	This blog post details the curious case of a web skimmer encountered in a poker application. Categories: Threat analysis Tags: drupal JavaScript Magecart magento poker skimmer (Read more...)
	2019-08-19 17:55:05	A week in security (August 12 – 18) (lien direct)	A roundup of the most interesting cybersecurity news stories from August 12 to 18, including a deep dive into facial recognition technology, swatting dangers, social engineering attacks on cities, and more. Categories: A week in security Tags: Android facebook Google password phish phishing roundup week in security (Read more...)
	2019-08-19 15:00:00	How much personalization is too much? (lien direct)	Personalization is the new mantra of marketers-and most people are perfectly okay with that. But when does personalization cross the line into invasive? And what can uncomfortable consumers do about blocking it? Categories: Privacy Tags: browser extensions browser plugins browser security browsing tracking data collection personal information personally identifiable information privacy the parallax (Read more...)
	2019-08-16 21:06:01	QxSearch hijacker fakes failed installs (lien direct)	QxSearch is a group of search hijackers that try to make the user think the install failed or was incomplete. Is it that they don't want to be found and removed? Or just bad programming? Categories: PUPs Tags: bigsrch.xyz Chrome Extension Qxsearch search hijackers (Read more...)
	2019-08-15 15:26:05	The Hidden Bee infection chain, part 1: the stegano pack (lien direct)	The Hidden Bee cryptominer has a complex and multi-layered internal structure that is unusual among cybercrime toolkits. That's why we're dedicating a series of posts to exploring its elements and updates made during one year of its evolution. Categories: Threat analysis Tags: cryptominers custom code exploit kits exploits hidden bee infection chain infection vector malware modules miner miners obfuscation payloads Underminer Underminer EK ()
	2019-08-14 13:00:00	Trojans, ransomware dominate 2018–2019 education threat landscape (lien direct)	Trojans such as Emotet and TrickBot were the top threat for the education sector in the 2018–2019 school year. What threats will the new school year bring? Categories: Trojans Tags: cyberthreats education cybersecurity emotet ransomware ryuk Ryuk ransomware trickbot Trojans (Read more...)	Ransomware Threat
	2019-08-13 16:33:02	Data and device security for domestic abuse survivors (lien direct)	Many domestic abuse survivors need help before stalkerware strikes. Here, we give basic advice on device security and protecting sensitive data. Categories: Privacy Tags: 2fa Android App Store cloud storage data security device security domestic abuse domestic abuse survivor domestic violence encryption end-to-end encryption Google Play Google Play Store iMessage iOS national domestic violence hotline National Network to End Domestic Violence passcode secure messaging security signal spyware stalkerware two-factor authentication whatsapp wire (Read more...)
	2019-08-12 15:38:03	A week in security (August 5 – 11) (lien direct)	The latest cybersecurity news for the week of August 5–11. We touch on problematic backdoors, the grim possibility of the Internet of Thoughts, and smart home improvement. We also released a retrospective report on ransomware. Categories: A week in security Tags: a week in security APT28 awis backdoors bitcoin bmi brain-machine interface chrome incognito CTNT report dslr flaw facebook Fancy Bear IBM X-Force Incident Response and Intelligence Services IRIS Mark Zuckerberg messenger kids phishing protonmail ransomware robocall robocall scam sextortion smart homes steam Strontium weekly blog roundup (Read more...)		APT 28
	2019-08-12 15:00:00	Facial recognition technology: force for good or privacy threat? (lien direct)	It seems facial recognition technology, as technology so often does, has raced far ahead of our ability to define its ethical use. We take a hard look at major concerns brewing in cities around the world. Categories: Privacy Tags: amazon brooklyn cctv china facial recognition hong kong Internet of Things IoT LFR microsoft orlando san francisco surveillanceware uk united states us (Read more...)
	2019-08-09 16:10:02	Backdoors are a security vulnerability (lien direct)	Upset by their inability to access potentially vital evidence for criminal investigations, the federal government has, for years, pushed to convince tech companies to build backdoors that will, allegedly, only be used by law enforcement agencies. The problem, cybersecurity researchers say, is that those backdoors can easily be exploited by criminals. Categories: Privacy Tags: Apple Attorney General backdoor Clipper Chip Department of Justice encryption fbi golden key Google iMessage iOS 8 iPhone lawful intercept luggage National Security Agency NSA signal Transportation Security Administration TSA whatsapp William Barr (Read more...)	Vulnerability
	2019-08-08 14:00:00	Labs quarterly report finds ransomware\'s gone rampant against businesses (lien direct)	Read more...)	Ransomware Threat
	2019-08-07 15:00:00	8 ways to improve security on smart home devices (lien direct)	Smart home devices aren't the most secure, but they do make life more convenient. How can those who've embraced smart home tech stay as secure as possible? Here are eight ways. Categories: IoT Tags: 2fa alexa Google Home Internet of Things IoT privacy secure passwords smart device smart devices smart home assistant (Read more...)
	2019-08-05 15:44:03	A week in security (July 29 – August 4) (lien direct)	A roundup of security news from July 29 - August 4 including Capital One breach, Lord Exploit Kit, more Magecart skimming, ATM attacks, QR code scams, and Equifax payout. Categories: Malwarebytes news Tags: android q atm attacks board of directors Capital One Equifax Equifax breach exploit kit exploit kits germanwiper government cybersecurity Lord exploit kit Magecart MageCart attacks (Read more...)		Equifax
	2019-08-05 15:00:00	How brain-machine interface (BMI) technology could create an Internet of Thoughts (lien direct)	Several companies are developing brain-machine interface (BMI) technologies for medical applications in the near future. Will this lead to connecting the human brain to the cloud, creating an Internet of Thoughts? Or will practical, ethical, and security concerns stop progress. Categories: Artificial Intelligence Tags: AI b/ci bmi brain brain-machine interface chips exoskeleton human brain/cloud interface IBM Intel internet of thoughts neural networks neuralnanorobotics Neurolink neuromorphic design neuromorphic engineering neuroscience Samsung (Read more...)	Guideline
	2019-08-02 18:15:02	Say hello to Lord Exploit Kit (lien direct)	In this blog, we take a look at a new exploit kit distributed via malvertising that calls itself Lord EK. Categories: Exploits Threat analysis Tags: EK eris exploit kit Lord EK malvertising njRAT ransomware (Read more...)

Last update at: 2024-04-23 19:08:32
See our sources.

To see everything: Our RSS (filtrered)