SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2019-06-11 16:57:03	Maine governor signs ISP privacy bill (lien direct)	Less than one week after Maine Governor Janet Mills received one of the nation's most privacy-protective state bills on her desk, she signed it into law. The move makes Maine the latest US state to implement its own online privacy protections. Categories: Privacy Tags: ACLU of Maine Bangor Daily News data privacy law data privacy legislation Governor Janet Mills GSI internet service provider ISP Janet Mills LD 946 Maine Maine State Chamber of Commerce online privacy online privacy law online privacy legislation Senator Shenna Bellows Shenna Bellows (Read more...)
	2019-06-11 15:00:00	Cybersecurity pros think the enemy is winning (lien direct)	Recent research from Malwarebytes, ISSA, and ESG find that security professionals have little confidence in their ability to prevent their organization from being breached. What's behind this mindset? And how can we turn the tide to stay a step ahead of the criminals? Categories: Security world Tags: admins CISOs cybercriminals data breaches IT security professionals skills shortage (Read more...)
	2019-06-10 17:30:05	A week in security (June 3 – 9) (lien direct)	A weekly roundup of security news from June 3–9, including Magecart, breaches, hyperlink auditing, Bluekeep, FTC, and facial recognition. Categories: A week in security Tags: botnet browsers china cryptomining data leaks facial recognition fbi FTC microsoft vulnerability web browsers (Read more...)
	2019-06-07 16:52:04	Video game portrayals of hacking: NITE Team 4 (lien direct)	We take a look at a game aimed at giving players the most realistic interpretation of hacking possible. How well does it stack up to the real thing? Categories: Hacking Tags: gaming hacking NITE Team 4 press h to hack videogames (Read more...)
	2019-06-06 16:59:01	Hyperlink auditing: where has my option to disable it gone? (lien direct)	Hyperlink auditing is not a new way to track website users, but it could become more popular, as many browsers are taking away user options to disable it. Categories: Privacy Tags: browsers chrome disable tracking Edge firefox HMTL HTML5 hyperlink auditing link opera ping safari track tracking url (Read more...)
	2019-06-05 19:21:00	Malwarebytes Labs wins best cybersecurity vendor blog at InfoSec\'s European Security Blogger Awards (lien direct)	Read more...)
	2019-06-05 15:00:00	Maine inches closer to shutting down ISP pay-for-privacy schemes (lien direct)	Unlike a data privacy proposal in the US and a new data privacy law in California, the Maine data privacy bill aimed at Internet Service Providers (ISPs) explicitly shuts down any pay-for-privacy schemes. Categories: Privacy Tags: ACLU of Maine AT&T comcast Data privacy data privacy laws data privacy legislation facebook Google GWI internet service provider ISP L.D. 946 LD 946 Maine Maine State Chamber of Commerce pay-for-privacy Ron Wyden Senator Ron Wyden Spectrum Sprint T-Mobile Verizon Wyden (Read more...)
	2019-06-04 15:00:02	Magecart skimmers found on Amazon CloudFront CDN (lien direct)	Not all breaches on Content Delivery Networks (CDNs) result in supply-chain attacks, yet, they are often a forgotten entry point for attackers to slip in malicious code, such as web skimmers. Categories: Threat analysis (Read more...)
	2019-06-03 17:09:05	A week in security (May 27 – June 2) (lien direct)	A roundup of security news from May 27–June 2, including a look at 2019 ransomware outbreaks in the Unites States, ATM fraud, NIST's privacy framework, more legal problems for Google and Facebook, and more. Categories: A week in security Tags: a week in security amazon atm attacks atm fraud baltimore chrome City of Baltimore Department of Justice Doom Federal Trade Commission G Suite gandcrab gandcrab ransomware gmail Google Google Chrome hidden bee Justice Department NIST privacy framework protonmail ransomware week in security youtube (Read more...)	Ransomware
	2019-06-03 16:47:01	Leaks and breaches: a roundup (lien direct)	There's been some huge leaks and breaches over the last few days, impacting everything from regular logins to important financial documents. What's the fallout? Categories: Privacy Tags: Amazingco breaches Business Email Compromise Canva data data breach data leaks First American Financial Corp Flipboard impersonation attempts leaks privacy (Read more...)
	2019-05-31 17:32:05	Hidden Bee: Let\'s go down the rabbit hole (lien direct)	)
	2019-05-31 15:00:00	Ransomware isn\'t just a big city problem (lien direct)		Ransomware
	2019-05-29 18:51:04	NIST\'s privacy framework lets privacy tell its own story (lien direct)			Uber
	2019-05-29 15:00:00	Everything you need to know about ATM attacks and fraud: Part 1 (lien direct)	If you're familiar with skimming, you may have also heard of shimming, card trapping, and cash trapping. These are attacks and scams targeted at ATMs. Part 1 of our series explores various ATM attack scenarios and explains what users should look out for when using an ATM. Categories: 101 How-tos Tags: atm atm attacks atm card trapping atm cash trapping atm fraud atm industry association atm malware strains atm physical attack atm safety guidelines ATM scam atm security 101 atm security working group atm shimming atm skimming atmia atmswg automated teller machine east enisa european association for secured transactions explosives glue trap police service of northern ireland psno ram raiding taiwan heist terminal tampering vulnerable atm (Read more...)	Malware
	2019-05-28 15:25:05	Employee education strategies that work to change behavior (lien direct)	Using technology alone to combat cyberattacks is not enough. That's why employee education on security awareness should be an integral part of any company's cybersecurity policy. Categories: How-tos Tags: culture of security cybersecurity cybersecurity awareness cybersecurity policy employee education employee training security training (Read more...)
	2019-05-27 07:03:02	A week in security (May 20 – 26) (lien direct)	A roundup of the last week's security news, including admin changes, phishing in Canada, smart AI images and more. Categories: Security world Week in security Tags: roundup week in security (Read more...)
	2019-05-24 18:05:02	Medical industry struggles with PACS data leaks (lien direct)	PACS servers are often used to store and transmit patient data. But how is their security implemented? We take a look at case of how poor setup can easily lead to data leaks. Categories: Threat analysis Tags: %USERNAME%data data leaks Data privacy default credentials healthcare security medical industry medical records PACS servers passwords patient data servers (Read more...)	Guideline
	2019-05-23 19:22:04	Knowing when it\'s worth the risk: riskware explained (lien direct)	Read more...)
	2019-05-22 16:10:01	Governments increasingly eye social media meltdown (lien direct)	It seems problems never quite go away for social media platforms, and more governments of the world are taking keen interest. Will the tech giants be able to sort things out before legislators steps into the fray? Categories: Cybercrime Privacy Tags: EU facebook governments hate speech Instagram Mastodon Myanmar social media trolls twitter ukgov (Read more...)
	2019-05-21 15:38:04	Skimmer acts as payment service provider via rogue iframe (lien direct)	Even e-commerce sites that do not take payment information themselves can be abused by crooks. In this post, we show how a web skimmer is able to inject an artificial iframe into the checkout page to prompt users for their credit card information. Victims will only realize something's not right when they are redirected to the real (and external) payment form. Categories: Cybercrime Malware Tags: credit card e-commerce hacked website hacking iframe Magecart magento phishing skimmer (Read more...)
	2019-05-20 15:57:02	A week in security (May 13 – 19) (lien direct)	A roundup of security news from May 13–19, including ransomware attacks on the upswing, website hacking, pseudo-VPNs, bloatware, and more. Categories: Security world Week in security Tags: Android bloatware breaches crysis ransomware DDos attack dharma hacking healthcare cybersecurity mds Meltdown microsoft ransomware server vulnerabilities Spectre typosquatting vpn vulnerabilities whatsapp (Read more...)	Ransomware
	2019-05-17 15:59:03	4 Lessons to be learned from the DOE\'s DDoS attack (lien direct)	Read more...)
	2019-05-15 16:02:01	Threat spotlight: CrySIS, aka Dharma ransomware, causing a crisis for businesses (lien direct)	CrySIS, aka Dharma, is a ransomware family making waves over the last two months, often being used in targeted attacks through RDP access. What other tricks are up its sleeve? Categories: Malware Threat analysis Tags: Anti-Ransomware crysis dharma malware ransom ransomware rdp rdp access (Read more...)	Ransomware Threat		★★★
	2019-05-14 16:46:02	WhatsApp fix goes live after targeted attack on human rights lawyer (lien direct)	A fix was rolled out for a WhatsApp vulnerability, which was used to inject spyware into mobile devices and target a human rights lawyer. Categories: Cybercrime Mobile Tags: attack Mobile spyware targeted whatsapp (Read more...)
	2019-05-14 15:57:00	(Déjà vu) Exploit kits: spring 2019 review (lien direct)	In this edition, we review active and unique exploit kits hitting consumers and businesses over the spring season. Categories: Exploits Threat analysis Tags: EKs exploit kits Fallout Magnitude RIG Router EK Spelevo Underminer (Read more...)
	2019-05-13 15:55:04	A week in security (May 6 – 12) (lien direct)	A roundup of security news from May 6–12, including breaches, privacy, financials, takedowns, and new ransomware tactics. Categories: Security world Week in security Tags: 5G baltimore confluence data breach dharma electricfish financial fintech Google mozilla privacy seep dot web wolters kluwer (Read more...)	Ransomware
	2019-05-10 15:00:00	Vital infrastructure: Threats target financial institutions, fintech, and cryptocurrencies (lien direct)	Losing trust in financial institutions can have a disrupting effect on society. And malware authors love to target these direct sources of money. How can we protect them? Categories: Business Security world Tags: APTs banking apps banking Trojans banks bitcoin cryptocurrencies cryptocurrency cryptowallets emotet exploit kits financial institutions financials fintech information stealers infrastructure malware vital (Read more...)	Malware
	2019-05-09 16:00:00	How 5G could impact cybersecurity strategy (lien direct)	With 5G wireless on the horizon, what will businesses need to do to secure their devices and networks? Categories: 101 Tags: 5G 5G wireless automation cybersecurity strategy integration internet mirai Mirai botnet networks wireless wireless technology (Read more...)
	2019-05-08 16:30:00	Vulnerabilities in financial mobile apps put consumers and businesses at risk (lien direct)	It's good to know that your bank's website boasts that little green padlock, promotes secure communication, and follows a two-factor authentication (2FA) scheme. But are their mobile apps equally secure? Categories: 101 FYI Tags: app vulnerabilities client-side injection development hygiene exposure of database parameters and sql queries financial financial mobile app flaws implicit trust of all certificates insecure data storage insecure random number generator lack of binary protections man-in-the-middle man-int-the-middle mitm private key exposure secure app development security hubris SQL injection unintended data leakage vulnerabilities weak encryption (Read more...)
	2019-05-08 15:00:00	The top six takeaways for user privacy (lien direct)	Amidst never-ending data breaches and constantly-surprising company fiascos, here are six takeaways for anyone in the US who cares about protecting their online privacy. Categories: 101 Tags: alphabet Amy Klobuchar cambridge analytica comprehensive data privacy law comprehensive data privacy legislation Cory Booker cybersecurity law cybersecurity laws data leak Data privacy data privacy leg facebook facebook-cambridge Analytica scandal Google Mark Zuckerberg Michael Bennet online privacy twitter unintended data leakage user privacy (Read more...)
	2019-05-07 15:00:00	What to do when you discover a data breach? (lien direct)	You've discovered that your organization has been breached. Now what? Learn which steps to take in the immediate aftermath to limit the damage and preserve your company's reputation. Categories: 101 Business Tags: breach business data breach data breaches information learn obligations preparations (Read more...)
	2019-05-06 15:21:01	A week in security (April 29 – May 5) (lien direct)	A roundup of security news from April 29 - May 5, covering Electrum botnet, Wall Street Market takedown, privacy news, and the state of cryptojacking. Categories: Security world Week in security Tags: Electrum europol facebook fiserv git healthcare jenkins mirrorthief mozilla NIST sextortion Wall Street Market (Read more...)
	2019-05-03 15:00:00	The top six takeaways for corporate data privacy compliance (lien direct)	Here are Labs' top six takeaways from our data privacy and cybersecurity law series on corporate data privacy compliance. From emerging startups to burgeoning enterprises, these rules help not just with legal liability, but also user trust. Categories: Privacy Security world Tags: Apple California Online Privacy Protection Act cybersecurity law cybersecurity laws data breach notification data breach notification law Data privacy data privacy compliance data privacy law data privacy laws data privacy legislation gdpr General Data Protection Regulation Helix DNA mozilla online privacy personal data personal information personally identifiable information privacy policy protonmail signal Uber user privacy whatsapp (Read more...)		Uber
	2019-05-02 15:00:00	Cryptojacking in the post-Coinhive era (lien direct)	Cryptojacking captured everyone's attention in 2017 and 2018. With Coinhive no longer in business, has this threat been completely snuffed out? Categories: Cybercrime Tags: coinhive coinimp Cryptojacking cryptoloot drive-by cryptomining webminepool (Read more...)	Threat
	2019-05-01 17:39:02	Mozilla urges Apple to make privacy a team sport (lien direct)	Mozilla is currently pushing Apple into placing extra barriers between iPhone users and online advertisers. Why? Because, according to Mozilla, it could work, which could benefit users everywhere. Categories: Privacy Security world Tags: advertiser advocacy Apple campaign digital rights encryption fbi firefox firefox focus firefox lockbox Firefox Send ID for Advertiser ID for Advertisers IDFA IDFAs iPhone mozilla online privacy petition privacy Silicon Valley Tim Cook (Read more...)
	2019-05-01 15:51:01	Mysterious database exposed personal information of 80 million US households (lien direct)	A large database accessible online containing a huge amount of records has been found by researchers. The question is: who does it belong to, and what is it for? Categories: Cybercrime Privacy Tags: database exposed privacy records (Read more...)
	2019-04-30 15:00:00	Sophisticated threats plague ailing healthcare industry (lien direct)	Black hat hackers are after patient healthcare data, and such breaches will only intensify. Which forms of malware are behind the attacks? We take a look at the advanced threats targeting a sector struggling to keep up. Categories: Cybercrime Malware Tags: 2019 data security incident response report decatur county general hospital breach EternalBlue filess malware healthcare healthcare cybersecurity healthcare malware healthcare security HIPAA Ransom.WannaCrypt ransomware riskware riskware.mictray riskware.tool.hck rootkit.fileless.mtgen spyware spyware.agent spyware.emotet spyware.trickbot trickbot trojan.bitcoinminer trojan.emotet trojan.fakems Trojan.TrickBot Trojans WannaCry worm.parite worm.qakbot worms (Read more...)	Malware	Wannacry
	2019-04-29 17:00:00	Electrum DDoS botnet reaches 152,000 infected hosts (lien direct)	We've identified a new piece of malware that is connected to the Electrum botnet. Categories: Cybercrime Tags: botnet Electrum ElectrumDoSMiner Trojan.BeamWinHTTP (Read more...)	Malware
	2019-04-29 15:54:05	Wall Street Market reported to have exit scammed (lien direct)	Users reported that Wall Street Market, a broadly-known cryptocurrency dark net market, has executed an exit scam, swindling millions from account holders in the process. Categories: Cybercrime Social engineering Tags: bitcoin darknet exit scam scam (Read more...)
	2019-04-29 15:31:00	A week in security (April 22 – 28) (lien direct)	A roundup of security news from April 22–28, covering phishing, CCTV evasion, VPNs, and keeping data safe. Categories: Security world Week in security Tags: Apple cryptominer emotet malware phishing week in security (Read more...)
	2019-04-26 16:06:01	GitHub hosted Magecart skimmer used against hundreds of e-commerce sites (lien direct)	Magecart threat actors upload their skimming code onto GitHub in the latest attack against Magento websites. Categories: Cybercrime Tags: GitHub Magecart magento skimmer (Read more...)	Threat		★★★★★
	2019-04-25 07:01:03	Labs Cybercrime Tactics and Techniques report finds businesses hit with 235 percent more threats in Q1 (lien direct)	The Labs team discovered that businesses are being targeted with 235 percent more threats than the previous year. Download the report and find out which threats are revving up, and which are dying out. Categories: Cybercrime Malware Tags: adware business threats cryptomining emotet malware ransomware threats Trojans Troldesh Troldesh ransomware (Read more...)
	2019-04-24 15:57:00	A look inside the FBI\'s 2018 IC3 online crime report (lien direct)
	2019-04-23 17:03:02	Consumers have few legal options for protecting privacy (lien direct)	Amidst never-ending headlines about data breaches, data misuse, and opaque data-sharing agreements from major companies, users have few legal options to actually protect their privacy in court. Instead, they rely on technology. Categories: Privacy Security world Tags: ACLU Apple consumer privacy corporate surveillance Data privacy deceitful business practices digital privacy DNA testing EFF Helix DNA mozilla privacy privacy policy Privacy Rights Clearinghouse signal unfair business practices whatsapp (Read more...)
	2019-04-22 18:15:03	Of hoodies and headphones: a spotlight on risks surrounding audio output devices (lien direct)	For years, researchers have been poking holes in our audio output devices in the name of security and privacy. They've found many ways our headphones can be hacked or otherwise compromised. Learn what they discovered, and how you can secure your own. Categories: 101 FYI Tags: aha american heart association audio output device audio output device security ben gurion university blueborne bluetooth eavesdropping headphone risks headphones and hoodies man-in-the-middle attack mitm multiplexed wired attack surface Sennheiser SPEAKE(a)R SPEAKE(a)R malware (Read more...)
	2019-04-22 15:47:02	(Déjà vu) A week in security (April 15 – 21) (lien direct)	A roundup of security news from April 15–21, including an explanation of like-farming, Ellen DeGeneres scam, flaws in VPN services, funky malware formats found in Ocean Lotus, and more. Categories: Security world Week in security Tags: a week in security cyber resilience Ellen DeGeneres fake Airbnb sites Flame 2.0 IE vulnerability like-farming notre dame disinformation VPN flaw week in security (Read more...)	Malware	APT 32
	2019-04-19 18:37:05	Funky malware format found in Ocean Lotus sample (lien direct)	Recently, one of our researchers presented at the SAS conference on "Funky malware formats"-atypical executable formats used by malware that are only loaded by proprietary loaders. In this post, we analyze one of those formats in a sample called Ocean Lotus from the APT 32 threat group in Vietnam. Categories: Malware Threat analysis Tags: APT 32 atypical malware formats BLOB CAB custom format malware format ocean lotus Vietnam (Read more...)	Malware Threat	APT 32
	2019-04-18 15:00:00	Explained: like-farming (lien direct)	Like-farming is a popular method on social media to harvest as many likes and shares as possible in order to increase the value of a site or domain. But what happens when scammers get in the game? Categories: 101 FYI Tags: facebook hoax like-farming like-harvesting likes shares (Read more...)
	2019-04-17 16:04:02	Malware targeting industrial plants: a threat to physical security (lien direct)	When malware shuts down the computer systems of an industrial plant, it could threaten the physical security of those working in or living near it. Here's how to protect your workforce and your business from targeted threats. Categories: 101 Business Tags: controllers lockergoga manufacturing physical security production ransomware (Read more...)	Malware Threat
	2019-04-16 15:30:02	Hackers snab emails and more in Microsoft Outlook, Hotmail, and MSN compromise (lien direct)	Hackers made use of a compromised Microsoft support agent's credentials to sneak a peek at its users' Hotmail, MSN, and Outlook emails. How bad is it, and what has Microsoft done to correct it? Categories: Cybercrime Hacking Tags: email hotmail live microsoft ms msn Outlook (Read more...)

Last update at: 2024-04-27 01:08:00
See our sources.

To see everything: Our RSS (filtrered)