❌ Double-Stuffed: Dunkin’ Hit by Another Credential-Stuffing Attack ❌
📖 Read
via "Threatpost | The first stop for security news".
Dunkin’ Donuts may have just launched its first double-filled doughnut, but another doubling up is not quite as tasty. The chain has suffered its second credential-stuffing attack in three months. Like the first incident, the attack targeted pastry aficionados that have DD Perks accounts, which is Dunkin’s loyalty program. Names, email addresses, 16-digit DD Perks […]📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Double-Stuffed: Dunkin’ Hit by Another Credential-Stuffing Attack
Dunkin’ Donuts’ loyalty program was hit with a credential stuffing attack that targeted names, email addresses, 16-digit DD Perks account numbers and DD Perks QR codes.
🕴 Microsoft, Adobe Both Close More Than 70 Security Issues 🕴
📖 Read
via "Dark Reading: ".
With their regularly scheduled Patch Tuesday updates, both companies issued fixes for scores of vulnerabilities in their widely used software.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft, Adobe Both Close More Than 70 Security Issues
With their regularly scheduled Patch Tuesday updates, both companies issued fixes for scores of vulnerabilities in their widely used software.
🕴 Up to 100,000 Reported Affected in Landmark White Data Breach 🕴
📖 Read
via "Dark Reading: ".
Australian property valuation firm Landmark White exposed files containing personal data and property valuation details.📖 Read
via "Dark Reading: ".
Darkreading
Up to 100,000 Reported Affected in Landmark White Data Breach
Australian property valuation firm Landmark White exposed files containing personal data and property valuation details.
❌ Siemens Warns of Critical Remote-Code Execution ICS Flaw ❌
📖 Read
via "Threatpost | The first stop for security news".
The affected SICAM 230 process control system is used as an integrated energy system for utility companies, and as a monitoring system for smart-grid applications.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Siemens Warns of Critical Remote-Code Execution ICS Flaw
The affected SICAM 230 process control system is used as an integrated energy system for utility companies, and as a monitoring system for smart-grid applications.
ATENTION‼ New - CVE-2017-0938
📖 Read
via "National Vulnerability Database".
Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks.📖 Read
via "National Vulnerability Database".
⚠ Security firm beats Adobe by patching reader flaw first ⚠
📖 Read
via "Naked Security".
Adobe has patched a flaw that enabled attackers to slurp a user’s network authentication details - but not before someone else patched it first.📖 Read
via "Naked Security".
Naked Security
Security firm beats Adobe by patching reader flaw first
Adobe has patched a flaw that enabled attackers to slurp a user’s network authentication details – but not before someone else patched it first.
⚠ 620 million records from 16 websites listed for sale on the Dark Web ⚠
📖 Read
via "Sophos".
Some of the breaches are new, while some were reported last year. The sites include MyFitnessPal, MyHeritage, Whitepages and more.📖 Read
via "Sophos".
Naked Security
620 million records from 16 websites listed for sale on the Dark Web
Some of the breaches are new, while some were reported last year. The sites include MyFitnessPal, MyHeritage, Whitepages and more.
🔐 4 ways your company can avoid a data breach 🔐
📖 Read
via "Security on TechRepublic".
Only one in three organizations say they are confident they can prevent data breaches, according to Balbix.📖 Read
via "Security on TechRepublic".
TechRepublic
4 ways your company can avoid a data breach
Only one in three organizations say they are confident they can prevent data breaches, according to Balbix.
⚠ Ep. 019 – Android holes, iOS screengrabbing and USB poo [PODCAST] ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security podcast - enjoy!📖 Read
via "Naked Security".
Naked Security
Ep. 019 – Android holes, iOS screengrabbing and USB poo [PODCAST]
Here’s the latest Naked Security podcast – enjoy!
🔐 More developers are abusing Apple Developer Enterprise Program to distribute illicit apps 🔐
📖 Read
via "Security on TechRepublic".
Apple has less of an iron grip over iOS than first thought, as organizations are using the Developer Enterprise Program for apps that would not be allowed in the App Store.📖 Read
via "Security on TechRepublic".
TechRepublic
More developers are abusing Apple Developer Enterprise Program to distribute illicit apps
Apple has less of an iron grip over iOS than first thought, as organizations are using the Developer Enterprise Program for apps that would not be allowed in the App Store.
❌ Unpatched Apple macOS Hole Exposes Safari Browsing History ❌
📖 Read
via "Threatpost | The first stop for security news".
There are no permission dialogues for apps in certain folders for macOS Mojave, which allows a malicious app to spy on browsing histories..📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Unpatched Apple macOS Hole Exposes Safari Browsing History
Apple has since acknowledged the flaw.
❌ ‘Dirty Sock’ Flaw in snapd Allows Root Access to Linux Servers ❌
📖 Read
via "Threatpost | The first stop for security news".
The issue affects default installations of Ubuntu Server and Desktop and is likely included in many Ubuntu-like Linux distributions.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
‘Dirty Sock’ Flaw in snapd Allows Root Access to Linux Servers
The issue affects default installations of Ubuntu Server and Desktop and is likely included in many Ubuntu-like Linux distributions.
⚠ Evil USB O.MG Cable opens up Wi-Fi to remote attacks ⚠
📖 Read
via "Naked Security".
... and enables de-authenticaton attacks that could knock targeted systems off the Wi-Fi and onto one of these nefarious cables.📖 Read
via "Naked Security".
Naked Security
Evil USB O.MG cable opens up Wi-Fi to remote attacks
… and enables de-authenticaton attacks that could knock targeted systems off the Wi-Fi and onto one of these nefarious cables.
⚠ Another flaw found in macOS Mojave’s privacy protection ⚠
📖 Read
via "Naked Security".
Ever since Apple announced enhanced privacy protection for macOS Mojave 10.14 last September, a dedicated band of researchers has been poking away at it looking for security flaws. Here's another.📖 Read
via "Naked Security".
Naked Security
Another flaw found in macOS Mojave’s privacy protection
Ever since Apple announced enhanced privacy protection for macOS Mojave 10.14 last September, a dedicated band of researchers has been poking away at it looking for security flaws. Here’s ano…
🕴 Lessons Learned from a Hard-Hitting Security Review 🕴
📖 Read
via "Dark Reading: ".
Information security is a corporate posture and must be managed at all levels: systems, software, personnel, and all the key processes.📖 Read
via "Dark Reading: ".
Dark Reading
Lessons Learned from a Hard-Hitting Security Review
Information security is a corporate posture and must be managed at all levels: systems, software, personnel, and all the key processes.
🕴 70% of Consumers Want Biometrics in the Workplace 🕴
📖 Read
via "Dark Reading: ".
Speed, simplicity, and security underscore their desire, a new study shows.📖 Read
via "Dark Reading: ".
Dark Reading
70% of Consumers Want Biometrics in the Workplace
Speed, simplicity, and security underscore their desire, a new study shows.
🔐 How to protect and secure your web browsing with the Brave browser 🔐
📖 Read
via "Security on TechRepublic".
The Brave browser offers built-in protection against ad trackers, third-party cookies, and other potential threats to your privacy. Here's how to use it and tweak it.📖 Read
via "Security on TechRepublic".
TechRepublic
How to protect and secure your web browsing with the Brave browser
The Brave browser offers built-in protection against ad trackers, third-party cookies, and other potential threats to your privacy. Here's how to use it and tweak it.
🔐 How to create a home office VPN server with Microsoft Azure 🔐
📖 Read
via "Security on TechRepublic".
Creating a do-it-yourself VPN that you manage and access on your own terms is not as difficult as you might think.📖 Read
via "Security on TechRepublic".
ATENTION‼ New - CVE-2018-0696
📖 Read
via "National Vulnerability Database".
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.📖 Read
via "National Vulnerability Database".
🕴 5 Expert Tips for Complying with the New PCI Software Security Framework 🕴
📖 Read
via "Dark Reading: ".
The Secure SLC Standard improves business efficiency for payment application vendors but could also stand as new security benchmark for other industries to follow.📖 Read
via "Dark Reading: ".
Dark Reading
5 Expert Tips for Complying with the New PCI Software Security Framework
The Secure SLC Standard improves business efficiency for payment application vendors but could also stand as new security benchmark for other industries to follow.
🕴 Scammers Fall in Love with Valentine's Day 🕴
📖 Read
via "Dark Reading: ".
Online dating profiles and social media accounts add to the rich data sources that allow criminals to tailor attacks.📖 Read
via "Dark Reading: ".
Darkreading
Scammers Fall in Love with Valentine's Day
Online dating profiles and social media accounts add to the rich data sources that allow criminals to tailor attacks.