πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Payment Security Compliance Takes a Turn for the Worse πŸ•΄

This is the first time in six years that Verizon's "Payment Security Report" shows a downward trend, leaving cardholders vulnerable.

πŸ“– Read

via "Dark Reading: ".
❌ Malware on SHEIN Servers Compromises Data of 6.4M Customers ❌

A data breach targeting women's apparel giant SHEIN occurred between June and August 2018.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Cryptomining Malware Continues Rapid Growth: Report πŸ•΄

Cryptomining malware is the fastest-growing category of malicious software, according to a new report.

πŸ“– Read

via "Dark Reading: ".
❌ Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks ❌

Online ad industry moves away from once prolific ads that are now deemed insecure because of DOM-based XSS vulnerabilities.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ 'Scan4Yyou' Operator Gets 14-Year Sentence πŸ•΄

A citizen of the former USSR is sentenced to 168 months for running Scan4you, an online counter antivirus service.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ The Cyber Kill Chain Gets A Makeover πŸ•΄

A new report demonstrates how the cyber kill chain is consolidating as criminals find ways to accelerate the spread of their targeted cyberattacks.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Ex-NSA Developer Gets 5 1/2-Year Prison Sentence πŸ•΄

Nghia Hoang Pho, who illegally took home classified NSA information, also sentenced to three years of supervised release after prison term.

πŸ“– Read

via "Dark Reading: ".
πŸ” Installing and using the PassFF Firefox Password Manager πŸ”

If you're looking for a more efficient way to securely manage website passwords, meet PassFF.

πŸ“– Read

via "Security on TechRepublic".
❔ Know your ATM card and the various frauds related to it ❔

Estimated reading time: 3 minutesIt’s a plastic world we live in. The proliferation of plastic money everywhere, in the form of debit and credit cards, means that the concept of paper money is soon becoming obsolete. Swiping a card seems to have become almost a natural instinct. The total number of cash withdrawals at ATMs worldwide was a staggering 107 billion in 2016. While swiping your debit card or using it to withdraw cash from an ATM is convenient, it also means that there are certain dangers which arrive with it. Cybercriminals are looking for every opportunity to strike and that means you need to be as vigilant with your ATM card, as you would be if you were carrying a large amount of cash. In fact, perhaps even more vigilant, because if a criminal manages to use your card to gain access to your cash reserves, it will take them hardly two minutes to wipe out your entire life savings! For that, it’s important to take out your card and understand all of its components. The Name of Your Bank – usually showcased on top of the card and identifies which bank has issued the card. Card Number – Written in a large size on the centre of the front of the card, this is probably the most important part of your ATM card. It is 16-digit long and is linked to your bank account. The first 6 digits are your Bank’s Identification Number and the rest 10 digits are Unique Account Number of the cardholder. Be very careful about how you use this number – in many ways, it is your banking identity and you should not write it down or tell too many people about it Cardholder’s name – Your card should have your name on it so that there is further proof it is not being used unauthorized. Chip – Most modern ATM cards use it and it adds an extra layer of security to your transaction by adding a single-use code to every transaction. The expiration date provides the date on which the card expires while your payment network logo (Visa or MasterCard) to know what card you have Magnetic stripes at the back of a card are extremely vital as they contain information about you and your card which can be read by card readers. This magnetic strip is also key to your banking identity and unscrupulous criminals can duplicate it to create another version of your card. Security codes are required when shopping online as an additional layer of protection. It is a three-digit unique number which is needed to be inputted in. Finally, there is a signature panel as well where cards need to be signed. Now that we have a good understanding of the different components of our ATM cards, it’s also important to know the different kinds of frauds associated with them: Skimming – Criminals mostly install an unobtrusive foreign device on an ATM, right near the card slot. This device copies the details of the cards entered and hence makes counterfeits. The remedy? Be extra-cautious and check for foreign devices before putting in your card at an ATM. If in doubt, exit the ATM and use another one. Cash Trapping – The cash will be trapped inside the machine and once a frustrated customer leaves, the criminal will come back to collect it. This is why Indian ATMs nowadays give a warning at the end of the transaction to collect your cash. Eavesdropping and pretending to help – This is a type of social engineering fraud and it basically involves criminals pretending to be a good Samaritan and trying to help a customer. However, amidst their smiles and help, they quickly memorize the number and the PIN and use it to create havoc. It is important to always employ constant vigilance when using ATM cards, whether to withdraw cash or transact online. After all, they are an integral part of our financial identities nowadays and cause great harm if they fall into the wrong hands. The post Know your ATM card and the various frauds related to it appeared first on Quick Heal Blog | Latest computer security news,…

πŸ“– Read

via "Quick Heal Blog | Latest computer security news, tips, and advice".
❔ The Need For Anti-Virus As Mobile Wallet Transactions Hit Record 14,170 Crore ❔

Estimated reading time: 2 minutesAfter mobile wallet transactions experienced a setback owing to the mandatory know-your-customer (KYC) requirements in March, mobile wallet companies have bounced back with a record transaction of 14,170 crore in May, the highest recorded transaction after January. Thus, M-Wallets are back in vogue with companies once again succeeding in convincing their customers to trust this mode of virtual access to their hard earned money. In fact, its not just the Mobile Wallets that is breaking records, even card transactions and mobile banking have reached a record peak. However, what people fail to realize is the necessity to secure this virtual or mobile access to money with the right anti-virus and M-wallet companies hardly seem to care about this risk.  Quick Heal Security Labs detected a malware known as Android.banker.A2f8a, which is basically an Android Banking Trojan that targets over 232 banking apps. The Trojan is  designed to hijack SMSs, steal login credentials and upload contact list on malicious server, to display an overlay screen on legitimate apps so that the user is completely unaware of the malicious activities going on while they are busy doing transactions. Given the recorded increase in the number of smartphone users and the fact that digital transactions in India have reached $2 Tn doing, such virus detection is an eye opener and should be considered a serious threat not just for customers but also for banks and mobile wallet companies. One company to have already made an initiative in this regard is Paytm with its new β€˜Wallet Insurance Schemeβ€˜ introduced to safeguard Paytm Wallet money. Under this scheme, all Paytm users having balance in their wallets will be automatically insured with no additional cost and automatic refund of lost money to their Paytm wallets. How To Stay Safe With Quick Heal? Being the most preferred cyber-security partner and having already detected the Android Banking Trojan and many more malware, the simplest way to safeguard your mobile wallets and online transactions is to install Quick Heal Total Security App that significantly reduces threats to transaction apps like mobile wallets and banking apps. One important addition to this app is SafePe, specifically designed to counter payment threats and mobile banking by: Ensuring that your mobile network and phone are safe while making online Proactively detecting tampering and infections on your phone by any advanced malware and pushing alert notifications before you can make the online transaction. Checking if you are using a secure website (HTTPS) while making online payments. Checking if your smartphone is rooted or not since a rooted phone can be easily hacked by attackers for stealing confidential information. Ensuring that your phone is free from any banking Trojan, spyware and data-stealing So, basically SafePe is designed to take all the necessary steps needed to mitigate security threats on your mobile phone while you bank, shop or pay online using your banking apps and mobile wallets. So, while banks and M-Wallet companies are busy convincing customers to provide required KYC, a more priority need is to convince customers to start installing anti-virus and not trust mobile transactions blindly. Quick Heal on its part can play a significant role is helping Mobile Wallet companies to save huge overhead costs on reimbursing insurance amount, by safeguarding their system against critical virus attacks. The post The Need For Anti-Virus As Mobile Wallet Transactions Hit Record 14,170 Crore appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

πŸ“– Read

via "Quick Heal Blog | Latest computer security news, tips, and advice".
⚠ Millions of Twitter DMs may have been exposed by year-long bug ⚠

Though the bug was present for over a year, Twitter hasn't found any DMs or protected tweets that were delivered to the wrong developer.

πŸ“– Read

via "Naked Security".
⚠ Facebook scolds police for using fake accounts to snoop on citizens ⚠

Put down that β€œBob Smith” fake account and back off, Facebook told the Memphis Police Department, waving its real-names policy in the air.

πŸ“– Read

via "Naked Security".
⚠ Domain flub leaves 30 million customers high and dry ⚠

Zoho's CEO begged for help on Twitter after his domain registrar effectively took the company offline, stranding millions of users.

πŸ“– Read

via "Naked Security".
⚠ Microsoft is killing passwords one announcement at a time ⚠

Windows 10 and Office 365 users can now log in to Azure AD applications using only the Authenticator App.

πŸ“– Read

via "Naked Security".
πŸ” The top 10 security challenges SMBs face πŸ”

SMBs are at an increased risk for cyberattacks, including ransomware, DDoS attacks, and insider exfiltration, according to a Cisco report.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ USB Drives Remain Critical Cyberthreat πŸ•΄

USB thumb drives may be used less frequently than before, but they are still commonly used as infection vectors for a wide variety of malware.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Mirai Authors Escape Jail Time - But Here Are 7 Other Criminal Hackers Who Didn't πŸ•΄

Courts are getting tougher on the cybercrooks than some might realize.

πŸ“– Read

via "Dark Reading: ".
πŸ” How to install and use the PassFF Firefox password manager πŸ”

Searching for a more efficient way to securely manage website passwords? PassFF may be your solution.

πŸ“– Read

via "Security on TechRepublic".
⚠ Finally, a fix for the encrypted web’s Achilles’ heel ⚠

Everyone knew that SNI needed to be fixed sooner or later, but nobody was quite sure how.

πŸ“– Read

via "Naked Security".
πŸ” How the malware landscape is evolving πŸ”

We still have a massive number of hacks and malware coming in through phishing and older "tricks," says Franc Artes, Architect of Security Business at Cisco.

πŸ“– Read

via "Security on TechRepublic".