When a verified celebrity account posts a tweet, a fraud account using the same image and display name responds with a scam offer.
Microsoft Debuts Bug Bounty for Spectre/Meltdown-Style Flaws
Microsoft has launched the limited-time bounty, while Intel launches a “virtual fences” hardware redesign.
Dragonfly Compromises Core Router to Attack Critical Infrastructure
A core Cisco router relied on by one of Vietnam’s largest oil rig manufacturers was the jumping-off point for attacks on UK energy companies.
Recovering Plaintext Passwords from Azure Virtual Machines
Security design flaw in the VM Access plugin that may enable a cross platform attack impacting every machine type provided by Azure. Read More…
Firefox Bug Goes Unfixed for Nine Years
Software developer discovers flaw in Firefox and Thunderbird’s password manager
Cambridge Analytica Under Fire for Data Harvesting
Data analytics firm accused of harvesting millions of Facebook profiles of US voters
Researchers Discover Security Issue on Chrome RDP
Bug discovered that allows a guest user full access to an administer’s machine using Chrome Remote Desktop
GandCrab Ransomware Finds a New Shell
This well-known malware has gotten around a free decryption tool meant to dull its claws by building a new version in just days.
Walmart Jewelry Partner Exposes Millions in Latest Cloud Storage Misconfig
MBM/Limogés Jewelry exposed data that can be used to carry out targeted fraud or phishing attempts.
DHS, FBI Warn on Russian State Actors Targeting Critical Infrastructure
The US is warning that Russian state-sponsored cyber-attackers are targeting critical infrastructure – including nuclear sites.