News
-
"Vulnerabilities in Two Schneider Electric ICS Products Reminiscent of Stuxnet"Trustwave's Global OT/IoT security research team discovered security flaws in two Schneider Electric industrial control systems (ICS) products. Trustwave analysts demonstrated the possibility of malicious actors exploiting the vulnerabilities found in… -
"Critical WordPress Plugin Bug Lets Hackers Take Over 1M Sites"Wordfence's Threat Intelligence team has reported attempts by threat actors to exploit two security vulnerabilities in the Elementor Pro and Ultimate Addons for Elementor WordPress plugins. The abuse of these vulnerabilities can allow attackers to…
-
"GoDaddy Confirms Breach Affecting 28,000 Accounts: Report"GoDaddy recently discovered a data breach that affected about 28,000 of its customers' web hosting accounts. The company believes that no data was altered or stolen. The security incident occurred in October 2019 but was not discovered until…
-
"Most Attacks Don't Generate Security Alerts: Mandiant"FireEye's Mandiant Security Validation team's 2020 Mandiant Security Effectiveness Report reveals that only a small percentage of attacks trigger security alerts, and more than 50% of successful intrusions go undetected by security solutions. The report…
-
"Attackers Adapt Techniques to Pandemic Reality"Recent studies by Palo Alto Networks and Mimecast highlight threat actors' continued exploitation of fear and interest surrounding the coronavirus outbreak to increase the success of phishing and social engineering attacks. According to Palo Alto…
-
"Kaiji Botnet Targets Linux Servers, IoT Devices"Researchers at a security firm called Intezer have discovered a new botnet called Kaiji. The Kaiji botnet is spreading by targeting SSH protocols, which use encryption to establish a remote link between a device and a server. It uses brute-…
-
"We Believe We're Less Likely Than Others Are to Fall for Online Scams"A new cybersecurity study by researchers at New York University shows that when people assess their exposure to risk, they believe they are less likely than others to engage in activities that would increase their vulnerability to online attacks.…
-
"Password Psychology: People Aren’t Protecting Themselves Even Though They Know Better"In a new global survey, researchers polled 3,250 individuals across the United States, Singapore, Australia, Germany, Brazil, and the United Kingdom. The researchers found that there is a heightened global awareness of what are good security…
-
"Power Supply Can Turn Into Speaker for Data Exfiltration Over Air Gap"Mordechai Guri, researcher at the Ben-Gurion University of the Negev, has demonstrated another method to steal data from an air-gapped system that involves the abuse of the power supply. The attack method, called POWER-SUPPLaY, is performed by…
-
"FINRA Warns of Phishing Emails Targeting Members"The Financial Industry Regulatory Authority (FINRA), a private organization that helps self-regulate brokerage firms and exchange markets in the U.S., has discovered that there is a widespread, ongoing phishing campaign that is targeting their members.…
-
"Security Warning: State-Backed Hackers Are Trying to Steal Coronavirus Research"The UK's National Cyber Security Centre (NCSC) and the US Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA) issued a joint warning about the targeting of healthcare organizations by state-sponsored hacking…
-
"Ghost Blogging Platform Servers Hacked to Mine Cryptocurrency"A popular blogging platform called Ghost has recently discovered that adversaries gained access to its IT infrastructure and installed cryptocurrency-mining malware on it. The intrusion occurred in the early hours of May 3rd and affected Ghost(Pro…