Latest Apple Update Fixes Web Security Flaw On Most Devices
Recently, two different security researchers (Clement Lecigne of Google’s Threat Analysis Group, and Alison Huffman from Microsoft’s Browser Vulnerability Research Group) discovered a pair of serious security vulnerability impacting Apple devices. The bugs, tracked as CVE-2021-1844 and CVE-2021-21166 respectively, are browser-based memory issues that could have allowed remote code execution if the victim navigated or […]
Hacker Uses Zoom Invites To Steal Credentials Through Sendgrid
There’s a mix of bad news and good in the ongoing war against the hackers of the world. For the bad news, security professionals have recently detected a sophisticated phishing campaign that makes use of SendGrid and convincing replicas of Outlook on the Web and Office 365 logins to harvest credentials. The attack works like […]
New Exchange Online Feature Helps Prevent Phishing And Ransomware
Microsoft has been busy of late, making a raft of improvements to their email system that are designed to enhance user security. Not long ago, they added a fantastically useful feature called ‘Plus Addressing’ which allows Office 365 users to make use of an unlimited number of disposable recipient email addresses and track email sources. […]
A United States Bank Hit By Ransomware And Data Breach
A few months ago, it became widely known that there was a critical security vulnerability in Accellion FTA servers. Naturally, hackers wasted no time exploiting the vulnerability, and since then, we’ve seen a few instances of high-profile data breaches traced back to that very vulnerability. Flagstar bank is the latest such victim. Recently, the company […]
Ransomware Attackers Demand 20 Million From U.S. Kia Motors
Strange things are afoot at Kia Motors America (KMA), a subsidiary of Kia Motors with more than 800 dealerships scattered across the United States. Recently the company has reported a nationwide IT outage that is impacting their mobile UVO Link apps, phone services, the company’s payment system, and a number of dealer-specific applications. If you’re […]
Another Malware Attack On Mac Systems Has Been Discovered
Barely a week ago, Patrick Wardle announced the discovery of the first piece of malware capable of slipping past the defenses of Apple’s M1, which was considered to be among the most secure commercially available technology. Now, it seems, there are two. Researchers from Red Canary and Malwarebytes jointly discovered an insidious, stealthy malware strain […]
Large Supermarket Chain Kroger Suffers Data Breach
Kroger, a titan in the US supermarket industry, is the latest company to fall victim to a data breach. In this case, the breach came about via a third-party service the company utilized called Accellion FTA. Hackers were able to exploit a Zero-Day vulnerability in that software and use it to steal data from vendors […]
Google To Add Password Breach Prevention Feature To Android
If you’re a Google Chrome user, then you’ve probably already used or at least seen the Password Checkup feature in action. It’s the little popup box you see when you type in a password to a website that requires a login and Chrome detects that the password has been compromised. At that point, you’ll get […]
Trusted Google Domain Helped Hackers Get Past Security
Hackers have found a new tool in their never-ending quest to cause trouble. They’ve begun abusing the Apps Script business application developed by Google in a bid to steal credit card and personally identifiable information. That’s significant because given Google’s dominant position on the internet, the Apps Script is widely trusted by the market. That […]
Major Security Issues Found With Popular Android App
Do you use the app “ShareIt?” It’s one of the most popular apps in the ecosystem, boasting more than a billion downloads from Google’s Play Store and nearly 2 billion downloads overall (including the Windows, iOS and MacOS ecosystems). On top of that, its original creator, Lenovo, preinstalled it on all Lenovo phones, which may […]