Archive - October 2019

ELK Stack: Exploit for Kibana remote code execution flaw released on GitHub 31 October 2019 at 16:54 UTC Bug Bounty Radar // October 2019 31 October 2019 at 15:46 UTC Millions obliged to reset passwords after breaches at Network Solutions and Web.com 31 October 2019 at 13:12 UTC CVE program marks 20th anniversary as registered security vulnerabilities soar 30 October 2019 at 16:05 UTC Internet founders call for cyber reform to tackle abuse by government and cybercrooks 30 October 2019 at 14:51 UTC A guide to spear-phishing – how to protect against targeted attacks 30 October 2019 at 12:20 UTC Johannesburg cyber-attack: City chiefs resist ultimatum as ransom deadline passes 29 October 2019 at 17:30 UTC Massive stolen credit card sale features 1.3m mostly Indian records 29 October 2019 at 16:20 UTC ARPANET anniversary: The internet’s first transmission was sent 50 years ago today 29 October 2019 at 14:31 UTC Project Zero discloses UXSS in Safari WebKit 29 October 2019 at 12:21 UTC Ransomware first responder: ‘The bad guys are getting smarter’ 28 October 2019 at 16:00 UTC Pwn2Own to launch industrial control systems contest at 2020 Miami event 28 October 2019 at 14:20 UTC RCE vulnerability impacts XML developer environments 28 October 2019 at 12:11 UTC US healthcare breach may have exposed records of 130,000 Montana patients 25 October 2019 at 14:59 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Oct 25) 25 October 2019 at 13:47 UTC YesWeHack: ‘The idea is to be a European alternative to the US bug bounty platforms’ 24 October 2019 at 15:21 UTC Spanish police arrest three in $11.9m phishing scam probe 24 October 2019 at 13:49 UTC Snuffleupagus: Open source security tool hardens PHP sites against cyber-attacks 24 October 2019 at 11:26 UTC Gone phishing: NCSC hails Active Cyber Defence success 23 October 2019 at 17:23 UTC Los Angeles Superior Court hacker handed 12-year prison sentence 23 October 2019 at 14:38 UTC Healthcare CISO: ‘Throwing money at security doesn’t make a company secure’ 23 October 2019 at 13:46 UTC Firefox 70: Browser revamp bundles password manager and multiple security fixes 23 October 2019 at 11:46 UTC VPN vendors contest impact of certificate breaches 22 October 2019 at 16:00 UTC Russian cybercrooks co-opted Iranian hacking tools to attack dozens of countries 22 October 2019 at 13:58 UTC Project fear? Expanded Thai data collection law raises privacy hackles 22 October 2019 at 10:36 UTC Nostromo web servers exposed by resurrected RCE vulnerability 21 October 2019 at 16:05 UTC Avast claims success in thwarting ‘copycat’ CCleaner hack 21 October 2019 at 14:46 UTC ‘Cybersecurity is more than just protecting devices’ 21 October 2019 at 11:48 UTC Google extends Site Isolation security feature to Chrome for Android 18 October 2019 at 15:40 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Oct 18) 18 October 2019 at 14:44 UTC Shhgit hits the fan: Watch users leak secrets in real-time 18 October 2019 at 13:05 UTC First cryptojacking worm to abuse containers arrives on Docker 17 October 2019 at 15:32 UTC Digital rights in Ethiopia: Change in government spurs hopes for cybercrime law review 17 October 2019 at 13:17 UTC Anonymized DNS technology emerges from the shadows 17 October 2019 at 10:37 UTC California expands data breach notification law to include passport and biometric data 16 October 2019 at 14:59 UTC Domain squatting malfeasance ratchets up ahead of US presidential election 16 October 2019 at 12:01 UTC US university tackles healthcare cybersecurity woes with first national program 15 October 2019 at 13:59 UTC WordPress 5.2.4: Security release addresses numerous vulnerabilities 15 October 2019 at 12:57 UTC Crypto-exchange admins targeted with malware-ridden trading app 15 October 2019 at 10:23 UTC Firefox vulnerable to trivial CSP bypass 14 October 2019 at 13:50 UTC Millions of computers at risk as Windows 7 nears end of life 14 October 2019 at 11:28 UTC US Department of Defense unveils second ‘Hack the Army’ bug bounty program 11 October 2019 at 16:28 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Oct 11) 11 October 2019 at 12:49 UTC Imperva releases post-mortem over August data breach 11 October 2019 at 11:25 UTC Sex worker client forum breach linked to vBulletin hack 10 October 2019 at 15:46 UTC Questions remain after speaker cancellation at Australian CyberCon 10 October 2019 at 14:45 UTC Open Sesame: e-commerce stores count the cost of Magecart infection 10 October 2019 at 12:55 UTC Ransomware still dominates the cyber threat landscape in 2019 – Europol report 09 October 2019 at 15:55 UTC US healthcare provider admits data breach 09 October 2019 at 14:57 UTC Incoming! Microsoft’s Patch Tuesday bugs fall like leaves in autumn 09 October 2019 at 12:19 UTC IoT security: ‘Smart’ doorbell unlocks homes to unauthorized visitors 09 October 2019 at 10:00 UTC The complete package: Everything you need to know about npm security 08 October 2019 at 14:40 UTC Sberbank of Russia completes investigation into dark web data leak 08 October 2019 at 12:02 UTC Autopsy class in HackMD flaws offered 07 October 2019 at 16:05 UTC Reductor malware bundles tricks to compromise TLS traffic 07 October 2019 at 14:37 UTC Scotland to modernize criminal proceedings with new digital evidence sharing database 07 October 2019 at 11:26 UTC Sberbank data breach: Russian lender investigates insider threat 04 October 2019 at 15:14 UTC #SocialSec – Hot takes on this week’s biggest cybersecurity news (Oct 4) 04 October 2019 at 14:21 UTC Domain names and DNS are being ‘weaponized’ to spread political propaganda 04 October 2019 at 13:33 UTC Security vendors seek to tackle growing stalkerware threat 03 October 2019 at 16:05 UTC #CyberSecMonth: Consumers encouraged to take personal responsibility for improving their security 03 October 2019 at 14:50 UTC OpSec errors provide glimpse into the world of botnet operations 03 October 2019 at 11:51 UTC Researchers discover ‘severe weaknesses’ in PDF encryption standard 03 October 2019 at 10:59 UTC Region-specific software offers rich pickings for state-sponsored attackers 02 October 2019 at 17:17 UTC Thomas Cook: Security firm issues warning over online fraudsters 02 October 2019 at 14:55 UTC Cybersecurity month 2019: Citizens of Belgium urged to report phishing emails 02 October 2019 at 12:22 UTC Another UXSS bug found in Safari WebKit 01 October 2019 at 14:57 UTC Comodo stung by vBulletin forum exploit 01 October 2019 at 13:17 UTC Indian gov’t launches cybercrime reporting tool 01 October 2019 at 11:27 UTC