Search Results for “”

FBI: Use a Burner Phone at the Olympics

The warning follows a Citizen Lab report that found the official, mandatory app has an encryption flaw that “can be trivially sidestepped.” Besides burners, here are more tips on staying…
Read more

Unpatched Security Bugs in Medical Wearables Allow Patient Tracking, Data Theft

Rising critical unpatched vulnerabilities and a lack of encryption leave medical device data defenseless, researcher warn.

The Account Takeover Cat-and-Mouse Game

ATO attacks are evolving. Jason Kent, hacker-in-residence at Cequence Security, discusses what new-style cyberattacks look like in the wild.

Samba ‘Fruit’ Bug Allows RCE, Full Root User Access

The issue in the file-sharing and interop platform also affects Red Hat, SUSE Linux and Ubuntu packages.

Living Off the Land: How to Defend Against Malicious Use of Legitimate Utilities

LOLBins help attackers become invisible to security platforms. Uptycs provides a rundown of the most commonly abused native utilities for Windows, Linux and macOS – and advice for protection.

Public Exploit Released for Windows 10 Bug

The vulnerability affects all unpatched Windows 10 versions following a messy Microsoft January update.

Apple Pays $100.5K Bug Bounty for Mac Webcam Hack

The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also “hack every website you’ve ever visited.”

NSO Group Pegasus Spyware Aims at Finnish Diplomats

Finland is weathering a bout of Pegasus infections, along with a Facebook Messenger phishing scam.

Lazarus APT Uses Windows Update to Spew Malware

The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2.

Zerodium Spikes Payout for Zero-Click Outlook Zero-Days

The sweetened deal came on the same day that Trustwave SpiderLabs published a new way to bypass Outlook security to deliver malicious links to victims.