Top

Category: Threats & Malware

Threats and Malware


Data loss, Threats & Malware

Slack in the security spotlight – lessons for collaboration servers

April 8, 2020

Via: Naked Security

Researchers at German pentesting company Enable Security just published an intriguing blog post about a security problem they found in the popular online collaboration tool Slack. The short version is that they uncovered a way to poke around inside the […]


Network security, Security, Spam, Threats & Malware

WhatsApp new policy limits forwarding of viral messages

April 8, 2020

Via: Security Affairs

WhatsApp implements a new policy on message forwarding to curb the spread of misinformation about the Coronavirus pandemic. With COVID19 outbreak the number of fake news that is spreading through social networks and instant messaging apps is growing exponentially. The […]


Mobile, Mobile security, Threats & Malware, Vulnerabilities

Official Government COVID-19 Mobile Apps Hide a Raft of Threats

April 7, 2020

Via: Threat Post

A rash of COVID-19 Android mobile apps have emerged that are aimed at helping citizens in Iran, Italy and Colombia track symptoms and virus infections. However, they’re also putting people’s privacy and the security of their data at risk, researchers […]


Email security, Hacker, Security, Threats & Malware

Italian email provider Email.it hacked, data of 600k users available for sale

April 7, 2020

Via: Security Affairs

The Italian email provider Email.it has been hacked, the company admitted the incident while a hacker group named NN Hacking Group is offering the stolen data for sale on the dark web. The group shared a series of snapshots on […]


Data loss, Threats & Malware

Data Leak: Private information of 14 million Key Ring users exposed

April 6, 2020

Via: Hot for Security

Five misconfigured Amazon Web Services (AWS) S3 buckets revealing private data of Key Ring users were discovered by vpnMentor researchers in January. Like many similar apps, Key Ring lets users store digital copies of their loyalty cards, create a shopping […]


Threats & Malware, Vulnerabilities

Security Think Tank: Why and how cyber criminals exploit world events

April 6, 2020

Via: Computer Weekly

Cyber criminals, APT actors and others who pose a threat to businesses and individuals are impacted and influenced by world events just like the rest of us. However, they will also use these events, as well as cultural events, to […]


Threats & Malware, Vulnerabilities

100,000 WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack

April 3, 2020

Via: Security Affairs

Administrators of WordPress sites using the Contact Form 7 Datepicker plugin are recommended to remove or deactivate it to prevent attackers from exploiting a stored cross-site scripting (XSS) vulnerability to create rogue admins or taking over admin sessions. The ‘Contact […]


Cyber-crime, Hacker, Malware, Threats & Malware

Magecart group 7 use new e-skimmer to steal payment data

April 3, 2020

Via: Security Affairs

Researchers from security firm RiskIQ have uncovered a new ongoing Magecart campaign that already compromised at least 19 different e-commerce websites to steal customers’ payment card data. The experts discovered a new software skimmer, dubbed “MakeFrame,” that injects HTML iframes […]


Spam, Threats & Malware

Phone carriers must authenticate calls to fight robocalls, says FCC

April 2, 2020

Via: Naked Security

The US Federal Communications Commission (FCC) on Tuesday unanimously passed new rules that require wireless carriers to implement a technology framework – by June 2021 – to filter out robocalls. This one’s been kicking around for years: it’s called STIR/SHAKEN. […]


Threats & Malware, Vulnerabilities

Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks

April 2, 2020

Via: Security Affairs

Microsoft is warning dozens of hospitals of the risks of ransomware attacks due to insecure VPN devices and gateways exposed online. Recently Microsoft has published details about human-operated ransomware attacks that targeted organizations in various industries. Human-operated ransomware is a […]