Personal data and payment information of Sears and Delta Air Lines customers may have been exposed in a data breach last year. Sears and Delta said they were informed lastRead More →
Facebook CEO Mark Zuckerberg revealed that all of its 2.2 billion users should assume their public data has been compromised by third-party scrapers. The source of this vulnerability is Facebook’sRead More →
In past researches, information security training experts examined internet-connected medical-related devices and systems such as databases, hospital admin consoles, and medical devices. The professionals also looked into the supply chain, which hasRead More →
A Mandarin character in an error message on the inaccessible website of the ministry of defense, and a tweet by the defense minister that hinted at a possible hacking, followedRead More →
Information security training experts from MindPoint Group, an information security firm, have hijacked over 2,000 subdomains from legitimate websites while researching possible vulnerabilities in Amazon’s CloudFront CDN service. Experts foundRead More →
Leastways 1,000 Magento based websites including shops have been targeted and infected with this malware, say the information security training researchers. Threat analysis and cyber-security intelligence firm Flashpoint stated thatRead More →
Intel won’t fix Meltdown nor Spectre for 10 product families covering 230-plus CPUs. Intel has issued new “microcode revision guidance” that reveals it won’t address the Meltdown and Spectre designRead More →
Grindr shared personal, HIV and geolocation-related data with two of its third-party contractors without informing users, information security training researchers said. As a way to make relationships safer, the gayRead More →
WhatsApp cofounder Brian Acton expressed outrage at Facebook’s privacy policies last month by tweeting “It is time. #deletefacebook.” But WhatsApp’s Facebook-like group chat features also have design flaws that jeopardize user privacy. Maybe it’sRead More →
Panera didn’t fix flaw for 8 months; 37 million records were allegedly exposed. Eight months ago, Panera Bread was notified of a security flaw that was leaking customer information toRead More →
The njRAT, also famed as Bladabindi, has been upgraded to push Lime Ransomware and a Bitcoin wallet stealer. According to a Zscaler blog post, this trojan was first spotted inRead More →
A Windows-based keylogger and information stealer that falsely poses as Kaspersky antivirus software and spreads via infected USB devices was discovered by information security training researchers. The malware, labeled Fauxpersky, is alsoRead More →
Taipan is an automated web application scanner which allows identifying web vulnerabilities in an automatic way, the information security training professional explain. This project is the core engine of a broader projectRead More →
A bill was passed yesterday by the state of Georgia that causes any unauthorized access to a computer to be considered “Unauthorized Computer Access” and “shall be punished for aRead More →
Data protection, whether related to personal customer or patient information, is critical across virtually all industries. A survey made by information security trainingresearchers revealed that while USB drives are ubiquitous andRead More →
Hackers could be exploited a vulnerability in the iOS Camera App to redirect users to a malicious website, the issue affects the built-in QR code reader. According to information security training researchers,Read More →
Invoke-DOSfuscation is a PowerShell v2.0+ compatible cmd.exe command obfuscation framework. (White paper: https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html) Over the past several years we witnessed a myriad of obfuscation and evasion techniques employed by several threatRead More →
Five million stolen credit and debit cards offered for sale starting March 28 by the JokerStash hacking syndicate known as Fin7. Information security training experts believe that are likely cameRead More →
Facebook Vice President Andrew “Boz” Bosworth is known for being blunt and direct at Facebook’s meetings. His Twitter description calls him “co-inventor of News Feed, Messenger, Groups, and more.” InRead More →
A Russian man on Friday pleaded not guilty to charges he hacked three U.S. technology companies, potentially compromising personal details of more than 100 million users, including on LinkedIn, afterRead More →
