LATEST NEWS
Hacker successfully installs four different Operating Systems on a Windows Phone
1 min ago It has been a while since Microsoft has added features to Windows 10 Mobile and the company has confirmed that it won’t be …
Meet TLBleed: A crypto-key-leaking CPU attack that Intel reckons we shouldn’t worry about
Intel has, for now, no plans to specifically address a side-channel vulnerability in its processors that can be potentially exploited by …
WannaCry ransomware scam tries to extort money without actually infecting your computer
Someone is trying to pull a fast one, attempting to trick unsuspecting users into paying a ransom… even though they *haven’t* infected …
Illinois Declines to Adopt Proposed Arbitrary Drone Surveillance of Protests
Observers often forget that surveillance offends not only privacy, but also the right to dissent. A recently defeated Illinois bill …
A hacker figured out how to brute force iPhone passcodes
A security researcher has figured out how to brute-force a passcode on any up-to-date iPhone or iPad, bypassing the software’s security …
Supreme Court: Police Need Warrant for Mobile Location Data
The U.S. Supreme Court today ruled that the government needs to obtain a court-ordered warrant to gather location data on mobile device …
In huge privacy win, US Supreme Court rules warrant needed to slurp folks’ location data
In a decision that will define privacy in the digital age, the US Supreme Court decided 5-4 on Friday that the government needs a warrant …
scanless – A Tool for Perform Anonymous Port Scan on Target Websites
Network Penetration Testing determines vulnerabilities on the network posture by discovering Open ports, Troubleshooting live systems, …
Scammers Attack Email Inboxes With A Ransomware Protection Racket
Security researchers have spotted a new wave of ransomware attacks, but there’s something different about this one. It seems as though …
Ruling Reaffirms Individuals Cannot File HIPAA Lawsuits
A federal court recently dismissed a case filed by a patient alleging a laboratory violated HIPAA by failing to shield from public view her …
In huge privacy win, US Supreme Court rules warrant needed for location data
In a decision that will define privacy in the digital age, the US Supreme Court decided 5-4 on Friday that the government needs a warrant …
US Supreme Court says no to warantless location searches
The Supreme court has just delivered a new judgement that prohibits warrantless seizure of location records by the police. The …
Agari gets $40 million investment to protect organizations from phishing, spoofing
Agari, a company that uses artificial intelligence to protect organizations from email threats, announced Friday that it earned $40 million …
Default Passwords Aid Satori IoT Botnet Attacks
Researchers at Netlab 360 detected a surge in malicious activity scanning and infecting several IoT devices, attempting to make them part …
Bill Could Give Californians Unprecedented Control Over Data
have introduced a sweeping privacy bill to the state legislature that would give Californians unprecedented control over their data and …
Afghan-Based Attack Disguised as News
Researchers have detected a new Afghanistan-based attack disguised as a recent article from a Middle Eastern news network about the next …
CISO Thom Langford’s Top Tips for GDPR Compliance
Thom Langford, CISO, Publicis Groupe Three years ago, communications giant Publicis Groupe launched its EU General Data Protection …
Security Pros Expect Rise in Nation-State Attacks
Nation-state attacks are a mounting concern for security professionals, who reportedly expect to see a rise in cyber-attacks amid the …
US Lawmakers Urge Google To Disengage With Huawei Over Security Concerns
Could Huawei, a Chinese telecommunications company, be a threat to American national security? The United States Congress recently urged …
How Contextual Data on Domains Helps Combat Online Attacks
Michael Jones, vice president of products, Domain Tools Studying domain ownership gives organizations “contextual data around domains that …
Enterprise IT/OT: Better Collaboration, But Not Perfect
Tim Erlin, vice president of product management & strategy, Tripwire Internet-connected devices inside the enterprise: There are many more …
US Lawmakers Urge Google Disengage With Huawei Over Security Concerns
Could Huawei, a Chinese telecommunications company, be a threat to American national security? The United States Congress recently urged …
Cracking Cortana: The Dangers of Flawed Voice Assistants
Security vs. convenience is a delicate balance to strike with new technology designed to make our lives …
Crooks exploit CVE-2018-7602 Drupal flaw, aka Drupalgeddon3 to deliver Monero miner
Crooks are attempting to exploit a recently patched Drupal vulnerability, tracked as CVE-2018-7602, to drop Monero mining malware onto …
Add Authorization to Your ASP.NET MVC 4.x App With OpenID Connect
A common practice in web applications is to have a restricted area for registered users and, perhaps, another for administrators. Whether …
CVE-2018-12658 – Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3 …
Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an …
‘Pay Up or Get WannaCry Hit’ Extortion Email Spreading
A widespread new email scam purportedly from the WannaCry hackers attempts to shake down potential victims with threats of the ransomware …
Carpenter v. United States Decision Strengthens Digital Privacy
anticipated decision released Friday, the US Supreme Court updated Fourth Amendment protections for the digital era. In a 5-4 ruling, the …
Lacework Warns of Unsecured Container Orchestration Dashboards
Today’s topics include a Lacework study finding 300 unsecured container orchestration dashboards, and HPE adding a hybrid …
phpMyAdmin 4.8.1 Local File Inclusion
phpMyAdmin version 4.8.1 suffers from an authenticated local file inclusion …
Why Data Classification Has Gone Mainstream
Driven by the EU’s General Data Protection Regulation and other regulations, as well as the move to the cloud, more organizations are …
‘Pay Up or Get WannaCry-Hit’ Extortion Email Spreading
A widespread new email scam purportedly from the WannaCry hackers attempts to shake down potential victims with threats of the ransomware …
White House picks new chief to overlook cyber-weapons group
The White House has a new leader of a largely secretive government group that decides whether software and hardware vulnerabilities should …
Supreme Court Says Cops Need to Get a Warrant to Get Your Phone Location Data
The Supreme Court of the United States just scored a huge victory for digital privacy rights, ruling that cops need a warrant to access …
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 18, 2018
As I pull together the list of zero-day filters for this blog, I see all types of vulnerabilities from various vendors. My interest is …
In private briefings, U.S. government raises concerns over Huawei and ZTE
The U.S. government has been quietly warning technology companies about the security risks posed by doing business with Huawei and ZTE, two …