Spotify Suffers Second Credential-Stuffing Cyberattack in 3 Months
As many as 100,000 of the music streaming service’s customers could face account takeover.
Read More
Web Security
Critical Cisco Flaws Open VPN Routers Up to RCE Attacks
The vulnerabilities exist in Cisco’s RV160, RV160W, RV260, RV260P, and RV260W VPN routers for small businesses.
Read MoreMicrosoft Office 365 Attacks Sparked from Google Firebase
A savvy phishing campaign manages to evade native Microsoft security defenses, looking to steal O365 credentials.
Read MoreCrypto Crook Hired Steven Seagal to Promote Scam, Now Faces Charges
Feds charged California-based private detective for stealing $11M from investors, with help from actor Steven Seagal.
Read MoreTiny Kobalos Malware Bedevils Supercomputers to Steal Logins
The sophisticated backdoor steals SSH credentials for servers in academic and scientific high-performance computing clusters.
Read MoreMagento Web Skimmers Piggyback in Ongoing Costway Website Compromise
An e-commerce credit-card skimmer is being used by a second skimmer to steal payment data – and both are on Costway’s website.
Read MoreIdentity Theft Spikes Due to COVID-19 Relief
Cases reported to the FTC doubled last year as cybercriminals took advantage of increased filing for government relief benefits due to the pandemic.
Read MoreHezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers
Enhanced Explosive RAT and Caterpillar tools are at the forefront of a global espionage campaign.
Read MoreWordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites
The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites.
Read MoreMicrosoft 365 Becomes Haven for BEC Innovation
Two new phishing tactics use the platform’s automated responses to evade email filters.
Read More