A vulnerability in the popular Whatsapp has allowed it to be infected with spyware, with a missed in-app call function. It is unclear how many devices have been affected or the extent of the damage caused, but owing to the breach, discovered in early May, Whatsapp is urging people toRead More…
A major remote code execution vulnerability has been discovered in products from Kaspersky Lab, which pushed out a patch to customers in early April. The flaw, called CVE-2019-8285 and assigned a CVSS score of 8.0, was reported to Kaspersky by a team called “Imaginary.” The experts found a way to remotely execute arbitraryRead More…
According to the latest ESET IoT research, D-Link cloud camera DCS-2132L suffers from multiple security vulnerabilities, which can open the door to unauthorized actors. Based on disclosed information, the manufacturer mitigated some of the reported vulnerabilities, yet others still loom.Read More…
John Maddison, EVP of products and solutions, Fortinet, says that the challenge of securing our networks is accelerating, primarily in direct response to digital transformation efforts that are expanding the attack surface. Cybercriminals are all too eager to exploit new attack vectors and take advantage of new limitations in our visibility andRead More…
An international cybercrime group has attacked the networks of three unnamed US-based antivirus firms and stolen approximately 30 terabytes of data. The group is offering to sell the data, as well as access to the company networks for a sum of $300,000. As first reported by Ars Technica, the “boutique cybersecurityRead More…
A massive fraud let scammers steal money from Amazon merchants for a six-month period in 2018, the online retailer revealed. Almost a 100 accounts of merchants who sell their products via Amazon were affected, a report from Bloomberg said. The report added that the scammers changed bank details on AmazonRead More…
A VPN software named ”Pirate Chick” is being installed by Adware bundles, which connects to a remote server to download and install malicious payloads such the AZORult password-stealing Trojan. Since adware bundles need to look as legitimate as possible, they require offers that they promote to have legitimate web sites with privacyRead More…
Officials at Qihoo 360, a leading Chinese cybersecurity firm, have revealed an ongoing credit card scam that steals the card payment information of thousands of customers visiting leading e-commerce websites. Researchers discovered that attackers have been injecting malicious JS scripts hosted on a malicious domain, www.magento-analytics [.] com, onto onlineRead More…
