CVE-2021-3005: Undefined Security Weakness

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

Brazilian Government IDs Used as Spear Phish Bait

Brazilians are the target of new and devilishly convincing e-mail-based scams that purport to be official customer communication from a large Brazilian bank and use stolen identity data to convince victims that the message is for real. According to a post on Kaspersky Lab’s Securelist blog,...