As Black Friday Looms, IoT Gadgets Take the Risk Spotlight

With the holiday shopping season poised to officially kick off this weekend, it’s likely that connected gadgets and toys are high atop many a consumer wish-list. As those of us in the security space know, however, internet of things IoT devices can quickly go from fun to creepy, depending on how...

Black Friday Scams: Shop Safely with These Tips

By Carolina Black Friday is just around the corner and here's how you can protect yourself from Black Friday Scams. All the shopaholics around the globe are gearing up for availing the best deal for their bucks. People wait for Black Friday the entire year because, on this day, all the retail...

Beware Black Friday Scams Lurking Among the Holiday Deals

Cybercriminals are always looking to steal your credit card or even your identity. But it pays to be on extra high alert come Black Friday...

What scams shoppers should look out for on Black Friday and Cyber Monday

Every year, more and more Americans are taking care of their holiday shopping on Cyber Monday. Last year, consumers spent a record $6.59 billion during the annual online shopping day, an all-time record, according to Adobe Insights. Still, that doesn’t mean no one is rushing out the night of...

Friday Squid Blogging: Squid Sculptures

Pretty. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Ahead of Black Friday, Rash of Malware Families Takes Aim at Holiday Shoppers

No less than 14 malware families are targeting e-commerce brands to steal from unsuspecting consumers ahead of the official holiday shopping season. As the Black Friday post-Thanksgiving buying bonanza looms, in all of its door-busting and elbow-throwing glory, many are opting to stay at home and...

Singles' Day Blows Away Its Own Records

Singles' Day in China is the world's largest shopping event. Since its beginnings in 1993 at Nanjing University, it has grown to become a national phenomenon. Singles' Day was originally started as a way to celebrate singles and as a protest against couple-centric festivals. The date 11/11 was...

friday-ad.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-661764 Description| Value ---|--- Affected Website:| friday-ad.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Cephalopod Week on Science Friday

It's Cephalopod Week! "Three hearts, eight arms, can't lose." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Significant retail spending on Mother's Day sets a stage for major holidays in 2018

The second Sunday in May is a special day for everyone because it's Mother's Day. It's also a special day for retailers, as it represents another peak period and serves as the halfway point between the prior year's Black Friday and Cyber Monday and the upcoming year's retail holidays. The retail...

beautytap.com XSS vulnerability

Open Bug Bounty ID: OBB-594991 Description| Value ---|--- Affected Website:| beautytap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

appslova.com XSS vulnerability

Open Bug Bounty ID: OBB-593729 Description| Value ---|--- Affected Website:| appslova.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Friday Squid Blogging: Interesting Interview

Here's an hour-long audio interview with squid scientist Sarah McAnulty. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 20, 2017

It’s that time of year again, when many will gather with their families, eat way too much, and catch those crazy Black Friday sales. I’ve been seeing “Black Friday” sales for almost two weeks now. Cyber Monday, which falls on the Monday after the U.S. Thanksgiving holiday, is probably going to be...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Kaspersky Lab – Beyond Black Friday Threat Report, November 2017

Introduction The festive holiday shopping season, which covers Thanksgiving, Black Friday and Cyber Monday in late November as well as Christmas in December, now accounts for a significant share of annual sales for retailers, particularly in the U.S., Europe and APAC. Those selling clothing,...

fridayfashionclub.de XSS vulnerability

Open Bug Bounty ID: OBB-399450 Description| Value ---|--- Affected Website:| fridayfashionclub.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Friday Squid Blogging: Make-Your-Own Squid Candy

It's Japanese. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

friday.ru XSS vulnerability

Open Bug Bounty ID: OBB-213478 Description| Value ---|--- Affected Website:| friday.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tales of WordPress Plugin Insecurity Overblown Researchers Say

The insecurity of WordPress plugins has been well documented, especially over the last year, but in the grand scheme of things, it’s not as bad as it seems, experts claim. Hendrik Buchwald, a researcher and cofounder of RIPS, a German firm that performs static source code analysis, recently combe...