Are You One of the 533M People Who Got Facebooked?

Neer-do-wells leaked personal data -- including phone numbers -- for some 553 million Facebook users this week. Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. To my mind, this just reinforces the need to remove...

Finding the Cracks in the Wall - How Modern Scams Bypass MFA

In my previous blog, I discussed the important role multi-factor authentication MFA plays in further securing access to enterprise and consumer services. We also established the fact that although MFA increases authentication security and decreases the risk of account takeover, MFA can, and is,...

The vulnerability of Junos router operating systems of the NFX and SRX series, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of Junos router series NFX and SRX lies in pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the DxgkDdiSubmitCommand virtual driver for NVIDIA GeForce, Quadro, and Tesla graphics processors in Windows operating systems allows a malicious actor to cause system failures or gain increased privileges.

The vulnerability of the DxgkDdiSubmitCommand virtual driver for NVIDIA GeForce, Quadro, and Tesla graphics processors in Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges...

The vulnerability of Intel Graphics Driver drivers arises from the assignment of a zero pointer, which allows an attacker to trigger a service failure.

The vulnerability of Intel Graphics Drivers’ drivers is caused by the swapping of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Gang arrested for SIM-swapping celebrities, stealing $100 million

The UKs National Crime Agency NCA—working alongside the US Secret Service, Homeland Security, the FBI, Europol, and the District Attorneys Office of Santa Clara California—spearheaded the arrest of eight British citizens in the UK and Scotland, aged between 18 to 26, for a string of SIM swapping...

Celeb SIM-Swap Crime Ring Stole $100M from U.S. Victims

A posse of alleged SIM-swapping cybercriminals has been rounded up across Europe by law-enforcement after the crooks finagled more than $100 million from U.S. celebrities and their families. Eight people in the U.K. were arrested in connection with the crime ring, in addition to individuals in...

10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities

Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S. The Europol-coordinated year-long investigation was...

10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities

Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S. The Europol-coordinated year-long investigation was...

10 SIM-swapping hackers nabbed for targeting US celebrities

By Waqas Europol has announced arresting 10 hackers involved in large scale SIM-swapping attacks targeting high-profile celebrities in the United States. This is a post from HackRead.com Read the original post: 10 SIM-swapping hackers nabbed for targeting US celebrities...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The CVE-2020-35962 issue affects Loopring (LRC) by the vault protocol’s sellTokenForLRC function in its smart contract, which lacks access control for fee swapping. This vulnerability enables price manipulation within the on-chain logic. The documented impact is a HIGH severity in CVSS 3.1 (I:H) ...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data

Cybercriminals are vying for Remote Desktop Protocol RDP access, stolen payment cards and DDoS-for-Hire services, based on a recent analysis of underground marketplace pricing. During the COVID-19 pandemic, cybercriminals have profited with “increasingly advantageous positions to benefit from the...

Convicted SIM Swapper Gets 3 Years in Jail

A 21-year-old Irishman who pleaded guilty to charges of helping to steal millions of dollars in cryptocurrencies from victims has been sentenced to just under three years in prison. The defendant is part of an alleged conspiracy involving at least eight others in the United States who stand accus...

Two Charged in SIM Swapping, Vishing Scams

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account...

The vulnerability of the WEBP::GetLE32 function in the “exempi” utility allows a hacker to cause a service failure.

The vulnerability of the WEBP::GetLE32 function located at XMPFiles/source/FormatSupport/WEBPSupport.hpp in the “exempi” utility is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service failure...

Arrested: 4 most active hackers involved in SIM Swap, malware attacks

By Deeba Ahmed These hackers were involved in malware attacks, sim swapping scams, and e-commerce fraud. This is a post from HackRead.com Read the original post: Arrested: 4 most active hackers involved in SIM Swap, malware attacks...

FBI, CISA Echo Warnings on ‘Vishing’ Threat

The Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA on Thursday issued a joint alert to warn about the growing threat from voice phishing or "vishing" attacks targeting companies. The advisory came less than 24 hours after KrebsOnSecurity publishe...

Why & Where You Should Plant Your Flag

Several stories here have highlighted the importance of creating accounts online tied to your various identity, financial and communications services before identity thieves do it for you. This post examines some of the key places where everyone should plant their virtual flags. As KrebsOnSecurit...