This Week in Security News: The First Patch Tuesday Update of 2020 and Pwn2Own Vancouver Announced

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about a major crypto-spoofing bug impacting Windows 10 that has been fixed as part of Microsoft’s January Patch Tuesday update. Also,...

UN Secretary-General: US-China Tech Split Worse Than Cold War

In an interview with WIRED editor in chief Nicholas Thompson, António Guterres says the world's next major conflict will start in cyberspace...

If Russia Hacked Burisma, Brace for the Leaks to Follow

The Kremlin likely hacked the oil giant. Its next play: selectively release—and even forge—documents. Did the US learn enough from 2016 to ignore them?...

0day RCE in Firefox

This seems like a pretty interesting vulnerability CVE-2019-17026 in Firefox and Thunderbird in Windows, MacOS and Linux. "Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this...

SQL Injection Vulnerability in Cloud CMS Backend us***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the us.php file in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Police Surveillance Tools from Special Services Group

Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...

Iranian Hackers Have Been ‘Password-Spraying’ the US Grid

A state-sponsored group called Magnallium has been probing American electric utilities for the past year...

How the US Knew Iranian Missiles Were Coming Before They Hit

The US has operated an extensive network of missile warning systems for over half a century, but next-generation missiles will put it to the test...

Iranian hackers deface US government & African bank website

By Waqas Iranian hackers are back in action and this time they have found targets in the US and Africa. Here's what happened: This is a post from HackRead.com Read the original post: Iranian hackers deface US government & African bank website...

SQL injection vulnerability in the us***.php page of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. web mall station building system v3.0 front us.php page SQL injection...

How the US Prepares Its Embassies for Potential Attacks

In addition to securing physical structures, the Diplomatic Security Service runs simulations of protests in a model city in Virginia...

US Military Bans TikTok over privacy concerns

By Waqas No more cringy TikTok videos for the American military? This is a post from HackRead.com Read the original post: US Military Bans TikTok over privacy concerns...

Inside ‘Evil Corp,’ a $100M Cybercrime Menace

The U.S. Justice Department this month offered a $5 million bounty for information leading to the arrest and conviction of a Russian man indicted for allegedly orchestrating a vast, international cybercrime network that called itself "Evil Corp" and stole roughly $100 million from businesses and...

70% of the entire US population is now on Facebook

By Waqas In 2016, shocking research about Facebook revealed that by 2098, the social media giant will be the biggest virtual graveyard but now... This is a post from HackRead.com Read the original post: 70% of the entire US population is now on Facebook...

Toys “R” Us Is Back—Now With More Surveillance\!

Reports about the toy store using cameras to track shoppers caused an uproar, but the companies behind the tech insist their systems are trained to ignore kids...

The FCC's Push to Purge Huawei From US Networks

The rural carriers who rely on Huawei are wary of a costly “rip and replace” effort...

Alleged Russian Hacker Behind $100 Million Evil Corp Indicted

The US is charging Maksim Yakubets over two of the biggest cybertheft campaigns of the last decade, and offers a record reward for information on the case...

Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774)

Attackers have a dirty little secret that is being used to conduct big intrusions. We’ll explain how they're "unpatching" an exploit and then provide new Outlook hardening guidance that is not available elsewhere. Specifically, this blog post covers field-tested automated registry processing for...

Blockchain Developer Gets Busted After Talk in North Korea

Hacker and Ethereum developer Virgil Griffith was recently arrested by US authorities for speaking at a conference on blockchain technologies...

us-aron.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1028447 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting us-aron.com website a...