Lucene search
+L
ThreatpostMost viewed

15946 matches found

ThreatPost
ThreatPost
added 2019/12/04 1:52 p.m.55 views

Dutch Politician Could Get Three Years in Prison for Hacking iCloud Accounts

Prosecutors in the Netherlands are asking for three years in prison for a Dutch politician who hacked into women’s personal iCloud accounts and stole nude photos and other personal digital material belonging to them, then leaked some of it online. The public prosecutor of the North Holland Public...

0.6AI score
SaveExploits0References10
ThreatPost
ThreatPost
added 2019/11/22 4:54 p.m.55 views

Data-Enriched Profiles on 1.2B People Exposed in Gigantic Leak

An open Elasticsearch server has exposed the rich profiles of more than 1.2 billion people to the open internet. First found on October 16 by researchers Bob Diachenko and Vinny Troia, the database contains more than 4 terabytes of data. It consists of scraped information from social media source...

6.6AI score
SaveExploits0References6
ThreatPost
ThreatPost
added 2019/11/06 10:16 p.m.55 views

You've Been Served…with Subpoena-Themed Phishing Emails

A phishing campaign claiming to deliver emailed subpoenas is targeting insurance and retail companies. According to researchers, the phishing emails are spoofing the UK Ministry of Justice, aiming to capitalize on scare tactics to convince targets to click on an embedded link to “learn more about...

6.8AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2019/11/06 4:52 p.m.55 views

Facebook Privacy Breach: 100 Developers Improperly Accessed Data

UPDATE Facebook said that 100 third-party app developers have improperly accessed the names and profile pictures of members in various Facebook groups – data that was restricted in 2018 by the platform after its Cambridge Analytica privacy snafu. Facebook said that the developers – including 11 i...

7.2AI score
SaveExploits0References11
ThreatPost
ThreatPost
added 2019/11/06 2:30 p.m.55 views

Emotet Resurgence Continues With New Tactics, Techniques and Procedures

The notorious banking trojan Emotet, that mysteriously disappeared over the summer, returned last month dropping a new collection of malware including information stealers, email harvesters, self-propagation mechanisms and ransomware. But since the malware returned from its hiatus, there was no...

7.2AI score
SaveExploits0References6
ThreatPost
ThreatPost
added 2019/11/05 11:36 a.m.55 views

Eye Clinic Breach Reveals Data of 20,000 Patients

A Utah eye clinic is in the process of informing 20,000 patients that they were the victims of a data breach that happened a year and a half ago and linked patients to a scam involving PayPal. The breach at the Utah Valley Eye Center in Provo, Utah, that exposed patient emails once again highligh...

7.3AI score
SaveExploits0References8
ThreatPost
ThreatPost
added 2019/10/22 8:5 p.m.55 views

FTC Cracks Down on Stalkerware With Retina-X App Bans

UPDATE The Federal Trade Commission FTC has barred the sale of three “stalking apps” until their developer can prove they are used legally. The case is the first crackdown by the FTC on “stalkerware,” which is software that can be installed on devices to track their owners’ location, activity and...

0.5AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2019/09/05 12:17 p.m.55 views

Leaky Server Exposes 419M Phone Numbers of Facebook Users

Phone numbers linked to the Facebook accounts of hundreds of millions of users has been found online on an insecure server in the latest privacy gaffe for the social media giant. The server, which lacked password protection, contained more than 419 million records over several databases of Facebo...

0.2AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2019/08/07 11:56 a.m.55 views

Security Vulnerabilities Are Increasingly Putting Kids at Risk

LAS VEGAS – IoT devices are increasingly coming into the hands of children – from connected watches, to Amazon Echo smart speakers – but security experts worry that these are opening up children’s data to future privacy breaches. The latest example of this fear was seen at Black Hat 2019, where...

0.2AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2019/02/14 6:20 p.m.55 views

Threatpost Poll: Over Half of Firms Asked Struggle with Mobile Security

A Threatpost survey of readers found over half of respondents don’t feel sufficiently prepared to prevent or handle a security incident stemming from mobile devices in their firm. The informal survey results should serve as harbinger for security professionals in light of the fact that 80 percent...

6.8AI score
SaveExploits0References18
ThreatPost
ThreatPost
added 2019/02/13 3:15 p.m.55 views

Unpatched Apple macOS Hole Exposes Safari Browsing History

A design flaw in Apple’s macOS could allow a malicious application to steal victims’ Safari web browsing history. The security hole exists in every version of the Mac’s Mojave operating system, including macOS Mojave 10.14.3 Supplemental Update recently released on Feb. 7. That’s according to Mac...

SaveExploits0References6
ThreatPost
ThreatPost
added 2018/11/23 2:0 p.m.55 views

Old Printer Vulnerabilities Die Hard

Despite copious warnings and efforts by the security community to harden the defenses of printers, they continue to represent a ripe target for attackers. Just this past summer researchers at Check Point found a vulnerability that allowed an attacker to compromise a multi-function printer with fa...

9.3CVSS9.2AI score0.12227EPSS
SaveExploits1References2
ThreatPost
ThreatPost
added 2018/10/17 3:24 p.m.55 views

Multiple D-Link Routers Open to Complete Takeover with Simple Attack

Eight D-Link routers in the company’s small/home office “DWR” range are vulnerable to complete takeover – but the vendor said it is planning on only patching two, according to a researcher. Błażej Adamczyk of the Silesian University of Technology in Poland discovered the vulnerabilities in May,...

9CVSS0.4AI score0.77699EPSS
SaveExploits16References6
ThreatPost
ThreatPost
added 2017/10/28 7:0 a.m.55 views

Apache OpenOffice Update Patches Four Vulnerabilities

The Apache Software Foundation fixed four vulnerabilities Friday tied to its popular Apache OpenOffice suite of free productivity applications. The patches are for the suite’s word processing and graphics apps. Each of the vulnerabilities are rated medium in severity. Three of the four bugs patch...

6.8CVSS0.4AI score0.03122EPSS
SaveExploits3References7
ThreatPost
ThreatPost
added 2017/07/31 1:0 p.m.55 views

Microsoft Releases Outlook Patches, Fixes Broken Update

During the heat of Black Hat last week, Microsoft pushed out patches for Outlook that address three newly reported vulnerabilities. Last week’s update also included fixes for six of eight vulnerabilities left unpatched after issues were reported with the June Patch Tuesday update. The most seriou...

9.3CVSS0.6AI score0.99945EPSS
SaveExploits33References7
ThreatPost
ThreatPost
added 2017/07/11 4:36 p.m.55 views

Microsoft Patch Tuesday Update Fixes 19 Critical Vulnerabilities

Microsoft today released patches for 19 critical vulnerabilities, one of which was publicly known prior to the update. In all, 54 vulnerabilities were patched in Windows, Edge, Internet Explorer, Office and Exchange as part of Microsoft’s monthly Patch Tuesday release; 32 flaws were rated importa...

10CVSS0.2AI score0.50373EPSS
SaveExploits4References12
ThreatPost
ThreatPost
added 2017/02/21 1:2 p.m.55 views

Google Discloses Unpatched Microsoft Vulnerability

Google’s security researchers disclosed details of an unpatched Microsoft vulnerability in Windows’ GDI library that allows attackers to steal sensitive data from program memory. The flaw was first addressed by Microsoft last June, but Google said the patch was incomplete. As part of its 90-day...

6.9CVSS6.6AI score0.821EPSS
SaveExploits8References5
ThreatPost
ThreatPost
added 2016/12/15 10:0 a.m.55 views

Code Reuse a Peril for Secure Software Development

The amount of insecure software tied to reused third-party libraries and lingering in applications long after patches have been deployed is staggering. It’s a habitual problem perpetuated by developers failing to vet third-party code for vulnerabilities, and some repositories taking a hands-off...

9.1AI score0.99991EPSS
SaveExploits42References11
ThreatPost
ThreatPost
added 2016/07/13 11:15 a.m.55 views

Intel Patches Local EoP Vulnerability Impacting Windows 7

Intel issued an important security patch Monday for a vulnerability that could allow hackers to execute arbitrary code on targeted systems running Windows 7. The bug, located in Intel’s HD graphics Windows kernel driver, leaves affected systems open to a local privilege escalation attacks that...

4.6CVSS2.1AI score0.00604EPSS
SaveExploits2References4
ThreatPost
ThreatPost
added 2016/05/04 12:17 p.m.55 views

Public Exploits Available for ImageMagick Vulnerabilities

Within hours of the disclosure of serious vulnerabilities in ImageMagick, public exploits were available increasing the risk to thousands of websites that make use of the open source image-processing software. Attackers can append malicious code to an image file that ImageMagick will process...

10CVSS8.1AI score0.97485EPSS
SaveExploits12References4
ThreatPost
ThreatPost
added 2013/05/13 10:52 a.m.55 views

USAID a Target of DoL Watering Hole Attackers

One of the nine sites serving malware tied to the recent watering hole attack on the U.S. Department of Labor was located in Cambodia and has ties to the United States Agency for International Development USAID. Speculation has it that the DoL attack was targeting downstream employees at the...

9.3CVSS8.8AI score0.77889EPSS
SaveExploits11References4
ThreatPost
ThreatPost
added 2013/04/29 10:19 a.m.55 views

Attack Using Backdoored Apache Binaries to Lead to Blackhole Kit

There is a newly identified ongoing attack campaign in which attackers are using compromised Apache HTTP binaries to redirect users to malicious sites serving various flavors of malware, including the Blackhole exploit kit. Rather than going the traditional route of simply injecting malicious cod...

7.1AI score
SaveExploits0References3
ThreatPost
ThreatPost
added 2012/11/20 3:18 p.m.55 views

New Linux Rootkit Emerges

A new Linux rootkit has emerged and researchers who have analyzed its code and operation say that the malware appears to be a custom-written tool designed to inject iframes into Web sites and drive traffic to malicious sites for drive-by download attacks. The rootkit is designed specifically for...

0.3AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2012/10/11 2:29 a.m.55 views

More than 300,000 at Risk After Major Breach at Florida College

A security breach initially believed contained to about 50 employee records now appears to involve almost 300,000 students, faculty and employees at a Florida college. Officials at Northwest Florida State College in Niceville today confirmed a massive data breach and hundreds of thousands of stol...

0.4AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2011/10/14 5:58 p.m.55 views

SpyEye and Zeus Malware: Married Or Living Separately?

Everyone knows that the first year of marriage can be a tough one -around three percent of them end in the first 12 months. Looks like the same can be true of malware marriages, with the union of the Zeus and SpyEye Trojan now in question. Just one year after news broke that the Zeus and SpyEye...

9.3CVSS8.3AI score0.99945EPSS
SaveExploits33References6
ThreatPost
ThreatPost
added 2010/05/07 3:37 p.m.55 views

Main PHP-Nuke Site Compromised

The main site for the PHP-Nuke content management system software has been compromised and is serving malicious iFrame exploits to visitors. Researchers at Websense found that the phpnuke.org site is currently serving several different exploits. The attack uses the common iFrame-redirection...

9.3CVSS8.5AI score0.96632EPSS
SaveExploits46References5
ThreatPost
ThreatPost
added 2022/06/13 12:36 p.m.54 views

Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers

Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...

7.2AI score
SaveExploits0References2
ThreatPost
ThreatPost
added 2022/01/18 7:33 p.m.54 views

Cybercriminals Actively Target VMware vSphere with Cryptominers

Organizations running sophisticated virtual networks with VMware’s vSphere service are actively being targeted by cryptojackers, who have figured out how to inject the XMRig commercial cryptominer into the environment, undetected. Uptycs’ Siddharth Sharma has released research showing threat acto...

7.9AI score
SaveExploits0References10
ThreatPost
ThreatPost
added 2022/01/04 8:49 p.m.54 views

SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More

Gaming giant SEGA Europe recently discovered that its sensitive data was being stored in an unsecured Amazon Web Services AWS S3 bucket during a cloud-security audit, and it’s sharing the story to inspire other organizations to double-check their own systems. Researcher Aaron Phillips with VPN...

6.6AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/11/17 1:44 p.m.54 views

Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts

A recently discovered phishing scam tried to takeover more than 125 high-profile user accounts on TikTok. Researchers said the campaign marks one of the first major attacks on “influencers” found on the TikTok social-media platform. Researchers at cloud email security provider Abnormal Security...

7.6AI score
SaveExploits0References8
ThreatPost
ThreatPost
added 2021/10/01 5:50 p.m.54 views

3.1M Neiman Marcus Customer Card Details Breached

Dallas-based Neiman Marcus Group is known worldwide as the go-to luxury retailer for the well-heeled. But their reputation for impeccable quality just took a big hit with revelations that the company was breached by an attacker back in May 2020. It took 17 months for the retailer to notice. Just...

8AI score
SaveExploits0References4
ThreatPost
ThreatPost
added 2021/09/09 11:26 a.m.54 views

BladeHawk Attackers Target Kurds with Android Apps

Attackers have been targeting the Kurdish ethic group for more than a year through an Facebook-based spyware campaign that disguises backdoors in legitimate Android apps, researchers have found. A group called BladeHawk is behind the campaign, discovered by researchers from cybersecurity firm ESE...

7.2AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/08/03 8:16 p.m.54 views

Iranian APT Lures Defense Contractor in Catfishing-Malware Scam

Most people have probably heard of catfishing. That’s when someone adopts a fake online persona, usually to trick someone into falling in love. Now, threat actors have developed their own spin on the grift, developing appealing — objectively hot — profiles to charm victims into downloading malwar...

6.6AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/07/19 6:48 p.m.54 views

Ruthless Attackers Target Florida Condo Collapse Victims

Families mourning the loss of loved ones to the partial collapse of the Champlain Towers South condo building in Surfside, Fla. are now being urged to check the credit of their deceased relatives thanks to a group of heartless hackers targeting victims in a new identity-theft scheme. Apparently,...

6.7AI score
SaveExploits0References11
ThreatPost
ThreatPost
added 2021/07/06 5:1 p.m.54 views

Western Digital Users Face Another RCE

Bad news comes in threes, most particularly for Western Digital customers. As if things weren’t bad enough for the untold number of Western Digital customers whose data blinked out of existence last month, there’s another zero-day waiting for whoever can’t or won’t upgrade its My Cloud storage...

8AI score
SaveExploits0References13
ThreatPost
ThreatPost
added 2021/07/01 11:30 a.m.54 views

Netgear Authentication Bypass Allows Router Takeover

Netgear has patched three bugs in one of its router families that, if exploited, can allow threat actors to bypass authentication to breach corporate networks and steal data and credentials. Microsoft security researchers discovered the bugs in Netgear DGN-2200v1 series routers while they were...

7.8AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/06/29 11:34 a.m.54 views

Details of RCE Bug in Adobe Experience Manager Revealed

Details of an Adobe zero-day bug found in its content-management solution Adobe Experience Manager AEM, which affected customers ranging from Mastercard, LinkedIn and PlayStation, were revealed Monday. The bug, patched in May, allowed hackers to bypass authentication protection and execute code...

7.9AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2021/06/28 9:17 p.m.54 views

5G Security Vulnerabilities Fluster Mobile Operators

As 5G private networks roll out in the coming years, security may be a key issue for enterprises. A survey released at Mobile World Congress on Monday shows that major gaps persist in security capabilities among mobile operators. Some 68 percent of operators already sell private wireless networks...

7.5AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/06/23 3:39 p.m.54 views

Critical Palo Alto Cyber-Defense Bug Allows Remote ‘War Room’ Access

A critical security bug in Palo Alto Networks’ Cortex XSOAR could allow remote attackers to run commands and automations in the Cortex XSOAR War Room and to take other actions on the platform, without having to log in. Found internally by Palo Alto, the bug CVE-2021-3044 is an...

9.8CVSS9.7AI score0.01406EPSS
SaveExploits0References6
ThreatPost
ThreatPost
added 2021/06/16 6:38 p.m.54 views

IKEA Fined $1.2M for Elaborate ‘Spying System’

IKEA’s French subsidiary was just hit with a $1.2 million fine after it was found guilty of a creepy systematic snooping scheme targeting customers, employees and even prospective hires. Prosecutors said in all, the company illegally surveilled about 400 people in total, according to the BBC. IKE...

7.1AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2021/06/07 8:54 p.m.54 views

FBI Claws Back Millions of DarkSide’s Ransom Profits

United States law enforcement has clawed back approximately $2.3 million of the ransom allegedly paid to DarkSide by Colonial Pipeline last month, the Department of Justice DOJ and FBI announced in a joint press conference on Monday. “Today we turned the tables on DarkSide,” FBI Deputy Director...

7.5AI score
SaveExploits0References11
ThreatPost
ThreatPost
added 2021/06/02 3:52 p.m.54 views

REvil Ransomware Ground Down JBS: Sources

The cyberattack that flattened operations at JBS Foods over the weekend was indeed a ransomware strike, the global food distributor has confirmed to the Biden administration, with sources pointing to the REvil Group as the responsible gang. Four people familiar with the matter who weren’t...

7AI score
SaveExploits0References22
ThreatPost
ThreatPost
added 2021/05/12 4:50 p.m.54 views

Gig Workers Being Paid $500 for Payroll Passwords

Fintech startup Argyle, a financial-services platform aimed at gig workers, is working to replace credit scores assigned by bureaus like Equifax. But closer security analysis hints that Argyle could be just the latest incarnation of an ongoing data-collection campaign, paying people to give up...

5.7AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2021/04/13 6:29 p.m.54 views

Tax Phish Swims Past Google Workspace Email Security

A W2 tax email scam is circulating in the U.S. using Typeform, a popular software that specializes in online surveys and form building. The campaign is aimed at harvesting victims’ email account credentials, researchers said. According to Armorblox, the campaign also bypasses native Google...

7.5AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2021/03/26 8:8 p.m.54 views

E.O. Would Strengthen Federal Cyber Requirements

The U.S. federal government is mulling changes to up its cybersecurity software game in the wake of the sprawling SolarWinds cyberattacks that came to light in December, including requiring data-breach notifications. In a draft executive order from President Joe Biden, software companies would be...

7.4AI score
SaveExploits0References6
ThreatPost
ThreatPost
added 2021/03/09 9:59 p.m.54 views

Dark Web Markets for Stolen Data See Banner Sales

Despite an explosion in the sheer amount of stolen data available on the Dark Web, the value of personal information is holding steady, according to the 2021 Dark Web price index from Privacy Affairs. That leaves these thriving dirty data dealers in a familiar predicament — they need to lock down...

7.3AI score
SaveExploits0References7
ThreatPost
ThreatPost
added 2021/02/25 5:4 p.m.54 views

Malicious Mozilla Firefox Extension Allows Gmail Takeover

A newly uncovered cyberattack is taking control of victims’ Gmail accounts, by using a customized, malicious Mozilla Firefox browser extension called FriarFox. Researchers say the threat campaign, observed in January and February, targeted Tibetan organizations and was tied to TA413, a known...

1AI score
SaveExploits0References8
ThreatPost
ThreatPost
added 2021/02/19 2:11 p.m.54 views

Microsoft: SolarWinds Attackers Downloaded Azure, Exchange Code

Threat actors downloaded some Microsoft Exchange and Azure code repositories during the sprawling SolarWinds supply-chain attack but did not use the company’s internal systems or products to attack other victims. That’s the final verdict this week by the tech giant now that it’s completed a...

0.5AI score
SaveExploits0References23
ThreatPost
ThreatPost
added 2021/01/21 3:2 p.m.54 views

Google Forms Set Baseline For Widespread BEC Attacks

A threat actor has been sending thousands of emails to organizations, in what researchers warn is a reconnaissance campaign to identify targets for a possible follow-up business-email-compromise BEC attack. So far, researchers have observed thousands of messages being sent to companies since...

0.5AI score
SaveExploits0References9
ThreatPost
ThreatPost
added 2020/12/14 7:50 p.m.54 views

Ex-Cisco Employee Convicted for Deleting 16K Webex Accounts

A man has been sentenced to two years in jail after being convicted of hacking Cisco’s Webex collaboration platform in an insider-threat case brought to the U.S. District Court in California. Sudhish Kasaba Ramesh, 31, admitted that he broke into Cisco’s cloud infrastructure in 2018, hosted on...

6.4CVSS9AI score0.65907EPSS
SaveExploits0References6
Total number of security vulnerabilities5000