The glaring privacy issues tied to an online health and beauty retailer allows customers to log-in to their users accounts with just their email address – no password needed.
Average Bug Bounty Payments Growing
HackerOne released its first report on its bug bounty program, and reveals an industry shift toward enlisting hackers for better cybersecurity.
Svpeng Behind a Spike in Mobile Ransomware
Mobile ransomware attacks spike in the first quarter of 2017, growing three and a half times compared to the previous year.
GhostHook Attack Bypasses Windows 10 PatchGuard
Researchers at CyberArk have developed a bypass for Windows PatchGuard that leverages Intel’s Processor Trace (Intel PT) technology to execute code at the kernel.
Average Cost of Breach Goes Down For the First Time Ever
The good news is the cost of a data breach is down double-digits, the bad news the size and scope of breaches is creeping up.
Trump’s Cybersecurity Executive Order Under Fire
Former AT&T CSO, Ed Amoroso, says government needs to shift from talk to action when it comes to cybersecurity.
FIN10 Extorting Canadian Mining Companies, Casinos
A string of data thefts targeting North American mining companies and casinos are extorting as much as $620,000 from victims.
Wikileaks Alleges Years of CIA D-Link and Linksys Router Hacking Via ‘Cherry Blossom’ Program
The latest dump from Wikileaks alleges the CIA installed custom router firmware on unsuspecting targets in order to spy on internet activity.
DHS, FBI Warn of North Korea ‘Hidden Cobra’ Strikes Against US Assets
DHS and the FBI warned that North Korean attackers are targeting U.S. businesses with malware- and botnet-related attacks that are part of concerted effort dubbed “Hidden Cobra.”
Decryption Utility Unlocks Files Encrypted by Jaff Ransomware
Researchers have neutralized the latest strain of the Jaff ransomware, releasing a decryption tool for unlocking files.