German industrial firm ThyssenKrupp said it’s working with authorities to investigate a data breach of unspecified amount of internal data.
Solar Power Firm Patches Meters Vulnerable to Command Injection Attacks
Locus Energy has patched 100,000 of its residential and commercial power meters that were vulnerable to command injection attacks and code execution.
Researchers Question Security in AMD’s Upcoming Zen Chips
Two German researchers are calling into question the security afforded by AMD’s Secure Encrypted Virtualization feature debuting in the chip maker’s upcoming Zen server chips.
Hackers Gamify DDoS Attacks With Collaborative Platform
A hacking group is luring participants to use a DDoS platform where they can compete with peers to earn redeemable points exchangeable for hacking tools and click-fraud software.
Zeus Variant ‘Floki Bot’ Targets PoS Data
Researchers have observed an uptick in attacks using the banking malware Floki Bot against U.S., Canadian and Brazilian banks and insurance firms.
Rule 41 Opponents Vow to Fight Government’s New Hacking Powers
Opponents of the controversial Rule 41 say they are committed to fighting the government’s expanded powers.
New Cerber Variant Leverages Tor2Web Proxies, Google Redirects
Researchers have discovered that criminals behind the latest Cerber ransomware variant are leveraging Google redirects and Tor2Web proxies in a new and novel way to evade detection.
Hackers Make New Claim in San Francisco Transit Ransomware Attack
The San Francisco Municipal Transport Agency says it has contained a ransomware attack, but now it faces new unsubstantiated claims by attackers who say they have 30GB of the agency’s data.
WordPress Plugins Leave Black Friday Shoppers Vulnerable
Researchers found a third of the top WordPress e-commerce plugins contain severe vulnerabilities tied to XSS cross-site scripting, SQL injection and file manipulation flaws.
Office 365 Vulnerability Identified Bogus Microsoft.com Email as Valid
An email scam tricked Yandex email recipients into thinking phishing emails were certified legit and from the Microsoft.com domain.