Threatpost is the first stop for fast-breaking security news, conversations and analysis from around the world.
- Tweets 22,663
- Following 5,746
- Followers 207,822
- Likes 650
#Google is under fire after a report found that Google Home and Google Assistant records user audio, even when no wake-up word is used.
threatpost.com/google-home-r…
42
248
301
A white hat hacker reverse engineered 30 mobile financial applications and found sensitive #data buried in the underlying #code of nearly all apps examined.
threatpost.com/financial-app…
3
140
180
Breaking: Hundreds of millions of #Facebook records – including account names and plaintext #passwords – have been found in two separate publicly-exposed app datasets, researchers at @UpGuard found.
threatpost.com/facebook-data…
7
211
154
#Mozilla released an emergency patch for a critical #Firefox flaw that is being actively exploited in targeted attacks.
threatpost.com/mozilla-patch…
4
173
161
#Citrix warned of multiple #security flaws that could allow code injection and data theft - including four that are exploitable by unauthenticated, remote attackers.
threatpost.com/citrix-bugs-a…
3
107
136
In in lieu of a patch... “I advise to IMMEDIATELY DISCONNECT vulnerable routers from the Internet.” bit.ly/2jhkqY6
35
97
Secure password firms (1Password, Dashlane, KeePass and LastPass) are blasting a #security report highlighting how the utilities can be cracked open to steal #passwords.
threatpost.com/1password-das…
7
113
119
This Office 365 #phishing attack leverages real-time Active Directory validation of credentials. #Office365
threatpost.com/office-365-ph…
82
107
Two separate attacks have targeted as many as 50,000 different #Teams users, with the goal of phishing #Microsoft Office 365 logins.
threatpost.com/microsoft-tea…
1
110
105
The latest #iOS and Android versions of the FinSpy #malware have been deployed in the wild. The espionage tool can eavesdrop on Signal, Telegram and WhatsApp messages and calls.
threatpost.com/finspy-module…
2
62
70
15 billion usernames and #passwords are currently for sale on underground forums - over three times the number available two years ago. (via @digitalshadows)
threatpost.com/15-billion-cr…
1
92
94
Researchers have released a proof-of-concept showing how a XXE #security vulnerability can be exploited to attack #Ghidra project users.
threatpost.com/nsa-ghidra-bu…
2
74
98
A strange glitch in #Gmail can be exploited to place emails into a person’s “Sent” folder — even if that person never sent them.
threatpost.com/gmail-glitch-…
1
87
88
A ‘zero-click’ #MacOS exploit chain using #Microsoft Office macros was revealed at Black Hat.
threatpost.com/black-hat-zer…
2
85
87
A U.S. military nuclear contractor was hit with the Maze #ransomware - and cybercriminals have started to leak its documents online. #ICYMI
threatpost.com/nuclear-contr…
5
83
80
It’s not just @Razer’s peripherals that gobble up #Windows10’s SYSTEM privileges: A @SteelSeries #vulnerability also tosses off #Win10 admin rights if you just plug in a device or use an #LPE script to imitate a human interface. via @zux0x3a
#cybersecurity threatpost.com/windows-10-ad…
1
42
88
A highly targeted phishing attack, abusing #Microsoft Sway, has successfully compromised the #Office365 credentials of more than 150 executives.
threatpost.com/microsoft-swa…
1
69
89
A monster #cyberattack on #SITA, a global IT provider for 90% of the world’s airline industry, is slowly unfurling to reveal the largest #SupplyChain attack on the #airline industry in history. #cybersecurity threatpost.com/supply-chain-…
2
56
87
#Amazon admitted it saves #Alexa voice recordings indefinitely - and even if customers delete their data, third-party developers can still save records of interactions.
threatpost.com/amazon-admits…
2
99
84
A new hack, called PDFex, allows attackers to break the #encryption of PDF files and access content or forge signed #PDF files.
threatpost.com/hack-breaks-p…
1
64
71
A vulnerability in #Google’s Chromium-based browsers allows attackers to bypass the Content #Security Policy on websites, in order to steal data and execute rogue code.
threatpost.com/google-chrome…
4
93
76
Top 2020 #security predictions:
-Mobile will become a prime phishing attack vector
-Hackers will increasingly employ machine learning in attacks
-Cloud increasingly seen as fertile ground for compromise
Add your own 2020 predictions in the comments ⤵️
threatpost.com/2020-cybersec…
12
68
75
Hackers are still using #Metasploit and a highly effective technique called Shikata Ga Nai to slip past modern day endpoint protections, said @FireEye researchers.
threatpost.com/metasploit-st…
52
80
A U.S. court ruled that the #NSA mass #surveillance program was illegal – seven years after it was exposed by Snowden.
threatpost.com/nsa-mass-surv…
2
49
73
The open-source Virtual Network Computing (VNC) project, often found in industrial environments, is plagued with 37 different memory-corruption #security vulnerabilities.
threatpost.com/critical-flaw…
1
72
73
Hackers broke into #Microsoft’s GitHub account and stole 500 GB of data from its private repositories, according to reports.
threatpost.com/report-micros…
2
65
75
WooCommerce #WordPress plugin, used by 28% of all online stores, patched against #XSS - bit.ly/2wkHoSN
51
57
A “critical water utility” in a county crippled by Hurricane #Florence was hit by a #ransomware attack.
The #cyberattack has significantly impeded its ability to provide service to residents impacted by the #hurricane.
threatpost.com/in-county-cri…
9
80
60
A former analyst for the U.S. Defense Intelligence Agency was sentenced to 2+ years in prison after sharing highly classified, national defense intelligence with two reporters.
threatpost.com/former-dia-an…
5
51
69
In all, #Nvidia patched flaws tied to 16 CVEs across its graphics drivers and vGPU software, in its first #security update of 2021.
threatpost.com/nvidia-window…
46
78
A fake website claims to give #iPhone users the ability to jailbreak their phones.
In reality, @TalosSecurity researchers warn, the site ultimately enables attackers to conduct click fraud. #Checkm8
threatpost.com/apple-fake-io…
1
46
76
Multiple zero-days in a Counter-Strike client were used to build a major #botnet - and almost 40 percent of Counter-Strike 1.6 game servers on Steam were found to be malicious.
threatpost.com/zero-days-cou…
45
73
The entire population of #Ecuador has been impacted by an open database on an unsecured server. Exposed data includes:
-Full name
-Date and place of birth
-Home address
-Cell phone numbers/emails
-Taxpayer IDs
-Marital status
(Via @vpnmentor)
threatpost.com/marketing-ana…
3
65
70
A #Tesla employee was reportedly approached by a Russian national and asked to install #malware on the company’s systems.
threatpost.com/elon-musk-con…
3
56
67
Two zero-day #security flaws have been uncovered in #Zoom’s macOS client version. The flaws could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera.
threatpost.com/two-zoom-zero…
1
75
66
A memory-corruption bug in #Microsoft Exchange allows remote #code execution - just by sending an email to a target.
threatpost.com/microsofts-pa…
61
69
A seven-year #Android surveillance campaign has been exposed, which used four malware tools to spy on the Uyghur ethnic minority group. (via @Lookout)
threatpost.com/four-android-…
55
64
A fake #Adobe update actually updates victims’ Flash Player – but also installs malicious #cryptomining malware.
Researchers at @Unit42_Intel warned that the fake updates also borrow pop-up notifications from the official Adobe installer.
threatpost.com/stealthy-fake…
1
193
58
The operators of Shade #ransomware called it quits, releasing 750,000 encryption keys on GitHub and publicly apologizing to victims affected by the malware.
threatpost.com/shade-threat-…
1
40
67
A researcher dropped a zero-day #security vulnerability that affects the Steam game client for #Windows. Valve has published a patch - but the same researcher said it can be bypassed.
threatpost.com/gamers-zero-d…
1
65
61
#Cisco is warning of a critical #security flaw in the web server of its IP phones.
An unauthenticated, remote attacker could exploit the flaw to execute code with root privileges or launch a DoS attack.
threatpost.com/critical-cisc…
2
53
62
A new strain of #malware targeting #Linux systems has been identified by researchers.
threatpost.com/new-linux-mal…
70
65
A new variant of the #Mirai IoT botnet is targeting wireless presentation systems and LG display systems used by enterprises.
threatpost.com/mirai-enterpr…
1
73
64
Yet another side-channel attack was discovered in CPUs.
A glitch in the simultaneous multithreading (SMT) process in #CPUs - including #Intel chips - allows #hackers to siphon processed data. #PortSmash
threatpost.com/portsmash-sid…
4
48
60
Trojans, backdoors and droppers are the top three #malware types being analyzed by threat intelligence teams.
threatpost.com/trojans-backd…
41
64
Researchers demonstrated for the third time how #hacking into the key fob of a #Tesla can allow someone to access and steal the car in minutes.
threatpost.com/tesla-hacked-…
2
36
66
The #NSA and #CISA have issued an alert warning that adversaries could be targeting critical infrastructure across the U.S.
threatpost.com/nsa-urgent-wa…
3
62
58
The Maze #ransomware has hit a U.S. military contractor involved in the maintenance of the country’s Minuteman III #nuclear arsenal.
threatpost.com/nuclear-contr…
46
56
Major browsers - including #Chrome and #Firefox - are getting an update to fix bugs that could allow for remote attacks.
threatpost.com/firefox-chrom…
41
63
A stack of #Linux backdoor malware used for espionage is being used as a shared resource by five different Chinese-language #APT groups.
threatpost.com/black-hat-lin…
58
65
A #Bluetooth flaw that allows spoofing attacks potentially impacts billions of #IoT devices.
threatpost.com/bluetooth-spo…
4
48
59
As promised, SandboxEscaper has dropped four more exploits - three impacting #Windows and one an Internet Explorer #ZeroDay vulnerability.
threatpost.com/sandboxescape…
2
60
65
A series of #hacks against ATM terminals across Europe are forcing the machines to dispense cash to crooks.
threatpost.com/diebold-atm-t…
1
55
63
A new self-propagating #malware, dubbed Lucifer, is targeting #Windows systems with cryptojacking and distributed denial-of-service (DDoS) attacks. (via @Unit42_Intel)
threatpost.com/self-propagat…
1
58
55
#Microsoft quietly pushed out an emergency update to fix critical and important-severity RCE flaws in #Windows Codecs Library.
threatpost.com/microsoft-rel…
33
56
A Dutch ethical #hacker claims it only took 5 attempts to guess the password to President #Trump’s Twitter account: “maga2020!”
threatpost.com/researcher-ha…
3
33
57
Unencrypted mobile traffic on #Tor network is leaking personal identifiable information, researchers say. That includes GPS coordinates, web addresses, phone numbers and keystrokes.
threatpost.com/unencrypted-m…
1
64
58
A #hacker who allegedly sold millions of stolen credentials from last year’s “Collection 1” #data dump was arrested.
threatpost.com/alleged-hacke…
2
34
58
Researchers are urging #Ring users to update to the latest version of the smart doorbell after a serious flaw triggered #privacy concerns.
threatpost.com/ring-doorbell…
1
65
63
Firefox 58 will remove canvas fingerprinting. threatpost.com/firefox-bolst…
1
45
59
#WhatsApp is asking users to accept a new privacy policy that will share all of their data with #Facebook beginning Feb. 8 - drawing ire from some.
threatpost.com/facebooks-man…
7
51
53
A new #phishing campaign steals #Outlook credentials using an overlay screen on top of targeted employees' legitimate company webpages. (@Cofense)
threatpost.com/attackers-ste…
1
59
58
A threat actor known as “Sanix” was taken into custody, for allegedly posting 773 million e-mail addresses and 21 million passwords on a #hacker forum last year. #ICYMI
threatpost.com/alleged-hacke…
1
38
57
Researchers are warning of a convincing #cyberattack that impersonates notifications from #Microsoft Teams in order to steal employee Office 365 credentials.
threatpost.com/microsoft-tea…
2
67
57
Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. threatpost.com/cybercriminal…
12
33
40
A high-severity flaw was discovered in a #WordPress plugin installed on more than 100,000 sites.
The vulnerability could lead to XSS and the injection of malicious #JavaScript anywhere on a victim's site.
threatpost.com/wordpress-plu…
3
54
51
An attacker can execute remote code with no user interaction, thanks to the critical #Cisco flaw.
threatpost.com/attackers-can…
45
56
#Cisco is warning of three high-severity #Webex flaws, including one that could allow unauthenticated attackers to remotely execute code on impacted systems.
threatpost.com/cisco-webex-r…
45
54
"Basically, everything was pwned, from the LAN to the WAN." - bit.ly/2jhkqY6
14
35
A critical #Linux bug has been discovered that could allow attackers to fully compromise vulnerable machines.
A #security fix has been proposed but has not yet been incorporated into the Linux kernel.
threatpost.com/critical-linu…
77
52
.@malware_traffic theorizes RATs becoming popular w/ campaign because more flexible than single-purpose ransomware: bit.ly/2ew3EmL
15
37
The University of Utah paid a $457,000 ransom after a #ransomware attack hit the university’s servers.
threatpost.com/university-of…
5
67
52
Gamer alert! @nvidia bugs allow privilege-escalation attacks, arbitrary code execution, denial of service (DoS) and information disclosure-- YIKES bit.ly/3u73aFe #patchoftheday #CyberSecurity
1
48
52
#Facebook awarded a #security researcher $20,000 for discovering a XSS vulnerability in the Facebook Login SDK.
threatpost.com/login-faceboo…
3
15
56
A database on #Apple’s macOS computers is storing emails, that are supposed to be protected with encryption, as readable files.
It's a problem that the company has been aware for months - and still has yet to solve.
threatpost.com/encrypted-ema…
1
62
53
Researchers have found a new type of #malware that receives instructions via hidden code embedded in #memes... posted to #Twitter.
threatpost.com/hidden-code-i…
1
69
52
A new #hacking technique used against vulnerable #MikroTik routers gives attackers the ability to execute remote code on affected devices.
Researchers @TenableSecurity outlined the attack at #DerbyCon2018.
threatpost.com/poc-attack-es…
59
54
More than 2 million #IoT devices have serious vulnerabilities that have been publicly disclosed for more than two months – yet they are still without a patch or even any vendor response.
threatpost.com/consumers-urg…
60
51
The first-stage Golang malware loader, spotted in active campaigns, has added additional exploits and a new backdoor capability.
threatpost.com/worm-golang-m…
32
49
Threat actors can easily build #malware-laced Community Amazon Machine Images (AMI) and make them available to unsuspecting #AWS customers, researchers warn.
threatpost.com/malicious-aws…
41
50
A researcher found that phone numbers tied to #WhatsApp accounts are indexed publicly on #Google Search creating what he claims is a “privacy issue” for users.
threatpost.com/whatsapp-phon…
49
47
A money-siphoning #malware has been found hiding in seemingly legitimate photo editing apps available on the #Google Play store.
threatpost.com/mobok-malware…
2
67
50
A vulnerability discovered in #mobile SIM cards is being actively exploited to track phone users – all merely by sending an #SMS message to victims, researchers say.
threatpost.com/1b-mobile-use…
2
46
49
Researchers are warning of a dangerous spearphishing campaign, which has targeted 17 U.S. utility companies with a new #malware variant.
The malware, which @proofpoint calls LookBack, has capabilities to view system data and reboot machines.
threatpost.com/more-u-s-util…
54
45
Threat-hunters say the breached data from the massive Equifax incident is nowhere to be found, indicating a spy job.
threatpost.com/equifax-data-…
1
61
47
"The problem is this green lock... It means the connection is encrypted, not that the content of the site is safe.” bit.ly/2rotZrI
2
58
51
A long-feared attack vector against Pretty Good Privacy (PGP) is being exploited for the first time, making it impossible for #PGP to work properly for victims targeted.
threatpost.com/pgp-ecosystem…
52
51
#Nvidia warned of high-severity flaws in its graphics drivers for #Windows users.
threatpost.com/nvidia-window…
4
46
49
An insidious #phishing method evades detection using a never-before-seen technique that leverages custom fonts, according to @proofpoint researchers.
threatpost.com/phishing-cust…
50
53
Hackers take down @Adobe Reader, @Apple Safari, @Microsoft Edge + @Ubuntu at day one of #Pwn2Own 2017 - bit.ly/2mwUnbH #CanSecWest
1
50
53
Join our #WomenInSTEM webinar to learn more about why women are a crucial piece of the #cyber workforce puzzle.
Threatpost will talk to Cynthia Brossman of @BU_Tweets about expanding female representation in the cyber workforce.
Register now! bit.ly/2Pj4iQw
6
17
40
#Emotet can now hack insecure Wi-Fi networks nearby an infected device - a tactic that rapidly escalates the #malware's spread, researchers say.
threatpost.com/emotet-now-ha…
1
51
51
#Dell patched a high-severity flaw in its SupportAssist #software, which could allow attackers to execute arbitrary code (with admin privileges)
threatpost.com/dell-patches-…
1
40
47
More than 2 million #passwords for Wi-Fi hotspots were leaked online by the #Android app developer behind the mobile application called WiFi Finder.
threatpost.com/leaky_app_dat…
1
72
48
A #biometric USB that claims to be "unhackable" actually offers up passwords in plain text.
threatpost.com/unhackable-bi…
5
44
51
#Facebook tracks #Android users via apps - even if they aren’t Facebook users.
That's according to a new report by @privacyint presented at #35C3.
threatpost.com/how-facebooks…
2
50
46
Researchers @_CPResearch_ identified a new class of #security vulnerabilities targeting SQLite, outside the context of a browser for the first time. #DEFCON27
threatpost.com/sqlite-exploi…
18
50
A critical Zoom #vulnerability allows remote #hackers to hijack conference meetings and kick attendees out.
Researchers at @TenableSecurity disclosed the unauthorized command execution flaw today.
threatpost.com/critical-zoom…
1
63
50