Accessibility links

Spotify Users Give Up Tons Of Personal Data, Shared With Facebook

Identity Theft

Spotify Users Give Up Tons Of Personal Data, Shared With Facebook

We can now add Spotify to the list of info-grabber apps that rivals Facebook’s collection of our PII. No one likes the idea of an app collecting our personal data and that’s especially true when it’s gathered without our knowledge. Some users believe having their PII up for grabs is simply a part of online life, with many willing to shrug their shoulders and move on. But how could listening to music and podcasts on Spotify gather so much data about us, and is there anything we can do about it? READ FULL STORY

Scams & Phishing

Are Ransomware Groups Rebranding Themselves After Shutting Down?
October 22, 2021

Security experts warned the public that recently defunct ransomware-as-a-service (RaaS) groups could come back to haunt us. Two of those groups, responsible for headline-grabbing ransomware attacks, now have successors with eerily similar styles. Security experts wonder if two new RaaS groups, BlackMatter and Heron, are simply rebranded copies of the originals. The short answer to the question is yes, it is possible. And yes, we were warned this could happen. READ FULL STORY

16 Years Later--Security Patch For Millions Of Printers Available

Your Security

16 Years Later--Security Patch For Millions Of Printers Available

Raise your hand if you’re among the millions using a printer for personal or business needs. Now, raise your hand again if you thought your printer would ever need a security patch. You’re likely among those who had no clue printers could even have a security flaw. Thanks to an inadvertent discovery by Sentinel Labs, a printer security bug they labeled as “high severity” was found in several brands of printers. Hard to believe, but it only took 16 years for this security bug to be found. READ FULL STORY
FlyTrap Trojan Catches 10,000 Android Facebook Users In 140 Countries

Mobile Security

FlyTrap Trojan Catches 10,000 Android Facebook Users In 140 Countries

The next time you get a message from a friend while on Facebook, think before you act. That message could be from FlyTrap, an Android Trojan using social engineering tactics to draw you into its web. Researchers from Zimperium first discovered, then named the malware “FlyTrap” for its ability to spread through “social media hijacking, third-party app stores, and sideloaded applications.” FlyTrap has compromised over 10,000 Facebook user accounts in 140 countries. READ FULL STORY
1 Million FREE Stolen Bank Cards Posted On Underground Forum

Your Security

1 Million FREE Stolen Bank Cards Posted On Underground Forum

Security researchers recently discovered an avalanche of stolen banking card data, 1 million of them, available for free on an underground forum called “All Worlds Cards” card shop, or “AW_cards” for short. In business for just a few months, 3.8 million bank cards were placed on AW_cards, with more than 2.6 million available for sale. Findings show the free cards are unique in that they have not previously appeared on other underground forums. READ FULL STORY

Your Security

Urgent Fixes For Two New Google Zero-Day Flaws. Update Now!
October 18, 2021

With nearly 2.6 billion users worldwide using Google Chrome as their browser of choice, they’ve been exposed to 12 zero-day exploits so far this year, that is until recently. Google added two more zero-day flaws to the list, urging its fans to update the available security patches PDQ. In the past year alone, Chrome browser has experienced a total of 14 zero-day flaws – a new record for the browser behemoth. These latest findings come on the heels of other zero-days recently reported by Microsoft Windows. READ FULL STORY

Getting To Know You. New Android Spyware Infiltrates Mobile Messaging Apps

Mobile Security

Getting To Know You. New Android Spyware Infiltrates Mobile Messaging Apps

No one wants to think their smartphone is also a spying device, but a recent discovery found a new Android spyware is finding a home on mobile devices. This new spyware is the latest version since first being detected in 2017, and it has gone through many improvements since then. The spyware, called Android/SpyC23.A and the hacking group behind it, have a history of using surveillance malware and both are well-known to the cybersecurity community worldwide. READ FULL STORY
Phone Scammers Use Big Tech As Lures

Mobile Security

Phone Scammers Use Big Tech As Lures

Ask a robocall recipient and they’ll tell you that robocalls are annoying and a waste of time. But the victim of a phone scam (vishing) will tell you it could mean losing a lot more than just time. Like email phishing, falling for a vishing scam can put you in danger of losing your identity, your money, and any other private information a criminal can get. So, what to do when the caller claims to be from a trusted business and has a legitimate reason to call? READ FULL STORY
Phishing Attacks Blowing Up; 74% Of Companies Losing The Fight

Corporate Security

Phishing Attacks Blowing Up; 74% Of Companies Losing The Fight

In the past year alone, 74% of organizations have succumbed to phishing attacks, with 40% victimized in just one month. A report from Ivanti reveals results that show a desperate need for security improvements by corporate America if we’re ever hoping to win the ongoing fight against phishing attacks. The report takes a closer look at how email phishing prevails as a fierce vector for malware attacks, and why businesses are failing to stop it. READ FULL STORY
Your Peloton Got You Out Of Breath? New Technical Flaws Give You More Reasons To Sweat

Your Security

Your Peloton Got You Out Of Breath? New Technical Flaws Give You More Reasons To Sweat

There’s a new reason to sweat over your Peloton bike, treadmill or other equipment. Researchers from McAfee have discovered that hackers who are able to get direct access to those sweat-inducing machines can take control over that camera you look into while you're pedaling as well as the microphone, so they can hear you grunt along with the music. They can even monitor you. They can mess with apps such as Netflix, fiddle with your playlists stored in Spotify, and if they can convince you, they can get credentials you enter for these services and others. READ FULL STORY
Ransomware Group Calling It Quits, But Can We Trust Them?

Your Security

Ransomware Group Calling It Quits, But Can We Trust Them?

In the world of ransomware threat groups, why would any well-known and successful group decide to throw in the towel? That’s the question cybersecurity pros are asking themselves after another group announced its departure from ransomware attacks. Avaddon, a ransomware-as-a-service (RaaS) provider that recently garnered public warnings from the FBI and Australian Cyber Security Center, claims they’ve shut their doors by joining the ranks of the ransomware-free. But can they be trusted? READ FULL STORY
Chinese APT Uses Fake Zoom Software For Espionage

Your Security

Chinese APT Uses Fake Zoom Software For Espionage

The conferencing app that catapulted into fame during the pandemic has become a tool for spying on governments in Southeast Asia. Kaspersky researchers dubbed the Chinese APT (advanced persistent threat group) LuminousMoth after they found the APT is pedaling fake Zoom software for their cyberespionage efforts. Doing so enabled spying on high-profile targets in Myanmar and the Philippines. Kaspersky finds these infection rates could be skewed, as they believe LuminousMoth was really after a small, select number of victims, including government agencies. READ FULL STORY
Sign-In Without A Password? The Pros And Cons Of The Alternatives

Your Security

Sign-In Without A Password? The Pros And Cons Of The Alternatives

Using strong and unique passwords for every online account can be a frustrating, cumbersome, and time-consuming effort. Being human, the temptation to reuse passwords across multiple accounts surely exists. But in doing so, we know poor password hygiene can lead to cyberattacks, especially for accounts using the same password. Cyber history has shown us repeatedly that password reuse is very risky, yet we do it anyway. Now, the idea of passing on passwords to verify our identity are taking shape. But don't get in a hurry. READ FULL STORY
Business Email Spoofing On The Rise

Corporate Security

Business Email Spoofing On The Rise

While the headlines are focused on ransomware attacks, spoofed emails are getting sneakier and more successful. Bad actors are always finding new ways to hack their way into businesses, and spoofing email addresses are proven way of doing just that. During the first 100 days of the coronavirus outbreak, spoofing attacks increased by 30%. This type of phishing email can sneak past antivirus security and lead to data theft, fraudulent wire transfers, ransomware, BEC (business email compromise), and more. READ FULL STORY




We use cookies to give you a more relevant browsing experience and improve our website. Using this site means that you agree with our use of cookies policy.