Page 303 - Vulnerabilities News Today

FBI/CISA warn about the RaaS network behind the Colonial hack, Colonial restarts operations, and researchers detail groups that rent the ransomware.

According to Keeper Security’s Workplace Password Malpractice Report, many remote workers aren’t following best practices for password security.

The ‘Send My’ exploit can use Apple's locator service to collect and send information from nearby devices for later upload to iCloud servers.

minute read Share this article: Tony Lauro, director of security technology and strategy at Akamai, discusses hardware security dongles and using phones to act as surrogates for them. You have to hand it to the cyber-thieves: They have proven extremely adept at defeating security measures once thought reliable. Case in point: multifactor authentication (MFA). While two-factor authentication (2FA) using push text notifications has become the de-facto standard for login security, bad...

To revist this article, visit My Profile, then View saved stories. A set of vulnerabilities in how Wi-Fi is designed and used in practice expose virtually every Wi-Fi-enabled device to some form of attack. A handful of those flaws have been around since the original Wi-Fi standard debuted in 1997.  The findings, publicly disclosed this week by New York University Abu Dhabi researcher Mathy Vanhoef, show that an attacker within Wi-Fi range of a target network could potentially exfiltrate data ...

GitHub adds support for FIDO2 security keys for Git over SSH to fend off account hijacking and further its plan to stick a fork in the security bane of passwords.

Malware first observed in Italy can steal victims’ credentials and SMS messages as well as livestream device screens on demand.

Argyle is paying workers to help hack payroll providers, researchers suspect. Fintech startup Argyle, a financial-services platform aimed at gig workers, is working to replace credit scores assigned by bureaus like Equifax. But closer security analysis hints that Argyle could be just the latest incarnation of an ongoing data-collection campaign, paying people to give up their payroll login credentials on a massive scale, researchers said. Argyle is marketed as a way for the growing numbers of g...

Wi-Fi devices going back to 1997 are vulnerable to attackers who can steal your data if they're in range.

GovInfoSecurity Compliance DougOlenick) • May 12, 2021     Get Permission Microsoft issued patches Tuesday for four more vulnerabilities in on-premises versions of the Exchange Server corporate email platform, one of which is a zero-day flaw. These latest patches come after Microsoft in March patched four critical flaws in Exchange Server that had been widely exploited by attackers. Microsoft said a China-based gro...