Page 318 - Vulnerabilities News Today

minute read Share this article: RIPE NCC, the regional Internet registry for Europe, West Asia, and the former Soviet Union, said attackers attempted a credential-stuffing attack against its single-sign on service. Regional internet registry RIPE NCC is warning of a credential-stuffing attack against its single sign-on service, RIPE NCC Access, and is encouraging users to implement two-factor authentication (2FA). Click to Register Located in Amsterdam, the Réseaux IP Européens N...

However, internal products and systems were not leveraged to attack others during the massive supply-chain incident, the tech giant said.

Tonight. and millions still boiling their water. and marcus, tomorrow brutal cold yet again? >> reporter: david, the lows tonight expected to be 15 degrees. the wind chill 7. but tomorrow, temperatures are expected to get back above freezing for the first time in six days. and that will be a moment of real relief for people here, david. but so many are frustrated. they want to know why nothing was done to address the vulnerabilities with the power grid after that last major outage a decade ago, ...

(Bloomberg) -- Federal Reserve staff members gave a potentially more worrisome assessment of the risks to financial stability in the central bank’s policy meeting last month than the one presented publicly by Chair Jerome Powell.Speaking to reporters on Jan. 27 after the Fed’s last policy making meeting, Powell called financial stability vulnerabilities overall “moderate.” Central bank staff gave a less sanguine assessment in their presentation at the January meeting,...

minute read Share this article: Apps like eHarmony and MeetMe are affected by a flaw in the Agora toolkit that went unpatched for eight months, researchers discovered. Click to Register A vulnerability in an SDK that allows users to make video calls in apps like eHarmony, Plenty of Fish, MeetMe and Skout allows threat actors to spy on private calls without the user knowing. Researchers discovered the flaw, CVE-2020-25605, in a video-calling SDK from a Santa Clara, Calif.-based comp...

In its latest Platform Security Guide, Cupertino raised the curtain on the critical features that protect against hackers.

minute read Share this article: A malicious website or malicious ad can trigger an exploit for the IE zero-day bug, opening the door for data theft and code execution, new analysis notes. New details have emerged about an unpatched security vulnerability in Microsoft’s Internet Explorer that was recently used in a complex campaign against security researchers. A fresh analysis from 0patch offers further insight into where the bug exists and how it can be triggered in real-world a...

minute read Share this article: The Department of Justice (DoJ) cracked down on a Ghana-based cybercriminal enterprise behind a slew of romance scams, COVID-19 fraud attacks and business email compromise schemes since 2013. Click to Register U.S. law enforcement arrested six “ringleaders” of a Ghana-based cybercriminal enterprise, who had allegedly launched a slew of money-stealing scams dating back to 2013 that included romance scams, business email compromise attacks and frau...

minute read Share this article: TikTok is again in hot water for how the popular video-sharing app collects and shares data – particularly from its underage userbase. An umbrella group comprising 44 consumer-privacy watchdog organizations have filed a complaint against TikTok, saying the wildly-popular video-sharing platform has “misleading” data-collection policies. ByteDance-owned TikTok has skyrocketed in popularity, with more than 2 billion downloads on the Google Play a...

The open CA prepares for ‘worst scenarios’ with new fiber, servers, cryptographic signing and more. Let’s Encrypt just announced an infrastructure makeover which means the open certificate authority (CA) is able to re-issue up to 200 million certificates in a 24-hour period, something the service said could be necessary in “some of the worst scenarios.” The upgrade comes a year after Let’s Encrypt was compromised by a Certificate Authority Authorization (CAA) bug and was forced to r...