Page 13 - Web Security News Today

A critical-severity buffer-overflow flaw that affects IBM Integration Designer could allow remote attackers to execute code. IBM has patched a critical buffer-overflow error that affects Big Blue’s Integration Designer toolset, which helps enterprises create business processes that integrate applications and data. If exploited, the flaw could enable remote code execution. Click to Register The flaw (CVE-2020-27221) has a CVSS base score of 9.8 out of 10, making it critical in severity. It ste...

NurseryCam suspends service across 40 daycare centers until a security fix is in place. NurseryCam, a webcam service used across 40 daycare centers in the U.K. by parents who want to keep a watchful eye on their babies, has shut down following a data breach. The breach exposed the personal data of about 12,000 users to an attacker who said he or she was trying to improve the service’s security. The attacker was able to find a “loophole” in the system, according to reports; NurseryCam was ...

minute read Share this article: The threat actors stole data and used Clop’s leaks site to demand money in an extortion scheme, though no ransomware was deployed. Researchers have identified a set of threat actors (dubbed UNC2546 and UNC2582) with connections to the FIN11 and the Clop ransomware gang as the cybercriminal group behind the global zero-day attacks on users of the Accellion legacy File Transfer Appliance product. Click to Register Multiple Accellion FTA customers, in...

APT31, a Chinese-affiliated threat group, copied a Microsoft Windows exploit previously used by the Equation Group, said researchers.

Two breaches of the audio-based social media app reinforce privacy, security concerns.

DoppelPaymer ransomware gang claims credit for Kia’s outage, demands $20 million in double-extortion attack.

Click to Register Apple released its 2021 Platform Security guide, Thursday, outlining its current and year-ahead agenda for its device hardware, software and silicon security. This year’s 192-page report is beefed-up, compared to past reports, with a wealth of new insights into how Apple is tackling security and privacy within its entire mobile, desktop and cloud ecosystem. Previous Platform Security updates have taken a piecemeal approach to address Apple’s security universe, said Rich Mo...

A second malware that targets Macs with Apple's in-house M1 chip is infecting machines worldwide — but it's unclear why.

minute read Share this article: RIPE NCC, the regional Internet registry for Europe, West Asia, and the former Soviet Union, said attackers attempted a credential-stuffing attack against its single-sign on service. Regional internet registry RIPE NCC is warning of a credential-stuffing attack against its single sign-on service, RIPE NCC Access, and is encouraging users to implement two-factor authentication (2FA). Click to Register Located in Amsterdam, the Réseaux IP Européens N...

However, internal products and systems were not leveraged to attack others during the massive supply-chain incident, the tech giant said.