ThreatRavens.

Browsing category

Security threats

australia, BEC, business email compromise, email scam, KF Solicitors, Law & order, Mireille Appert, Nigerian scam, Phishing, Security threats,

Email crooks swindle woman out of $150K from home sale

She sent her bank account details three times, she said. Unfortunately, they wound up in crooks’ hands, and her money wound up in their pockets.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

January 17, 2019

Amazon, AWS, Data loss, database breach, Elasticsearch, Security threats, SMS, VoIP, VOIPo, Vulnerability,

Change your password! VoIP provider leaves huge database exposed online

A researcher has discovered an exposed database containing gigabytes of call logs, SMS data, and internal system credentials belonging to US Voice-over-IP (VoIP) service provider VOIPo.com.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

January 17, 2019

Artem Radchenko, Data loss, EDGAR, Electronic Data Gathering Analysis and Retrieval, hacking, indictment, Law & order, Malware, Oleksandr Ieremenko, Phishing, SEC, Securities and Exchange Commission, securities fraud, Security threats, ukraine, wire fraud,

Two charged with hacking company filings out of SEC’s EDGAR system

They’re charged with phishing and inflicting malware to get into the EDGAR filing system, stealing thousands of filings, and selling access.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

January 17, 2019

Encryption, Facebook, Mobile, Privacy, Security threats, WhatsApp,

Are you sure those WhatsApp messages are meant for you?

Abby Fuller got a shock when she logged into WhatsApp using a new telephone number. She found someone else’s messages waiting for her.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

January 16, 2019

intel, Intel SGX, Organisations, Patching, processors, Security threats, SGX, Skylake, Vulnerability,

Intel patches another security flaw in SGX technology

Of the six advisories Intel released last week, the most interesting is a flaw discovered in the company’s Software Guard Extensions (SGX).

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

January 16, 2019

Government security, HSTS, Security threats, TLS, US government,

Shutdown hits government websites as certificates begin to expire

The US government shutdown is affecting more than just physical sites like national parks and monuments.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

January 14, 2019

#opJustina, Anonymous, DDOS, Denial of Service, hacktivism, Law & order, Security threats,

10 years for Boston Children’s Hospital attacker

Martin Gottesfeld said he wishes he “had done more” than knock out BCH’s network for at least two weeks.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

January 14, 2019

2-Factor Authentication, 2FA, gmail, Google, Modlishka, one-time passcodes, pen testing, Phishing, Security threats, Titan key, two-factor authentication keys, Yubikey,

2FA codes can be phished by new pentest tool

A researcher has published a tool called Modlishka, capable of phishing 2FA codes sent by SMS or authentication apps.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

January 11, 2019

DX.Exchange, login, responsible disclosure, Security threats, Stock trading, Trading, Vulnerability,

Trading site DX.Exchange spills gobs of user data

A trader believes he could easily have obtained admin access to the site and potentially have stolen the funds of its 600,000 users.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

January 11, 2019

adobe, Adobe Flash, Adobe Reader, exchange, Microsoft, Organisations, Patch Tuesday, Remote code execution, Security threats, Vulnerability, Windows 10,

Update now! Microsoft and Adobe’s January 2019 Patch Tuesday is here

After a busy sequence of updates in October, November, and December, the new year’s first Patch Tuesday promises a lighter workload.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

January 10, 2019

Older Posts