资讯

Threat Post2 年
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
New research indicates that over 80,000 Hikvision surveillance cameras in the world today are vulnerable to an 11 month-old command injection flaw.
Threat Post3 年
Cyberattackers Leverage DocuSign to Steal Microsoft Outlook Logins
Microsoft’s Spam Confidence Level (SCL) – a measure of the perceived legitimacy of any given email – assigned these malicious emails a score of ‘-1.’ In SCL, -1 is the lowest possible ...
Threat Post3 年
5 Cybersecurity Trends to Watch in 2022 - Threatpost
Here’s what cybersecurity watchers want infosec pros to know heading into 2022. No one could have predicted the sheer chaos the cybersecurity industry would experience over the course of 2021 ...
Threat Post3 年
Microsoft Accounts Targeted by Russian-Themed Credential Harvesting - Threatpost
While legitimate concerns abound about the Russian-Ukrainian conflict sparking a far-reaching cyberwarfare conflagration around the globe, small-time crooks are also ramping up their efforts amid ...
Threat Post2 年
Watering Hole Attacks Push ScanBox Keylogger - Threatpost
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Threat Post3 年
Browser-in-the-Browser Attack Makes Phishing Nearly Invisible
We’ve had it beaten into our brains: Before you go wily-nily clicking on a page, check the URL. First things first, the tried-and-usually-but- not-always-true advice goes, check that the site ...
Threat Post2 年
Fake Reservation Links Prey on Weary Travelers | Threatpost
Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels.
Threat Post3 年
Merck Awarded $1.4B Insurance Payout over NotPetya Attack
Unsealed court records show pharmaceutical giant Merck was awarded a $1.4 billion payout last month on its property insurance policy, for losses the company suffered because of the 2017 NotPetya ...
Threat Post3 年
Attackers Use Event Logs to Hide Malware | Threatpost
A sophisticated campaign utilizes a novel anti-detection method.Fileless Malware Hides in Plain Sight (Event Logs) The first stage of the attack involves the adversary driving targets to a ...
Threat Post3 年
QNAP: Get NAS Devices Off the Internet Now - Threatpost
Get your internet-exposed, network-attached storage (NAS) devices off the internet now, Taiwanese manufacturer QNAP warns: Ransomware and brute-force attacks are widely targeting all network devices.
Threat Post2 年
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post2 年
Twitter Whistleblower Complaint: The TL;DR Version - Threatpost
Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.