threatpost - Robuta Search

https://threatpost.com/malware-scanning-services-containers-for-sensitive-business-information/124802/ Malware Scanning Services Containers for Sensitive Business Information | Threatpost At the Security Analyst Summit, one researcher shared how he was able to find corporate emails, confidential business plans and classified FBI flash alerts. malware scanning business information services containers sensitive https://threatpost.com/linux-bug-in-all-major-distros-an-attackers-dream-come-true/177996/ Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’ | Threatpost The 12-year-old flaw in the sudo-like Polkit’s pkexec tool, found in all major Linux distributions, is likely to be exploited in the wild within days. ubiquitous linux bug dream come https://threatpost.com/amazon-alexa-secretly-records-children/145708/ Amazon Alexa Secretly Records Children, Lawsuits Allege | Threatpost Two lawsuits are seeking class-action status, alleging that Amazon records children without consent and stores their voiceprints indefinitely. amazon alexa secretly records children lawsuits https://threatpost.com/hackers-continue-cyberattacks-against-vatican-catholic-orgs/159306/ Hackers Continue Cyberattacks Against Vatican, Catholic Orgs | Threatpost The China-linked threat group RedDelta has continued to launch cyberattacks against Catholic institutions since May 2020 until as recently as last week. hackers continue cyberattacks vatican catholic https://threatpost.com/microsoft-unpatched-printnightmare-zero-day/168613/ Microsoft Warns: Another Unpatched PrintNightmare Zero-Day | Threatpost The out-of-band warning pairs with a working proof-of-concept exploit for the issue, circulating since mid-July - and ransomware attacks. zero day microsoft warns another unpatched https://threatpost.com/nsa-bought-exploit-service-from-vupen-contract-shows/102314/ NSA Bought Exploit Service From VUPEN, Contract Shows | Threatpost The NSA bought a one year subscription to the VUPEN exploit service in 2012. nsa bought exploit service vupen https://threatpost.com/malware-wordpress-license-key/141315/ Stealthy Malware Disguises Itself as a WordPress License Key | Threatpost A spam injector hides in plain site within WordPress theme files. as a license key stealthy malware disguises https://threatpost.com/critical-dns-bug-windows-servers-infrastructure-takeover/157427/ Critical DNS Bug Opens Windows Servers to Infrastructure Takeover | Threatpost Microsoft gives the ‘wormable’ flaw a security rating of 10 – the most severe warning possible. critical dns bug opens windows Sponsored https://www.sexyfans.app/enter.php?prg=1&id=robuta&t=best&ad_id=sexyfans_300x250_202201_1.jpg Sexyfans.app - Only Fans of Dating Apps The only dating app for fans to meet up with local content creators. https://threatpost.com/adobe-prompts-users-to-uninstall-flash-player-as-eol-date-looms/156794/ Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms | Threatpost Adobe will prompt Flash Player users to uninstall the application before the Dec. 31, 2020 end of life date hits. flash player adobe prompts users uninstall https://threatpost.com/alpine-linux-docker-images-unlocked/144542/ Alpine Linux Docker Images Shipped for 3 Years with Root Accounts Unlocked | Threatpost Alpine Linux Docker images available via the Docker Hub contained a critical flaw allowing attackers to authenticate on systems using the root user and no... alpine linux docker images root accounts shipped years https://fidoalliance.org/threatpost-threatpost-survey-says-2fa-is-just-fine-but-go-ahead-and-kill-sms/?lang=ko&query-cdbd12d0-page=5 Threatpost : Threatpost 설문 조사 말한다 : 2FA는 괜찮지 만 계속해서 SMS를 죽이십시오 | FIDO Alliance Jan 10, 2025 - 2단계 인증에 대한 Threatpost 설문 조사에서 응답자의 57%는 FIDO 보안 키와 같은 하드웨어 토큰이 두 번째 요소가 되어야 한다고 답했습니다. fido alliance threatpost https://threatpost.com/facebook-makes-its-ctf-platform-freely-available/118009/ Facebook Capture The Flag Platform Open Source | Threatpost Facebook today made its capture the flag platform freely available on GitHub, which includes a ready-made backend and a set of pre-defined challenges. capture the flag open source facebook platform threatpost https://threatpost.com/new-kronos-banking-malware-advertised-on-russian-forums/107210/ New Kronos Banking Malware Advertised On Russian Forums | Threatpost The new Kronos banking Trojan is being advertised for sale on Russian forums. Kronos promises antivirus evasion capabilities, such as a Ring3 rootkit. on russian new kronos banking malware https://threatpost.com/apple-removes-apps-that-expose-encrypted-traffic/114992/ Apple Removes Apps That Expose Encrypted Traffic | Threatpost Apple today removed a number apps from the App Store accused of installing root certificates that compromised SSL/TLS connections. apple removes apps expose encrypted https://threatpost.com/cisco-patches-critical-telepresence-vulnerability/117866/ Cisco Issues Critical Security Warning Tied to TelePresence Hardware | Threatpost Cisco alerted customers three vulnerabilities, one critical and two high, along with patches to fix them. tied to cisco issues critical security https://threatpost.com/cyberwar-ukraine-military/179421/ Cyberattacks Rage in Ukraine, Support Military Operations | Threatpost At least five APTs are believed involved with attacks tied ground campaigns and designed to damage Ukraine’s digital infrastructure. in ukraine military operations cyberattacks rage support https://threatpost.com/mimecast-certificate-microsoft-supply-chain-attack/162965/ Mimecast Certificate Hacked in Supply-Chain Attack | Threatpost A sophisticated threat actor has hijacked email security connections to spy on targets. supply chain attack mimecast certificate hacked threatpost https://threatpost.com/netflixs-https-update-cant-combat-passive-traffic-analysis-attacks/124954/ Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks | Threatpost Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack. traffic analysis https update combat passive https://threatpost.com/attackers-whatsapp-voice-message/179244/ Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info | Threatpost Threat actors target Office 365 and Google Workspace in a new campaign, which uses a legitimate domain associated with a road-safety center in Moscow to send... voice message attackers spoof whatsapp alerts https://threatpost.com/adobe-fixes-81-vulnerabilities-in-acrobat-reader-flash/121206/ Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash | Threatpost Adobe patched 81 vulnerabilities, including a handful of critical bugs, in Acrobat, Reader, and Flash on Tuesday. acrobat reader adobe fixes vulnerabilities flash https://threatpost.com/facebook-ios-tracks-anything/180395/ Facebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’ | Threatpost Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. on ios you do app browser tracks https://threatpost.com/wordpress-bug-leaves-sites-open-to-attack/151911/ Critical WordPress Bug Leaves 320,000 Sites Open to Attack | Threatpost Authentication bypass bugs in WordPress plugins InfiniteWP Client and WP Time Capsule leave hundreds of thousands of sites open to attack. critical wordpress bug leaves sites https://threatpost.com/5-top-threatpost-stories-2021/177278/ The 5 Most-Wanted Threatpost Stories of 2021 | Threatpost A look back at what was hot with readers in this second year of the pandemic. most wanted threatpost stories https://threatpost.com/cisco-bugs-unpatched-millions-devices/144692/ Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices | Threatpost The two high-severity bugs impact a wide array of enterprise, military and government networks. pair of cisco bugs one unpatched https://threatpost.com/whatsapp-bug-malicious-code-injection-rce/152578/ WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE | Threatpost A high-severity vulnerability could allow cybercriminals to push malware or remotely execute code, using seemingly innocuous messages. malicious code one click whatsapp bug allows https://threatpost.com/chris-vickery-discusses-data-leak-of-48-million-users-by-private-intelligence-firm/131295/ Chris Vickery Discusses Data Leak of 48 Million Users by Private Intelligence Firm | Threatpost Private intelligence gathering firm LocalBlox leaked data on 48 million users that was scraped from Facebook, LinkedIn, Zillow and other sites. data leak private intelligence chris vickery discusses https://threatpost.com/microsoft-petitpotam-poc/168163/ Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC | Threatpost Microsoft releases mitigations for a Windows NT LAN Manager exploit that forces remote Windows systems to reveal password hashes that can be easily cracked. microsoft rushes fix attack poc Sponsored https://www.camsoda.com/?id=robuta&ad_id=300x250_8.gif Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy! https://threatpost.com/cisco-aironet-access-points-critical-flaws/149266/ Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws | Threatpost Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices. access points cisco aironet plagued critical https://threatpost.com/tens-of-thousands-of-malicious-apps-using-facebook-apis/131566/ Tens of Thousands of Malicious Apps Using Facebook APIs | Threatpost The apps are deemed malicious by doing things such as capturing pictures and audio when the app is closed, or making an unusually large amount of network calls. malicious apps tens thousands using facebook https://threatpost.com/attackers-target-florida-condo-collapse-victims/167917/ Ruthless Attackers Target Florida Condo Collapse Victims | Threatpost Hackers are stealing the identities of those lost in the condo-collapse tragedy. florida condo collapse ruthless attackers target victims https://threatpost.com/cyberattack-cripples-iranian-fuel-distribution-network/175794/ Cyberattack Cripples Iranian Fuel Distribution Network | Threatpost The incident triggered shutdowns at pumps across the country as attackers flashed the phone number of Supreme Leader Ali Khamenei across video screens. distribution network cyberattack cripples iranian fuel https://threatpost.com/automaker-cybersecurity-lagging-tech-adoption/179204/ Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn | Threatpost A bug in Honda is indicative of the sprawling car-attack surface that could give cyberattackers easy access to victims, as global use of ‘smart car tech’ and... lagging behind automaker cybersecurity tech adoption https://threatpost.com/samsung-lg-android-spearphone-eavesdropping/146625/ Popular Samsung, LG Android Phones Open to ‘Spearphone’ Eavesdropping | Threatpost A Spearphone attacker can use the accelerometer in LG and Samsung phones to remotely eavesdrop on any audio that’s played on speakerphone, including calls,... android phones popular samsung open eavesdropping https://threatpost.com/petya-ransomware-encrypts-master-file-table/117024/ Petya Ransomware Master File Table Encryption | Threatpost The Petya crypto ransomware encrypts a compromised computer’s master file table. master file table petya ransomware encryption threatpost https://threatpost.com/ebay-fixes-file-upload-and-patch-disclosure-bugs/111898/ eBay Fixes File Upload and Patch Disclosure Bugs | Threatpost eBay has fixed two security flaws in its site that allowed arbitrary file uploads and path disclosure. file upload ebay fixes patch disclosure https://threatpost.com/attack-method-highlights-weaknesses-in-microsoft-cfg/125242/ New COOP Attack Method Highlights Weaknesses In Microsoft’s CFG Defenses | Threatpost As Microsoft hardens its defenses with tools such as Control Flow Guard, researchers at Endgame are preparing for the reality of Counterfeit Object-Oriented... new coop attack method highlights https://threatpost.com/remote-code-execution-bug-found-in-ubuntu-quantal/122561/ Remote Code Execution Bug Found in Ubuntu Quantal | Threatpost Researcher finds a remote code execution bug in Ubuntu Desktop affecting all default installations of Quantal version 12.10 and later. remote code execution bug found ubuntu quantal threatpost https://threatpost.com/critroni-crypto-ransomware-seen-using-tor-for-command-and-control/107306/ Critroni Crypto Ransomware Seen Using Tor for Command and Control | Threatpost The Critroni or CTB-Locker ransomware is using the Tor network for command and control. command and control crypto ransomware seen using https://threatpost.com/microsoft-warns-zerologon-bug/160769/ Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug | Threatpost Tech giant and feds this week renewed their urge to organizations to update Active Directory domain controllers. threat actors microsoft warns continue exploit https://hmstel.com/2016/05/wordpress-patches-some-xss-flaws-in-version-4-5-2-threatpost Wordpress Patches Some Xss Flaws In Version 4 5 2 Threatpost | Hmstel Digital Solutions HMS.TELECOM Digital Solutions, A premier web development agency specializing in cutting-edge CRM systems, AI/LLM integration, fintech solutions, and AI-powered... in version digital solutions wordpress patches xss https://threatpost.com/cisco-critical-vulnerability-patch/140726/ Critical Flaw in Cisco’s Email Security Appliance Enables ‘Permanent DoS’ | Threatpost A remote attacker could exploit the vulnerability simply by sending an email. email security critical flaw appliance enables https://threatpost.com/samsung-windows-laptop-owners-urged-to-download-fix-to-mitm-vulnerability/116710/ Samsung Windows Laptop Owners Urged To Download Fix To MitM Vulnerability | Threatpost All Samsung laptop owners are being urged to update their Windows PCs immediately after the discovery of a vulnerability that can allow remote attackers to... to download samsung windows laptop owners https://threatpost.com/tap-ghost-attack-android/145286/ Tap ‘n Ghost Attack Creatively Targets Android Devices | Threatpost Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks. android devices tap ghost attack creatively https://threatpost.com/linkedin-instagram-preview-link-rce-security/160600/ Researchers: Instagram, LinkedIn Vulnerable to Preview-Link RCE Security Woes | Threatpost Popular chat apps, including LINE, Slack, Twitter DMs and others, can also leak location data and share private info with third-party servers. researchers instagram linkedin vulnerable preview https://threatpost.com/apple-deprecates-quick-time-for-windows-wont-patch-new-flaws/117427/ Apple Deprecates QuickTime For Windows, Won’t Patch New Flaws | Threatpost ZDI publicly disclosed a pair of serious vulnerabilities in Apple QuickTime for Windows that will not be patched because Apple is deprecating the product. for windows apple deprecates quicktime patch https://threatpost.com/apple-upgrades-bug-bounty-program-adds-macs-1m-reward/147146/ Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward | Threatpost Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include... bug bounty program apple upgrades adds macs Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10 Best Live Sex Cam Shows with Free Live Chat | XLoveCam Watch thousands of cam girls get naked on XLoveCam. https://threatpost.com/baidu-apps-google-play-data/161556/ Baidu Mobile Apps in Google Play Leak Sensitive Data | Threatpost Cyberattackers could use the information to track users across devices, disable phone service, or intercept messages and phone calls. mobile apps in google sensitive data baidu play https://threatpost.com/researchers-question-security-in-amds-upcoming-zen-chips/122357/ Researchers Question Security in AMD’s Upcoming Zen Chips | Threatpost Two German researchers are calling into question the security afforded by AMD’s Secure Encrypted Virtualization feature debuting in the chip maker’s upcoming... researchers question security upcoming zen https://threatpost.com/latest-sofacy-campaign-targeting-security-researchers/128576/ Latest Sofacy Campaign Targeting Security Researchers | Threatpost Sofacy has been using a lure document connected to a cyber conflict conference to target researchers and others interested in cybersecurity. campaign targeting latest sofacy security researchers https://threatpost.com/sudo-bug-root-access-linux-2/163395/ Sudo Bug Gives Root Access to Mass Numbers of Linux Systems | Threatpost Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. root access mass numbers sudo bug gives https://threatpost.com/cisco-acknowledges-asa-zero-day-exposed-by-shadowbrokers/119965/ Cisco Acknowledges ASA Zero Day Exposed by ShadowBrokers | Threatpost Cisco today acknowledged two vulnerabilities in its Adaptive Security Appliance that were leaked in the ShadowBrokers data dump of Equation Group exploits. zero day cisco acknowledges asa exposed https://threatpost.com/icedid-banking-trojan-surges-emotet/165314/ IcedID Banking Trojan Surges: The New Emotet? | Threatpost A widespread email campaign using malicious Microsoft Excel attachments and Excel 4 macros is delivering IcedID at high volumes, suggesting it’s filling the... the new banking trojan surges emotet https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/?https://redbotsecurity.com Watering Hole Attacks Push ScanBox Keylogger | Threatpost Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. watering hole attacks push scanbox keylogger threatpost https://threatpost.com/bloatware-insecurity-continues-to-haunt-consumer-business-laptops/118356/ OEM Bloatware Security Vulnerabilities Found | Threatpost Vulnerabilities were found in pre-installed software updaters present in consumer and business laptops from vendors such as Dell, HP, Lenovo, Asus and Acer. security vulnerabilities oem bloatware found threatpost https://threatpost.com/adobe-patches-one-zero-day-in-flash-still-investigating-separate-vulnerability/110586/ Adobe Patches One Zero Day in Flash, Still Investigating Separate Vulnerability | Threatpost Adobe has patched a security flaw in Flash that is being exploited, but a separate bug is still unpatched. zero day adobe patches one flash https://threatpost.com/iot-company-wyze-leaks-emails-device-data-of-2-4m/151451/ IoT Company Wyze Leaks Emails, Device Data of 2.4M | Threatpost The Internet of Things vendor confirmed that customer data was left unsecured on an Elasticsearch database. device data iot company wyze leaks https://threatpost.com/new-java-attack-introduced-cool-exploit-kit-111212/77205/ New Java Attack Introduced into Cool Exploit Kit | Threatpost A new exploit has been found in the Cool Exploit Kit for a vulnerability in Java 7 Update 7 as well as older versions, a flaw that’s been patched by Oracle in... exploit kit new java attack introduced https://threatpost.com/phishing-campaign-targeting-office-365-exploits-brand-names/156698/ Phishing Campaign Targeting Office 365, Exploits Brand Names | Threatpost Attackers use trusted entities to trick victims into giving up their corporate log-in details as well as to bypass security protections. campaign targeting brand names phishing office exploits https://coldfusion.kia.cc/patched-adobe-coldfusion-flaw-exploited-by-apt-threatpost-2/ Patched Adobe ColdFusion Flaw Exploited By APT – Threatpost – Coldfusion The critical vulnerability, which was patched earlier in September, has put ColdFusion servers at ri adobe coldfusion patched flaw exploited apt https://threatpost.com/dmarc-adoption-nonexistent/146751/ ThreatList: DMARC Adoption Nonexistent at 80% of Orgs | Threatpost Standard email authentication to prevent spoofing and phishing remains elusive for most. dmarc adoption nonexistent orgs threatpost https://threatpost.com/google-services-track-user-movements-in-privacy-faux-pas/135078/ Google Services Track User Movements In Privacy Faux Pas | Threatpost A recent report found that Google services - with functions like checking maps, the weather, and search - are tracking users even when they deny permission. google services faux pas track user movements https://www.sebsauvage.net/links/?iv1m1w Cryptographers Unveil New Way to Trust Certificates | threatpost - Liens en vrac de sebsauvage new way en vrac cryptographers unveil trust https://threatpost.com/facebook-requires-sha-2-as-of-oct-1/113131/ Facebook Requires SHA-2 Support as of Oct. 1, 2015 | Threatpost Facebook has put developers on notice that as of Oct. 1, apps that do not support SHA-2 will no longer connect to its network. as of facebook requires sha support https://fidoalliance.org/threatpost-threatpost-survey-says-2fa-is-just-fine-but-go-ahead-and-kill-sms/?query-cdbd12d0-page=3&cst&lang=ja Threatpost: Threatpost Survey より: 2FA is Just Fine, But Go Ahead and Kill SMS (2FA is Just Fine,... Jan 10, 2025 - 2要素認証に関するThreatpostの調査では、回答者の57%が、FIDOセキュリティキーなどのハードウェアトークンを第2の要素にすべきだと回答しています。 just fine go ahead threatpost survey kill https://threatpost.com/cisa-us-agencies-vulnerability-disclosure-policies/150718/ CISA Pushing U.S. Agencies to Adopt Vulnerability Disclosure Policies | Threatpost A newly proposed CISA directive would require all U.S. agencies to develop and implement vulnerability disclosure processes for their internet connected... u s vulnerability disclosure cisa pushing agencies https://threatpost.com/cyber-espionage-campaign-slingshot-targets-victims-via-routers/130348/ Cyber Espionage Campaign ‘Slingshot’ Targets Victims Via Routers | Threatpost Researchers have uncovered a new cyber-espionage threat that uses MikroTik routers as a springboard to launch attacks within a network. cyber espionage campaign targets victims via https://threatpost.com/google-bug-hunter-urges-apple-to-change-its-ios-security-culture/134842/ Black Hat 2018: Google Bug Hunter Urges Apple to Change its iOS Security Culture | Threatpost Project Zero researcher highlights stubborn iOS bugs as an example of why Apple and the rest of the industry needs to take a fresh approach to securing systems. black hat bug hunter ios security google urges https://threatpost.com/netgear-management-system-vulnerable-to-rce-path-traversal-attacks/116139/ Netgear Management System Vulnerable to RCE, Path Traversal Attacks | Threatpost Netgear’s Network Management System suffers from two vulnerabilities, an arbitrary file upload and a path traversal, which could let a remote attacker execute... management system path traversal netgear vulnerable rce https://threatpost.com/icedid-banker-adding-steganography-covid-19-theme/156718/ IcedID Banker is Back, Adding Steganography, COVID-19 Theme | Threatpost The malware has boosted its anti-detection capabilities in a new email campaign. is back banker adding steganography covid Sponsored https://www.asstok.com/enter.php?prg=1&id=robuta&t=best&ad_id=asstok_300x250_ms1.jpg Asstok Ready for a modern day adult dating site? Hook up online and enjoy sexting with others on AssTok. Trade private photos and videos formerly. https://threatpost.com/vulnerability-patched-in-wordpress-theme-that-allows-unrestricted-uploads/120698/ Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads | Threatpost A vulnerability has been patched in a popular WordPress theme called Neosense that allows an attacker to upload code without authentication. wordpress theme vulnerability patched allows unrestricted https://threatpost.com/pre-installed-android-app-impacts-millions-with-slew-of-malicious-activity/140800/ Pre-Installed Android App Impacts Millions with Slew of Malicious Activity | Threatpost The app was developed by legitimate Chinese manufacturing giant TCL. android app pre installed impacts millions https://threatpost.com/chinese-apt-sepulcher-malware-phishing-attacks/158871/ China-based APT Debuts Sepulcher Malware in Spear-Phishing Attacks | Threatpost The RAT has been distributed in various campaigns over the past six months, targeting both European officials and Tibetan dissidents. spear phishing china based apt debuts https://threatpost.com/ransomware-volumes-record-highs-2021/168327/ Ransomware Volumes Hit Record Highs as 2021 Wears On | Threatpost The second quarter of the year saw the highest volumes of ransomware attacks ever, with Ryuk leading the way. hit record wears on ransomware volumes highs https://threatpost.com/voicemail-phishing-scam-steals-microsoft-credentials/180005/ Voicemail Scam Steals Microsoft Credentials | Threatpost Attackers are targeting a number of key vertical markets in the U.S. with the active campaign, which impersonates the organization and Microsoft to lift... voicemail scam steals microsoft credentials https://threatpost.com/bit-and-piece-ddos-method-emerges-to-torment-isps/141142/ Bit-and-Piece DDoS Method Emerges to Torment ISPs | Threatpost Perpetrators are using smaller, bit-and-piece methods to inject junk into legitimate traffic, causing attacks to bypass detection rather than sounding alarms... bit piece ddos method emerges https://threatpost.com/mobile-browser-bugs-safari-opera-malware/160326/ Mobile Browser Bugs Open Safari, Opera Users to Malware | Threatpost A set of address-spoofing bugs affect users of six different types of mobile browsers, with some remaining unpatched. mobile browser bugs open safari opera https://threatpost.com/mac-cryptocurrency-traders-targeted-by-trojanized-apps/157557/ Mac Cryptocurrency Traders Targeted by Trojanized Apps | Threatpost Four trojanized cryptocurrency trading apps have been found spreading malware that drains cryptocurrency wallets and collects Mac users’ browsing data. mac cryptocurrency traders targeted trojanized https://threatpost.com/the-vulnerability-disclosure-process-still-broken/137180/ The Vulnerability Disclosure Process: Still Broken | Threatpost Despite the advent to bug bounty programs and enlightened vendors, researchers still complain of abuse, threats and lawsuits. vulnerability disclosure still broken process threatpost https://threatpost.com/shadowbrokers-planning-monthly-exploit-data-dump-service/125710/ ShadowBrokers Planning Monthly Exploit, Data Dump Service | Threatpost The latest rant from the ShadowBrokers ends with news of a subscription service starting in June that will leak exploits and stolen data to paying customers. data dump planning monthly exploit service Sponsored https://www.tradenudes.com/enter.php?prg=1&id=robuta&t=best&ad_id=tradenudes_315x300_2.jpg Trade Nudes for Free at TradeNudes Are you looking for someone to trade nudes with? Sext and other fun flirting! No face required. Come join the fun at TradeNudes.com. https://threatpost.com/weather-channel-off-air-hack/143936/ Weather Channel Knocked Off-Air in Dangerous Precedent | Threatpost The incident was the work of malicious cyberattackers. weather channel knocked off air dangerous precedent Sponsored https://www.sassyseniors.com/enter.php?prg=1&id=robuta&t=best&ad_id=sass_300x250_splitlsblacklingeriephone.jpg Sassy Seniors - The best passionate personals for 50 plus dating Intimate dating for sexy local seniors. https://threatpost.com/hacktivists-gab-posts-passwords/164360/ Passwords, Private Posts Exposed in Hack of Gab Social Network | Threatpost The Distributed Denial of Secrets group claim they have received more than 70 gigabytes of data exfiltrated from social media platform Gab. gab social passwords private posts exposed https://threatpost.com/php-everywhere-bugs-wordpress-rce/178338/ PHP Everywhere Bugs Put 30K+ WordPress Sites at Risk of RCE | Threatpost The plug-in’s default settings spawned flaws that could allow for full site takeover but have since been fixed in an update that users should immediately... at risk php everywhere bugs put https://threatpost.com/firewall-bug-under-active-attack-cisa-warning/180467/ Firewall Bug Under Active Attack Triggers CISA Warning | Threatpost CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. active attack firewall bug triggers cisa https://threatpost.com/samsung-lapsus-ransomware-source-code/178791/ Samsung Confirms Lapsus$ Ransomware Hit, Source Code Leak | Threatpost The move comes just a week after GPU-maker NVIDIA was hit by Lapsus$ and every employee credential was leaked. source code leak samsung confirms lapsus ransomware https://threatpost.com/ip-surveillance-bugs-axis-rce-data-theft/175350/ IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft | Threatpost Three security vulnerabilities in Axis video products could open up the door to a bevy of different cyberattacks on businesses. bugs in data theft surveillance axis gear