threatpost - Robuta Search

https://threatpost.com/malware-scanning-services-containers-for-sensitive-business-information/124802/ Malware Scanning Services Containers for Sensitive Business Information | Threatpost At the Security Analyst Summit, one researcher shared how he was able to find corporate emails, confidential business plans and classified FBI flash alerts. malware scanning business information services containers sensitive Sponsored https://www.fling.com/enter.php?prg=1&id=robuta&t=best&ad_id=fl_315x300_7.jpg Fling OFFICIAL | Biggest Dating Site For The Curious! FREE registration Looking for real connections? Fling matches verified singles in a safe, inclusive community. Find your perfect match with full support. https://threatpost.com/mimecast-certificate-microsoft-supply-chain-attack/162965/ Mimecast Certificate Hacked in Supply-Chain Attack | Threatpost A sophisticated threat actor has hijacked email security connections to spy on targets. supply chain attack mimecast certificate hacked threatpost Sponsored https://www.litlatinz.com/enter.php?prg=1&id=robuta&t=best&ad_id=litlatinz_300x250_phoneswap3.jpg LitLatinz Date with some spice. Join for free to meet sexy local Latinas. https://threatpost.com/icedid-banker-adding-steganography-covid-19-theme/156718/ IcedID Banker is Back, Adding Steganography, COVID-19 Theme | Threatpost The malware has boosted its anti-detection capabilities in a new email campaign. is back banker adding steganography covid Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10 Best Live Sex Cam Shows with Free Live Chat | XLoveCam Watch thousands of cam girls get naked on XLoveCam. https://threatpost.com/apple-deprecates-quick-time-for-windows-wont-patch-new-flaws/117427/ Apple Deprecates QuickTime For Windows, Won’t Patch New Flaws | Threatpost ZDI publicly disclosed a pair of serious vulnerabilities in Apple QuickTime for Windows that will not be patched because Apple is deprecating the product. for windows apple deprecates quicktime patch Sponsored https://spicychat.co/enter.php?prg=1&id=robuta&t=best&ad_id=sc_300x250_ms2.jpg SpicyChat - World's Biggest Spicy Chat Community Spicy Chat is the no-pressure place to meet flirty, like-minded adults. Match on vibe, slide into a chat, and let the night take its course. All from one discreet app built for fun. https://threatpost.com/ebay-fixes-file-upload-and-patch-disclosure-bugs/111898/ eBay Fixes File Upload and Patch Disclosure Bugs | Threatpost eBay has fixed two security flaws in its site that allowed arbitrary file uploads and path disclosure. file upload ebay fixes patch disclosure https://threatpost.com/ip-surveillance-bugs-axis-rce-data-theft/175350/ IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft | Threatpost Three security vulnerabilities in Axis video products could open up the door to a bevy of different cyberattacks on businesses. bugs in data theft surveillance axis gear https://threatpost.com/cyberwar-ukraine-military/179421/ Cyberattacks Rage in Ukraine, Support Military Operations | Threatpost At least five APTs are believed involved with attacks tied ground campaigns and designed to damage Ukraine’s digital infrastructure. in ukraine military operations cyberattacks rage support https://threatpost.com/remote-code-execution-bug-found-in-ubuntu-quantal/122561/ Remote Code Execution Bug Found in Ubuntu Quantal | Threatpost Researcher finds a remote code execution bug in Ubuntu Desktop affecting all default installations of Quantal version 12.10 and later. remote code execution bug found ubuntu quantal threatpost https://threatpost.com/nsa-bought-exploit-service-from-vupen-contract-shows/102314/ NSA Bought Exploit Service From VUPEN, Contract Shows | Threatpost The NSA bought a one year subscription to the VUPEN exploit service in 2012. nsa bought exploit service vupen Sponsored https://ctwmsg.com/?siteId=jasmin&cobrandId=&superCategoryName=&categoryName=girl&pageName=listpage&prm[psid]=robuta&prm[pstool]=211_4&prm[psprogram]=pps&prm[campaign_id]=&subAffId= Live Sex Cams and Adult Chat with Webcam Girls | LiveJasmin Chat for free on LiveJasmin and watch HD Live Sex cam shows! 2000+ Models are waiting for You, no registration required. https://threatpost.com/apple-upgrades-bug-bounty-program-adds-macs-1m-reward/147146/ Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward | Threatpost Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include... bug bounty program apple upgrades adds macs https://threatpost.com/microsoft-unpatched-printnightmare-zero-day/168613/ Microsoft Warns: Another Unpatched PrintNightmare Zero-Day | Threatpost The out-of-band warning pairs with a working proof-of-concept exploit for the issue, circulating since mid-July - and ransomware attacks. zero day microsoft warns another unpatched https://threatpost.com/apple-removes-apps-that-expose-encrypted-traffic/114992/ Apple Removes Apps That Expose Encrypted Traffic | Threatpost Apple today removed a number apps from the App Store accused of installing root certificates that compromised SSL/TLS connections. apple removes apps expose encrypted https://threatpost.com/cisco-acknowledges-asa-zero-day-exposed-by-shadowbrokers/119965/ Cisco Acknowledges ASA Zero Day Exposed by ShadowBrokers | Threatpost Cisco today acknowledged two vulnerabilities in its Adaptive Security Appliance that were leaked in the ShadowBrokers data dump of Equation Group exploits. zero day cisco acknowledges asa exposed Sponsored https://www.fuckdate.com/enter.php?prg=1&id=robuta&t=best&ad_id=fuckdate_300x250_202201_3.jpg Find a Fuck Buddy at Fuckdate.com Fuckdate.com casual dating on your mobile or iPhone. Use your phone to browse thousands of singles in your area. https://threatpost.com/critroni-crypto-ransomware-seen-using-tor-for-command-and-control/107306/ Critroni Crypto Ransomware Seen Using Tor for Command and Control | Threatpost The Critroni or CTB-Locker ransomware is using the Tor network for command and control. command and control crypto ransomware seen using https://threatpost.com/samsung-lapsus-ransomware-source-code/178791/ Samsung Confirms Lapsus$ Ransomware Hit, Source Code Leak | Threatpost The move comes just a week after GPU-maker NVIDIA was hit by Lapsus$ and every employee credential was leaked. source code leak samsung confirms lapsus ransomware https://threatpost.com/linux-bug-in-all-major-distros-an-attackers-dream-come-true/177996/ Ubiquitous Linux Bug: ‘An Attacker’s Dream Come True’ | Threatpost The 12-year-old flaw in the sudo-like Polkit’s pkexec tool, found in all major Linux distributions, is likely to be exploited in the wild within days. ubiquitous linux bug dream come https://threatpost.com/attack-method-highlights-weaknesses-in-microsoft-cfg/125242/ New COOP Attack Method Highlights Weaknesses In Microsoft’s CFG Defenses | Threatpost As Microsoft hardens its defenses with tools such as Control Flow Guard, researchers at Endgame are preparing for the reality of Counterfeit Object-Oriented... new coop attack method highlights https://threatpost.com/adobe-patches-one-zero-day-in-flash-still-investigating-separate-vulnerability/110586/ Adobe Patches One Zero Day in Flash, Still Investigating Separate Vulnerability | Threatpost Adobe has patched a security flaw in Flash that is being exploited, but a separate bug is still unpatched. zero day adobe patches one flash https://threatpost.com/facebook-makes-its-ctf-platform-freely-available/118009/ Facebook Capture The Flag Platform Open Source | Threatpost Facebook today made its capture the flag platform freely available on GitHub, which includes a ready-made backend and a set of pre-defined challenges. capture the flag open source facebook platform threatpost Sponsored https://www.tightbodz.com/enter.php?prg=1&id=robuta&t=best&ad_id=tightbodz_315x300_redbikini.gif Tightbodz Tightbodz is a dating app where the fit come to flirt. https://fidoalliance.org/threatpost-threatpost-survey-says-2fa-is-just-fine-but-go-ahead-and-kill-sms/?lang=ko&query-cdbd12d0-page=5 Threatpost : Threatpost 설문 조사 말한다 : 2FA는 괜찮지 만 계속해서 SMS를 죽이십시오 | FIDO Alliance Jan 10, 2025 - 2단계 인증에 대한 Threatpost 설문 조사에서 응답자의 57%는 FIDO 보안 키와 같은 하드웨어 토큰이 두 번째 요소가 되어야 한다고 답했습니다. fido alliance threatpost https://threatpost.com/cyber-espionage-campaign-slingshot-targets-victims-via-routers/130348/ Cyber Espionage Campaign ‘Slingshot’ Targets Victims Via Routers | Threatpost Researchers have uncovered a new cyber-espionage threat that uses MikroTik routers as a springboard to launch attacks within a network. cyber espionage campaign targets victims via https://threatpost.com/netgear-management-system-vulnerable-to-rce-path-traversal-attacks/116139/ Netgear Management System Vulnerable to RCE, Path Traversal Attacks | Threatpost Netgear’s Network Management System suffers from two vulnerabilities, an arbitrary file upload and a path traversal, which could let a remote attacker execute... management system path traversal netgear vulnerable rce https://threatpost.com/adobe-fixes-81-vulnerabilities-in-acrobat-reader-flash/121206/ Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash | Threatpost Adobe patched 81 vulnerabilities, including a handful of critical bugs, in Acrobat, Reader, and Flash on Tuesday. acrobat reader adobe fixes vulnerabilities flash https://threatpost.com/vulnerability-patched-in-wordpress-theme-that-allows-unrestricted-uploads/120698/ Vulnerability Patched in WordPress Theme That Allows Unrestricted Uploads | Threatpost A vulnerability has been patched in a popular WordPress theme called Neosense that allows an attacker to upload code without authentication. wordpress theme vulnerability patched allows unrestricted https://threatpost.com/hackers-continue-cyberattacks-against-vatican-catholic-orgs/159306/ Hackers Continue Cyberattacks Against Vatican, Catholic Orgs | Threatpost The China-linked threat group RedDelta has continued to launch cyberattacks against Catholic institutions since May 2020 until as recently as last week. hackers continue cyberattacks vatican catholic https://threatpost.com/mac-cryptocurrency-traders-targeted-by-trojanized-apps/157557/ Mac Cryptocurrency Traders Targeted by Trojanized Apps | Threatpost Four trojanized cryptocurrency trading apps have been found spreading malware that drains cryptocurrency wallets and collects Mac users’ browsing data. mac cryptocurrency traders targeted trojanized https://threatpost.com/samsung-windows-laptop-owners-urged-to-download-fix-to-mitm-vulnerability/116710/ Samsung Windows Laptop Owners Urged To Download Fix To MitM Vulnerability | Threatpost All Samsung laptop owners are being urged to update their Windows PCs immediately after the discovery of a vulnerability that can allow remote attackers to... to download samsung windows laptop owners https://threatpost.com/wordpress-bug-leaves-sites-open-to-attack/151911/ Critical WordPress Bug Leaves 320,000 Sites Open to Attack | Threatpost Authentication bypass bugs in WordPress plugins InfiniteWP Client and WP Time Capsule leave hundreds of thousands of sites open to attack. critical wordpress bug leaves sites https://threatpost.com/dmarc-adoption-nonexistent/146751/ ThreatList: DMARC Adoption Nonexistent at 80% of Orgs | Threatpost Standard email authentication to prevent spoofing and phishing remains elusive for most. dmarc adoption nonexistent orgs threatpost https://threatpost.com/netflixs-https-update-cant-combat-passive-traffic-analysis-attacks/124954/ Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks | Threatpost Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack. traffic analysis https update combat passive https://www.sebsauvage.net/links/?iv1m1w Cryptographers Unveil New Way to Trust Certificates | threatpost - Liens en vrac de sebsauvage new way en vrac cryptographers unveil trust https://threatpost.com/tens-of-thousands-of-malicious-apps-using-facebook-apis/131566/ Tens of Thousands of Malicious Apps Using Facebook APIs | Threatpost The apps are deemed malicious by doing things such as capturing pictures and audio when the app is closed, or making an unusually large amount of network calls. malicious apps tens thousands using facebook https://threatpost.com/whatsapp-bug-malicious-code-injection-rce/152578/ WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE | Threatpost A high-severity vulnerability could allow cybercriminals to push malware or remotely execute code, using seemingly innocuous messages. malicious code one click whatsapp bug allows Sponsored https://www.sexyfans.app/enter.php?prg=1&id=robuta&t=best&ad_id=sexyfans_300x250_r.jpg Sexyfans.app - Only Fans of Dating Apps The only dating app for fans to meet up with local content creators. https://threatpost.com/tap-ghost-attack-android/145286/ Tap ‘n Ghost Attack Creatively Targets Android Devices | Threatpost Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks. android devices tap ghost attack creatively https://threatpost.com/php-everywhere-bugs-wordpress-rce/178338/ PHP Everywhere Bugs Put 30K+ WordPress Sites at Risk of RCE | Threatpost The plug-in’s default settings spawned flaws that could allow for full site takeover but have since been fixed in an update that users should immediately... at risk php everywhere bugs put https://threatpost.com/cisco-aironet-access-points-critical-flaws/149266/ Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws | Threatpost Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices. access points cisco aironet plagued critical https://threatpost.com/bloatware-insecurity-continues-to-haunt-consumer-business-laptops/118356/ OEM Bloatware Security Vulnerabilities Found | Threatpost Vulnerabilities were found in pre-installed software updaters present in consumer and business laptops from vendors such as Dell, HP, Lenovo, Asus and Acer. security vulnerabilities oem bloatware found threatpost https://threatpost.com/the-vulnerability-disclosure-process-still-broken/137180/ The Vulnerability Disclosure Process: Still Broken | Threatpost Despite the advent to bug bounty programs and enlightened vendors, researchers still complain of abuse, threats and lawsuits. vulnerability disclosure still broken process threatpost https://threatpost.com/new-java-attack-introduced-cool-exploit-kit-111212/77205/ New Java Attack Introduced into Cool Exploit Kit | Threatpost A new exploit has been found in the Cool Exploit Kit for a vulnerability in Java 7 Update 7 as well as older versions, a flaw that’s been patched by Oracle in... exploit kit new java attack introduced https://threatpost.com/petya-ransomware-encrypts-master-file-table/117024/ Petya Ransomware Master File Table Encryption | Threatpost The Petya crypto ransomware encrypts a compromised computer’s master file table. master file table petya ransomware encryption threatpost https://threatpost.com/iot-company-wyze-leaks-emails-device-data-of-2-4m/151451/ IoT Company Wyze Leaks Emails, Device Data of 2.4M | Threatpost The Internet of Things vendor confirmed that customer data was left unsecured on an Elasticsearch database. device data iot company wyze leaks https://threatpost.com/hacktivists-gab-posts-passwords/164360/ Passwords, Private Posts Exposed in Hack of Gab Social Network | Threatpost The Distributed Denial of Secrets group claim they have received more than 70 gigabytes of data exfiltrated from social media platform Gab. gab social passwords private posts exposed https://threatpost.com/pre-installed-android-app-impacts-millions-with-slew-of-malicious-activity/140800/ Pre-Installed Android App Impacts Millions with Slew of Malicious Activity | Threatpost The app was developed by legitimate Chinese manufacturing giant TCL. android app pre installed impacts millions https://threatpost.com/google-bug-hunter-urges-apple-to-change-its-ios-security-culture/134842/ Black Hat 2018: Google Bug Hunter Urges Apple to Change its iOS Security Culture | Threatpost Project Zero researcher highlights stubborn iOS bugs as an example of why Apple and the rest of the industry needs to take a fresh approach to securing systems. black hat bug hunter ios security google urges https://threatpost.com/ransomware-volumes-record-highs-2021/168327/ Ransomware Volumes Hit Record Highs as 2021 Wears On | Threatpost The second quarter of the year saw the highest volumes of ransomware attacks ever, with Ryuk leading the way. hit record wears on ransomware volumes highs https://threatpost.com/cisco-critical-vulnerability-patch/140726/ Critical Flaw in Cisco’s Email Security Appliance Enables ‘Permanent DoS’ | Threatpost A remote attacker could exploit the vulnerability simply by sending an email. email security critical flaw appliance enables https://threatpost.com/cyberattack-cripples-iranian-fuel-distribution-network/175794/ Cyberattack Cripples Iranian Fuel Distribution Network | Threatpost The incident triggered shutdowns at pumps across the country as attackers flashed the phone number of Supreme Leader Ali Khamenei across video screens. distribution network cyberattack cripples iranian fuel https://threatpost.com/researchers-question-security-in-amds-upcoming-zen-chips/122357/ Researchers Question Security in AMD’s Upcoming Zen Chips | Threatpost Two German researchers are calling into question the security afforded by AMD’s Secure Encrypted Virtualization feature debuting in the chip maker’s upcoming... researchers question security upcoming zen https://threatpost.com/facebook-ios-tracks-anything/180395/ Facebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’ | Threatpost Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. on ios you do app browser tracks https://threatpost.com/chris-vickery-discusses-data-leak-of-48-million-users-by-private-intelligence-firm/131295/ Chris Vickery Discusses Data Leak of 48 Million Users by Private Intelligence Firm | Threatpost Private intelligence gathering firm LocalBlox leaked data on 48 million users that was scraped from Facebook, LinkedIn, Zillow and other sites. data leak private intelligence chris vickery discusses https://threatpost.com/malware-wordpress-license-key/141315/ Stealthy Malware Disguises Itself as a WordPress License Key | Threatpost A spam injector hides in plain site within WordPress theme files. as a license key stealthy malware disguises https://threatpost.com/automaker-cybersecurity-lagging-tech-adoption/179204/ Automaker Cybersecurity Lagging Behind Tech Adoption, Experts Warn | Threatpost A bug in Honda is indicative of the sprawling car-attack surface that could give cyberattackers easy access to victims, as global use of ‘smart car tech’ and... lagging behind automaker cybersecurity tech adoption https://threatpost.com/cisco-bugs-unpatched-millions-devices/144692/ Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices | Threatpost The two high-severity bugs impact a wide array of enterprise, military and government networks. pair of cisco bugs one unpatched https://threatpost.com/facebook-requires-sha-2-as-of-oct-1/113131/ Facebook Requires SHA-2 Support as of Oct. 1, 2015 | Threatpost Facebook has put developers on notice that as of Oct. 1, apps that do not support SHA-2 will no longer connect to its network. as of facebook requires sha support https://threatpost.com/firewall-bug-under-active-attack-cisa-warning/180467/ Firewall Bug Under Active Attack Triggers CISA Warning | Threatpost CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. active attack firewall bug triggers cisa https://hmstel.com/2016/05/wordpress-patches-some-xss-flaws-in-version-4-5-2-threatpost Wordpress Patches Some Xss Flaws In Version 4 5 2 Threatpost | Hmstel Digital Solutions HMS.TELECOM Digital Solutions, A premier web development agency specializing in cutting-edge CRM systems, AI/LLM integration, fintech solutions, and AI-powered... in version digital solutions wordpress patches xss https://threatpost.com/attackers-whatsapp-voice-message/179244/ Attackers Spoof WhatsApp Voice-Message Alerts to Steal Info | Threatpost Threat actors target Office 365 and Google Workspace in a new campaign, which uses a legitimate domain associated with a road-safety center in Moscow to send... voice message attackers spoof whatsapp alerts https://threatpost.com/amazon-alexa-secretly-records-children/145708/ Amazon Alexa Secretly Records Children, Lawsuits Allege | Threatpost Two lawsuits are seeking class-action status, alleging that Amazon records children without consent and stores their voiceprints indefinitely. amazon alexa secretly records children lawsuits https://threatpost.com/samsung-lg-android-spearphone-eavesdropping/146625/ Popular Samsung, LG Android Phones Open to ‘Spearphone’ Eavesdropping | Threatpost A Spearphone attacker can use the accelerometer in LG and Samsung phones to remotely eavesdrop on any audio that’s played on speakerphone, including calls,... android phones popular samsung open eavesdropping Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_14 Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start. https://threatpost.com/icedid-banking-trojan-surges-emotet/165314/ IcedID Banking Trojan Surges: The New Emotet? | Threatpost A widespread email campaign using malicious Microsoft Excel attachments and Excel 4 macros is delivering IcedID at high volumes, suggesting it’s filling the... the new banking trojan surges emotet https://coldfusion.kia.cc/patched-adobe-coldfusion-flaw-exploited-by-apt-threatpost-2/ Patched Adobe ColdFusion Flaw Exploited By APT – Threatpost – Coldfusion The critical vulnerability, which was patched earlier in September, has put ColdFusion servers at ri adobe coldfusion patched flaw exploited apt https://threatpost.com/chinese-apt-sepulcher-malware-phishing-attacks/158871/ China-based APT Debuts Sepulcher Malware in Spear-Phishing Attacks | Threatpost The RAT has been distributed in various campaigns over the past six months, targeting both European officials and Tibetan dissidents. spear phishing china based apt debuts Sponsored https://www.instabang.com/enter.php?prg=1&id=robuta&t=best&ad_id=ib_315x300_m_073113_4.jpg Instabang OFFICIAL - Free Adult Dating and Personals. Find an insta bang! The dating app that lets you explore, connect, and find your pleasure. https://fidoalliance.org/threatpost-threatpost-survey-says-2fa-is-just-fine-but-go-ahead-and-kill-sms/?query-cdbd12d0-page=3&cst&lang=ja Threatpost: Threatpost Survey より: 2FA is Just Fine, But Go Ahead and Kill SMS (2FA is Just Fine,... Jan 10, 2025 - 2要素認証に関するThreatpostの調査では、回答者の57%が、FIDOセキュリティキーなどのハードウェアトークンを第2の要素にすべきだと回答しています。 just fine go ahead threatpost survey kill https://threatpost.com/linkedin-instagram-preview-link-rce-security/160600/ Researchers: Instagram, LinkedIn Vulnerable to Preview-Link RCE Security Woes | Threatpost Popular chat apps, including LINE, Slack, Twitter DMs and others, can also leak location data and share private info with third-party servers. researchers instagram linkedin vulnerable preview https://threatpost.com/adobe-prompts-users-to-uninstall-flash-player-as-eol-date-looms/156794/ Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms | Threatpost Adobe will prompt Flash Player users to uninstall the application before the Dec. 31, 2020 end of life date hits. flash player adobe prompts users uninstall https://threatpost.com/weather-channel-off-air-hack/143936/ Weather Channel Knocked Off-Air in Dangerous Precedent | Threatpost The incident was the work of malicious cyberattackers. weather channel knocked off air dangerous precedent https://threatpost.com/5-top-threatpost-stories-2021/177278/ The 5 Most-Wanted Threatpost Stories of 2021 | Threatpost A look back at what was hot with readers in this second year of the pandemic. most wanted threatpost stories https://threatpost.com/latest-sofacy-campaign-targeting-security-researchers/128576/ Latest Sofacy Campaign Targeting Security Researchers | Threatpost Sofacy has been using a lure document connected to a cyber conflict conference to target researchers and others interested in cybersecurity. campaign targeting latest sofacy security researchers https://threatpost.com/critical-dns-bug-windows-servers-infrastructure-takeover/157427/ Critical DNS Bug Opens Windows Servers to Infrastructure Takeover | Threatpost Microsoft gives the ‘wormable’ flaw a security rating of 10 – the most severe warning possible. critical dns bug opens windows https://threatpost.com/alpine-linux-docker-images-unlocked/144542/ Alpine Linux Docker Images Shipped for 3 Years with Root Accounts Unlocked | Threatpost Alpine Linux Docker images available via the Docker Hub contained a critical flaw allowing attackers to authenticate on systems using the root user and no... alpine linux docker images root accounts shipped years https://threatpost.com/shadowbrokers-planning-monthly-exploit-data-dump-service/125710/ ShadowBrokers Planning Monthly Exploit, Data Dump Service | Threatpost The latest rant from the ShadowBrokers ends with news of a subscription service starting in June that will leak exploits and stolen data to paying customers. data dump planning monthly exploit service https://threatpost.com/microsoft-petitpotam-poc/168163/ Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC | Threatpost Microsoft releases mitigations for a Windows NT LAN Manager exploit that forces remote Windows systems to reveal password hashes that can be easily cracked. microsoft rushes fix attack poc https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/?https://redbotsecurity.com Watering Hole Attacks Push ScanBox Keylogger | Threatpost Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. watering hole attacks push scanbox keylogger threatpost https://threatpost.com/new-kronos-banking-malware-advertised-on-russian-forums/107210/ New Kronos Banking Malware Advertised On Russian Forums | Threatpost The new Kronos banking Trojan is being advertised for sale on Russian forums. Kronos promises antivirus evasion capabilities, such as a Ring3 rootkit. on russian new kronos banking malware https://threatpost.com/voicemail-phishing-scam-steals-microsoft-credentials/180005/ Voicemail Scam Steals Microsoft Credentials | Threatpost Attackers are targeting a number of key vertical markets in the U.S. with the active campaign, which impersonates the organization and Microsoft to lift... voicemail scam steals microsoft credentials https://threatpost.com/baidu-apps-google-play-data/161556/ Baidu Mobile Apps in Google Play Leak Sensitive Data | Threatpost Cyberattackers could use the information to track users across devices, disable phone service, or intercept messages and phone calls. mobile apps in google sensitive data baidu play https://threatpost.com/phishing-campaign-targeting-office-365-exploits-brand-names/156698/ Phishing Campaign Targeting Office 365, Exploits Brand Names | Threatpost Attackers use trusted entities to trick victims into giving up their corporate log-in details as well as to bypass security protections. campaign targeting brand names phishing office exploits https://threatpost.com/mobile-browser-bugs-safari-opera-malware/160326/ Mobile Browser Bugs Open Safari, Opera Users to Malware | Threatpost A set of address-spoofing bugs affect users of six different types of mobile browsers, with some remaining unpatched. mobile browser bugs open safari opera https://threatpost.com/google-services-track-user-movements-in-privacy-faux-pas/135078/ Google Services Track User Movements In Privacy Faux Pas | Threatpost A recent report found that Google services - with functions like checking maps, the weather, and search - are tracking users even when they deny permission. google services faux pas track user movements https://threatpost.com/sudo-bug-root-access-linux-2/163395/ Sudo Bug Gives Root Access to Mass Numbers of Linux Systems | Threatpost Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. root access mass numbers sudo bug gives https://threatpost.com/attackers-target-florida-condo-collapse-victims/167917/ Ruthless Attackers Target Florida Condo Collapse Victims | Threatpost Hackers are stealing the identities of those lost in the condo-collapse tragedy. florida condo collapse ruthless attackers target victims https://threatpost.com/cisco-patches-critical-telepresence-vulnerability/117866/ Cisco Issues Critical Security Warning Tied to TelePresence Hardware | Threatpost Cisco alerted customers three vulnerabilities, one critical and two high, along with patches to fix them. tied to cisco issues critical security https://threatpost.com/microsoft-warns-zerologon-bug/160769/ Microsoft Warns Threat Actors Continue to Exploit Zerologon Bug | Threatpost Tech giant and feds this week renewed their urge to organizations to update Active Directory domain controllers. threat actors microsoft warns continue exploit https://threatpost.com/cisa-us-agencies-vulnerability-disclosure-policies/150718/ CISA Pushing U.S. Agencies to Adopt Vulnerability Disclosure Policies | Threatpost A newly proposed CISA directive would require all U.S. agencies to develop and implement vulnerability disclosure processes for their internet connected... u s vulnerability disclosure cisa pushing agencies Sponsored https://www.sexygamerz.com/enter.php?prg=1&id=robuta&t=best&ad_id=sexygamerz_315x300_default3.jpg Sexy Gamerz - World's Best Gamer Dating Tired of playing alone? Find a hot gamer girl on Sexy Gamerz. https://threatpost.com/bit-and-piece-ddos-method-emerges-to-torment-isps/141142/ Bit-and-Piece DDoS Method Emerges to Torment ISPs | Threatpost Perpetrators are using smaller, bit-and-piece methods to inject junk into legitimate traffic, causing attacks to bypass detection rather than sounding alarms... bit piece ddos method emerges