-
WordPress Plugin Removed After Zero Day Discovered
by Lindsey O'Donnell on March 21, 2019 at 8:47 pm
The plugin, Social Warfare, is no longer listed after a cross site scripting flaw was found being exploited in the wild. […]
-
Hackers Take Down Safari, VMware and Oracle at Pwn2Own
by Tom Spring on March 21, 2019 at 5:51 pm
On the first day of Pwn2Own 2019 hackers poked holes in Apple Safari, VMware Workstation and Oracle VirtualBox. […]
-
Facebook Stored Passwords in Plain Text For Years
by Lindsey O'Donnell on March 21, 2019 at 4:14 pm
The social media giant said that it is notifying users whose passwords it stored in plain text, which made them accessible for Facebook employees to view. […]
-
MyPillow and Amerisleep Targeted in Magecart Group Attacks
by Lindsey O'Donnell on March 21, 2019 at 3:19 pm
In both breaches of MyPillow and Amerisleep, the customers whose payment information was potentially stolen were not informed. […]
-
Cisco Patches High-Severity Flaws in IP Phones
by Lindsey O'Donnell on March 21, 2019 at 12:31 pm
The most serious vulnerabilities in Cisco's 8800 Series IP Phones could allow unauthenticated, remote attackers to conduct a cross-site request forgery attack or write arbitrary files to the filesystem. […]
-
Mac-Focused Malvertising Campaign Abuses Google Firebase DBs
by Tara Seals on March 20, 2019 at 9:20 pm
Researchers said 1 million user sessions could have been exposed to the campaign, which downloads the Shlayer trojan. […]
-
Post-Perimeter Security: Addressing Evolving Mobile Enterprise Threats
by Tara Seals on March 20, 2019 at 8:36 pm
Experts from Gartner, Lookout and Google talk enterprise mobile security in this webinar replay. […]
-
Years-Long Phishing Campaign Targets Saudi Gov Agencies
by Lindsey O'Donnell on March 20, 2019 at 7:03 pm
The campaign, codenamed “Bad Tidings,” has sought out victims’ credentials with clever fake landing pages pretending to be the Saudi Arabian Ministry of Interior’s e-Service portal. […]
-
WordPress Plugin Removed After Zero Day Discovered
