Security Affairs

SEPTEMBER 21, 2021

Security researchers disclosed a new zero-day flaw in Apple’s macOS Finder that can allow attackers to run arbitrary commands on Macs. According to the SSD Secure Disclosure advisory, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any prompts. Pierluigi Paganini.

Security 363

Security IT Information Security 363

Security Affairs

MAY 12, 2021

Security researcher discovered a series of flaws, collectively tracked as FragAttacks, that impact the WiFi devices sold for the past 24 years. Belgian security researcher Mathy Vanhoef disclosed the details of a multiple vulnerabilities, tracked as FragAttacks, that affect WiFi devices exposed them to remote attacks.

Encryption 349

Encryption Paper Security Authentication 349

Data Breach Today

AUGUST 17, 2020

Amazon Has Patched the Issues, Says Demo Video Is Misleading Researchers at Check Point developed a one-click attack against Amazon's popular voice-controlled assistant Alexa that could reveal a user's voice history or personal information. Amazon has fixed the web application security flaws but says Check Point's demo video is misleading.

Security 223

Security 223

Security Affairs

MARCH 14, 2021

Below the description of the demo published on a site set up by Google to host the PoC code. “This demo is split into three parts: Calibrating the timer to observe side effects of the CPU’s speculative execution. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Metadata 362

Metadata Encryption Authentication Security 362

Security Affairs

MAY 11, 2021

Apple AirTag has been launched less than two weeks ago, but a security researcher already claims to have hacked them. . “The German security researcher Stack Smashing tweeted today ( via The 8-bit ) that he was able to “break into the microcontroller of the AirTag” and modified elements of the item tracker software.”

IT 345

IT Security Access Cybersecurity 345

Security Affairs

DECEMBER 13, 2022

A working exploit for the CVE-2022-31705 vulnerability was demonstrated by Ant Security researcher Yuhao Jiang during the Geekpwn, a hacking contest run by the Tencent Keen Security Lab. Here is my demo of the VM escape exploit on the latest version of VMware Fusion along with ESXi and Workstation. ” states the advisory.

Authentication 342

Authentication Access Security IT 342

Data Breach Today

AUGUST 10, 2022

Ransomware, New Tactics and Geopolitical Threats Among the Key Conference Topics Black Hat 2022 kicks off today with security experts sharing cutting-edge research and insights through demos, technical trainings and hands-on labs.

Ransomware 246

Ransomware Risk Security 246

KnowBe4

AUGUST 11, 2023

Join us for a live 30-minute demo of PhishER Plus! See how the platform uses crowdsourced intelligence to block known threats.

Security 98

Security Phishing 98

Data Breach Today

JUNE 6, 2019

Meanwhile, NSA Issues Alert Stressing Urgency of Patching A security researcher has posted a demonstration showing how an attacker could exploit the BlueKeep vulnerability to take over a Windows device in a matter of seconds.

Security 153

Security 153

Security Affairs

MAY 27, 2021

A security expert has discovered a vulnerability in Apple M1 chips, dubbed M1RACLES, that cannot be fixed. A demo app to access this register is available here.” The post M1RACLES, the unpatchable bug that impacts new Apple M1 chips appeared first on Security Affairs. ” said Hector Martin. Pierluigi Paganini.

Access 351

Access Risk Security IT 351

Security Affairs

OCTOBER 20, 2021

a demo for anti-virus software, VPN, music players, photo editing or online games) to hijack the channel of YouTube creators. The post YouTube creators’ accounts hijacked with cookie-stealing malware appeared first on Security Affairs. Below are the job descriptions used to recruit the hackers. Pierluigi Paganini.

Phishing 362

Phishing Archiving Encryption Passwords 362

Security Affairs

AUGUST 11, 2021

Adobe security updates for August 2021 have addressed critical vulnerabilities in Magento and important bugs in Adobe Connect. Adobe security updates for August 2021 address a total of 29 flaws, including critical vulnerabilities in Magento and important issues in Adobe Connect: APSB21-64 Security?updates updates available?for

IT 292

IT Authentication Security Cybersecurity 292

Security Affairs

MARCH 9, 2019

Security experts at Pen Test Partners discovered several vulnerabilities in two smart car alarm systems put three million vehicles globally at risk of hack. Both products allow anyone to create a test/demo account. With that demo account it’s possible to access any genuine account and retrieve their details, ” states Pen Test Partners.

Authentication 280

Authentication IoT Manufacturing Passwords 280

KnowBe4

JULY 9, 2024

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 112

Security awareness Phishing Security IT 112

Security Affairs

JANUARY 15, 2024

The vulnerability was addressed by Microsoft with the release of Patch Tuesday security updates for November 2023. The vulnerability is a Windows SmartScreen Security Feature Bypass issue. After public disclosure of the vulnerability, multiple demos and proof-of-concept codes have been published on social media.

Archiving 347

Archiving Phishing Ransomware Cloud 347

Security Affairs

JULY 8, 2020

Early July, security expert K7 Lab malware researcher Dinesh Devadoss uncovered a new piece of ransomware dubbed EvilQuest designed to encrypt macOS systems, it is also able to install additional payloads and potentially take over the infected machine. macOS ransomware #decryptor ( #EvilQuest )! Pierluigi Paganini.

Ransomware 357

Ransomware Encryption Security IT 357

KnowBe4

AUGUST 31, 2023

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 118

Security awareness Phishing Security IT 118

Security Affairs

MAY 23, 2022

” reads the analysis published by the security firm NISOS. Nisos assessed that this is possibly a testing or demo instance, and is not currently used by the FSB.” Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. ru to 0day[.]llc.

IoT 338

IoT Sales Security Cybersecurity 338

KnowBe4

SEPTEMBER 29, 2023

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 118

Security awareness Phishing Security IT 118

Security Affairs

APRIL 3, 2024

Palo Alto Networks security researchers Edouard Bochin and Tao Yan demoed the zero-day on the second day of Pwn2Own Vancouver 2024 to defeat V8 hardening. The exploitation can lead to the disclosure of sensitive information or a crash. “The Stable channel has been updated to 123.0.6312.105/.106/.107

Access 336

Access Security IT Information Security 336

Security Affairs

AUGUST 21, 2018

Security firm NCC Group has released an open source tool for penetration testing dubbed Singularity of Origin that allows carrying out DNS rebinding attacks. During recent security assessments, we’ve seen applications running on the localhost interface or exposing services on an internal network without authentication.

Security 189

Security Authentication Communications Cybersecurity 189

Security Affairs

MAY 3, 2021

Security researcher released technical details and a PoC code for a high-severity vulnerability in Microsoft Exchange Server reported by the NSA. National Security Agency (NSA). No one organization can secure their networks alone” states the NSA. NSA values partnership in the cybersecurity community. Pierluigi Paganini.

Authentication 288

Authentication Cybersecurity Security Risk 288

Security Affairs

FEBRUARY 19, 2020

Security experts from WordFence have discovered a zero-day vulnerability in the ThemeREX Addons that was actively exploited by hackers in the wild to create user accounts with admin permissions. The post Hackers are actively exploiting a Zero-Day in WordPress ThemeREX Plugin to create Admin Accounts appeared first on Security Affairs.

GDPR 362

GDPR Sales Authentication IT 362

KnowBe4

NOVEMBER 29, 2023

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 115

Security awareness Phishing Security IT 115

KnowBe4

OCTOBER 26, 2023

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 115

Security awareness Phishing Security IT 115

KnowBe4

JANUARY 4, 2024

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 115

Security awareness Phishing Security IT 115

KnowBe4

JUNE 6, 2022

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 114

Security awareness Phishing Security IT 114

Security Affairs

MAY 7, 2020

Samsung addressed this month a critical 0-click vulnerability that was discovered by security researchers from Google. Samsung released this week a security patch that addresses a critical vulnerability, tracked as CVE-2020-8899, impacting all smartphones sold since 2014. ” continues the report. ” concludes the report.

IT 353

IT Libraries Security Access 353

Security Affairs

AUGUST 16, 2024

Researchers form mobile security firm iVerify reported that the issue stems from a pre-installed Android app called “Showcase.apk,” which runs with excessive system privileges, allowing it to remotely execute code and install remote package. ” reads the report.

Retail 359

Retail Data breaches Sales Passwords 359

Security Affairs

MARCH 30, 2021

On March 28, 2021, Astra Security Threat Intelligence Team responsibly disclosed a vulnerability in Ivory Search, a WordPress Search Plugin installed on over 60,000 sites. This security vulnerability could be exploited by an attacker to perform malicious actions on a victim’s website. Take an Astra demo today. immediately.

Security awareness 292

Security awareness Marketing Security Cybersecurity 292

Security Affairs

AUGUST 23, 2020

The post A Google Drive weakness could allow attackers to serve malware appeared first on Security Affairs. .” The researchers reported the issue to Google and shared his findings with TheHackerNews that published the following videos that show how to exploit the weakness. ” reads the post published by THN. . Pierluigi Paganini.

Phishing 363

Phishing Authentication Cloud IT 363

Security Affairs

FEBRUARY 29, 2020

Experts at WordPress security firm Defiant reported three zero-day vulnerabilities in WordPress plugin under active exploitation. ” The development teams behind the Async JavaScript and 10Web Map Builder for Google Maps have already issued security updates to address the zero-day flaws. Pierluigi Paganini.

Authentication 361

Authentication GDPR Access IT 361

Security Affairs

JUNE 10, 2022

In response to the security breach, the IT infrastructure of the city was shut down. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. Pierluigi Paganini.

Ransomware 338

Ransomware IT Data breaches Education 338

Security Affairs

DECEMBER 8, 2020

Security expert disclosed technical details about a wormable, cross-platform flaw in Microsoft Teams that could allow stealth attacks. Security researcher Oskars Vegeris from Evolution Gaming has published technical details on a wormable, cross-platform vulnerability in the business communication platform Microsoft Teams.

Communications 300

Communications Personal data Phishing Access 300

KnowBe4

FEBRUARY 1, 2024

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 105

Security awareness Phishing Security IT 105

Security Affairs

MARCH 11, 2020

The plugin is currently installed on tens of thousands of websites and according to the security firm Wordfence the vulnerability has been actively exploited in the wild as a zero-day. The post RCE in popular ThemeREX WordPress Plugin has been actively exploited appeared first on Security Affairs. Pierluigi Paganini.

Authentication 359

Authentication GDPR Communications Access 359

KnowBe4

JULY 26, 2023

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security awareness 98

Security awareness Phishing Security IT 98