Security Report

Security Report | Latest security news, analysis, expert opinions on cybersecurity, digital technology and legislation.

[Security Report @SecurityRept]

Phishing kit screenshots 📸 the victim's email address domain to generate phishing webpage's background on the fly, and uses Clearbit to fetch the appropriate logo.
https://t.co/Arw9WvxRw4

#phishing #emailsecurity

[Ax Sharma @Ax_Sharma]

Royal Mail Track & Trace website is back online after a mysterious week-long outage. EXCEPT with a caveat: a captcha puzzle with a rather high difficulty level leaving users frustrated.
https://t.co/mWCJIFGgm9

[Security Report @SecurityRept]

Royal Mail Track & Trace website is back online after a mysterious week-long #outage. EXCEPT with a caveat: a captcha puzzle with a rather high difficulty level leaving users frustrated. #RoyalMail

https://t.co/py3EbXK5XU

[BleepingComputer @BleepinComputer]

Verified mess — Twitter's $8 blue tick rollout sees 'verified' fakes - @Ax_Sharma
https://t.co/33AvY6tTel

[Security Report @SecurityRept]

New convincing #phishing campaign targets Booking[.]com and Blockchain customers.
https://t.co/yGgYCAGB39

[Security Report @SecurityRept]

A spreadsheet hosted on Intel[.]com is flagged as malware—but is it?
h/t @malmoeb

https://t.co/pZHknwbyBU

[Security Report @SecurityRept]

Principal Dutch railway network operator, NS Trains halted trains for hours on Sunday due to IT system failure. International trains not impacted:

https://t.co/IktKdjrW7u

[Security Report @SecurityRept]

Zero-click attacks and how to defend against them
https://t.co/77c3ALbAtU

[Security Report @SecurityRept]

NEW: Movie studios sue TorGuard alleging the VPN provider encourages piracy and keeps no logs against #copyright infringers.

https://t.co/BvfzQRtwnx

#dmca #piracy #Lawsuit

[Security Report @SecurityRept]

Mozilla removes Firefox add-ons 'Bypass' and 'Bypass XM' installed by 455,000 users. These add-ons blocked access to browser updates and access control lists by misusing the proxy API.

https://t.co/3ZQC7EVsgq

[Ax Sharma @Ax_Sharma]

Moorfields Eye Hospital in Dubai 🇦🇪, branch of #NHS-backed London Moorfields 🇬🇧 confirms a security incident as AvosLocker #ransomware threatens they'll leak 60 GB of patient data:

https://t.co/jyLRVmEGi8

#databreach #databreaches

[Security Report @SecurityRept]

Security firm @varonis explains how misconfigured #Salesforce community sites can expose sensitive data to any unauthenticated user on the internet.

https://t.co/3uTEHAftw7

#dataleak #vulnerability

[Ax Sharma @Ax_Sharma]

BTW, "are" is a legitimate PyPI package from @andreilapets -- the researchers meant "aryi" (now removed). Luckily, caught this while writing my report.

[Security Report @SecurityRept]

21,000 U.S. driver licenses are up for sale on a hacker forum. The seller also told us that they had over 2,000 credit reports with sensitive customer information, like names, dates of birth, SSNs, addresses, credit history, etc.

https://t.co/FGnLa1eKEJ
#databreach #HackerNews

[Security Report @SecurityRept]

Audacity's updated #privacy notice has #opensource users concerned. The new terms also forbid those "under 13" (e.g. school pupils) from using Audacity, posing new challenges.

Some are forking the #Audacity project to remove telemetry.

via @Ax_Sharma

https://t.co/U7QC5NTmMl

[Security Report @SecurityRept]

Dental and vision #insurance giant Dominion National has reached a $2 million settlement in a data breach class-action lawsuit concerning over 122,000 members.

Decade-old #databreach had exposed names, DOBs, SSNs, and other PII.

https://t.co/87OJg9hhRI

#healthcare

[Security Report @SecurityRept]

#Twitter slaps many with DMCA takedown notices for years-old violations.

https://t.co/25e8MMnPfs

#DMCA #copyright #technews

[Security Report @SecurityRept]

#Google has gone #opensource with their Fully Homomorphic #Encryption toolkit — especially useful for developers and data scientists in #healthcare.

https://t.co/3IL9R6mvMk

[Security Report @SecurityRept]

Adobe installs its anti-piracy "Genuine Service" application on users running Adobe apps, to catch counterfeit apps -- but is it safe?

https://t.co/Zkd7umBofV

[Security Report @SecurityRept]

Jailbreaking your #Roku devices with persistent root privileges using "RootMyRoku"

https://t.co/CLfrQNRm0j

#jailbreak #exploit #vulnerability