Threatpost

Threatpost is the first stop for fast-breaking security news, conversations and analysis from around the world.

[Threatpost @threatpost]

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. https://t.co/yzvYa6ZsWo

[Threatpost @threatpost]

2.5 million people were affected, in a breach that could spell more trouble down the line. https://t.co/oayJTmVBsj

[Threatpost @threatpost]

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. https://t.co/55eQd9zhbb

[Threatpost @threatpost]

Twitter is blasted for #security and #privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. https://t.co/UJjZzZ8U2y

[Threatpost @threatpost]

Attackers are spoofing the widely used #cryptocurrency exchange to trick users into logging in so they can steal their credentials and eventually their funds. https://t.co/M5W9DFJNLB

[Threatpost @threatpost]

The incident disrupted corporate IT systems at one company while attackers misidentified the victim in a post on its website that leaked stolen data. https://t.co/DdrAtJd4lF

[Threatpost @threatpost]

Fake #travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. https://t.co/LkoEBbKGDH

[Threatpost @threatpost]

Over 130 companies tangled in sprawling #phishing campaign that spoofed a multi-factor authentication system. https://t.co/eO1ZVIhH43

[Threatpost @threatpost]

Lockbit is by far this summer’s most prolific #ransomware group, trailed by two offshoots of the Conti group. https://t.co/wLzyo0EY0a

[Threatpost @threatpost]

Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. https://t.co/22dqlwv9GQ

[Threatpost @threatpost]

Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction. https://t.co/15XqKjCJtj

[Threatpost @threatpost]

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. https://t.co/HXbICFHdrC

[Threatpost @threatpost]

Instances of #phishing attacks leveraging the Microsoft brand increased 266 percent in Q1 compared to the year prior. https://t.co/AasxRXlKPo

[Threatpost @threatpost]

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. https://t.co/yzvYa700LW

[Threatpost @threatpost]

Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites. https://t.co/22dqlwvHwo

[Threatpost @threatpost]

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. https://t.co/66KBNkElgV

[Threatpost @threatpost]

Twitter is blasted for #security and #privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. https://t.co/UJjZzYRiDY

[Threatpost @threatpost]

The CISA has seen a resurgence of the #malware targeting a range of verticals and critical infrastructure organizations by exploiting RDP, firewall vulnerabilities. https://t.co/Y25D40gRRW

[Threatpost @threatpost]

Also known as the Atlantis Cyber-Army, the emerging organization has an enigmatic leader and a core set of admins that offer a range of services, including exclusive data leaks, #DDoS and RDP. https://t.co/MXDCbpxmzr

[Threatpost @threatpost]

300 restaurants and at least 50,000 payment cards compromised by two separate campaigns against MenuDrive, Harbortouch and InTouchPOS services. https://t.co/UsnFajmDQ5