Security News > 2019 > January

Websites Can Exploit Browser Extensions to Steal User Data
2019-01-21 16:56

Web applications can exploit browser extensions to access privileged capabilities and steal sensitive user information, including credentials, a researcher has discovered.  read more

Report: Facebook's Privacy Lapses May Result in Record Fine
2019-01-21 16:09

Facebook may be facing the biggest fine ever imposed by the U.S. Federal Trade Commission for privacy violations involving the personal information of its 2.2 billion users. read more

Former Employee Hacks Popular WordPress Plugin’s Website
2019-01-21 15:55

The website for a popular WordPress plugin was hacked over the weekend, when a former employee abused a previously implemented backdoor to take over the domain. read more

New malware found using Google Drive as its command-and-control server
2019-01-21 15:48

Since most security tools also keep an eye on the network traffic to detect malicious IP addresses, attackers are increasingly adopting infrastructure of legitimate services in their attacks to...

Twitter bug exposed some Android private tweets to public view
2019-01-21 13:17

The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.

Attackers used a LinkedIn job ad and Skype call to breach bank’s defences
2019-01-21 13:05

A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.

Bug in widespread Wi-Fi chipset firmware can lead to zero-click code execution
2019-01-21 12:49

A vulnerability in the firmware of a Wi-Fi chipset that is widely used in laptops, streaming, gaming and a variety of “smart” devices can be exploited to compromise them without user interaction....

Clever Smartphone Malware Concealment Technique
2019-01-21 12:47

This is clever: Malicious apps hosted in the Google Play market are trying a clever trick to avoid detection -- they monitor the motion-sensor input of an infected device before installing a...

State agency exposes 3TB of data, including FBI info and remote logins
2019-01-21 12:39

Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.