Security News

Cybercriminals are testing exposed credentials for future account takeover attacks
2019-11-07 06:00

Fraud increased 30% overall in Q3 2019 and bot-driven account registration fraud is up 70% as cybercriminals test stolen credentials in advance of the holiday retail season, according to Arkose...

Explained: How New 'Delegated Credentials' Boosts TLS Protocol Security
2019-11-06 09:19

Mozilla, in partnership with Facebook, Cloudflare, and other IETF community members, has announced technical specifications for a new cryptographic protocol called "Delegated Credentials for TLS."...

21 Million Stolen Fortune 500 Credentials For Sale on Dark Web
2019-10-30 15:02

There have been many studies and investigations into the number of stolen credentials available on the dark web. However, a new report that was just released is a bit different: it focuses on...

New Adwind Variant Targets Windows, Chromium Credentials
2019-10-29 16:17

A new version of the typically platform-agnostic Adwind trojan has been spotted targeting Windows applications and systems and Chromium-based browsers.

Avast: Stolen VPN Credentials Led to CCleaner Attack Redux
2019-10-23 12:48

Avast Says CCleaner Versions Are Malware-FreeAvast's CCleaner utility is popular - with attackers. For the second time in two years, the company says it believes CCleaner was the intended targeted...

Silent Librarian Retools Phishing Emails to Hook Student Credentials
2019-10-16 17:54

Silent Librarian cyberattackers are switching up tactics in a phishing scheme bent on stealing student credentials.

Impact and prevalence of cyberattacks that use stolen hashed administrator credentials
2019-10-10 04:00

There’s a significant prevalence and impact of cyberattacks that use stolen hashed administrator credentials, also referred to as Pass the Hash (PtH) attacks, within businesses today, according to...

Google’s Password Manager now checks for breached credentials
2019-10-03 11:56

Google has taken the next step in its strategy to secure users' passwords. The search giant has taken a password-checking feature released in February as an extension to its Chrome browser and...

Scotiabank slammed for 'muppet-grade security' after internal source code and credentials spill onto open internet
2019-09-18 20:17

Blueprints for mobile apps, databases exposed in public GitHub repos Exclusive Scotiabank leaked online a trove of its internal source code, as well as some of its private login keys to backend...

LastPass Fixes Bug That Leaks Credentials
2019-09-17 12:18

The company has patched a vulnerability that could allow malicious sites unauthorized access to usernames and passwords.