Security News
![Thieves steal 35.5M customers’ data from Vans sneakers maker](/static/build/img/news/thieves-steal-35-5m-customers-data-from-vans-sneakers-maker-small.jpg)
VF Corporation, parent company of clothes and footwear brands including Vans and North Face, says 35.5 million customers were impacted in some way when criminals broke into their systems in December. VF Corp said that customers' social security numbers, bank account information, and payment card information remain uncompromised as these are not stored in its IT systems.
![VMware confirms critical vCenter flaw now exploited in attacks](/static/build/img/news/vmware-confirms-critical-vcenter-flaw-now-exploited-in-attacks-small.jpg)
VMware has confirmed that a critical vCenter Server remote code execution vulnerability patched in October is now under active exploitation. vCenter Server is a management platform for VMware vSphere environments that helps administrators manage ESX and ESXi servers and virtual machines.
![Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software](/static/build/img/news/experts-warn-of-macos-backdoor-hidden-in-pirated-versions-of-popular-software-small.jpg)
Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected machines. "These applications are being hosted on...
![Speaking to the CIA’s Creative Writing Group](/static/build/img/news/alt/web-statistics-2-small.jpg)
Last spring, a friend of a friend visited my office and invited me to Langley to speak to Invisible Ink, the CIA's creative writing group. She said that the topic of the talk was entirely up to me.
![Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators](/static/build/img/news/preventing-data-loss-backup-and-recovery-strategies-for-exchange-server-administrators-small.jpg)
In the current digital landscape, data has emerged as a crucial asset for organizations, akin to currency. It’s the lifeblood of any organization in today's interconnected and digital world. Thus,...
![This Top-Rated Data Recovery Tool is More Than $100 Off Now](/static/build/img/news/this-top-rated-data-recovery-tool-is-more-than-100-off-now-small.jpg)
TL;DR: Accidents happen, but EaseUS Data Recovery Wizard protects your business from catastrophic data loss. A simple solution is EaseUS Data Recovery Wizard, and it's on sale from January 15-21 for more than $100 off.
![Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package](/static/build/img/news/npm-trojan-bypasses-uac-installs-anydesk-with-oscompatible-package-small.jpg)
A malicious package uploaded to the npm registry has been found deploying a sophisticated remote access trojan on compromised Windows machines. The package, named "oscompatible," was published on...
![IT consultant fined for daring to expose shoddy security](/static/build/img/news/it-consultant-fined-for-daring-to-expose-shoddy-security-small.jpg)
A security researcher in Germany has been fined €3,000 for finding and reporting an e-commerce database vulnerability that was exposing almost 700,000 customer records. Back in June 2021, according to our pals at Heise, an contractor identified elsewhere as Hendrik H. was troubleshooting software for a customer of IT services firm Modern Solution GmbH. He discovered that the Modern Solution code made an MySQL connection to a MariaDB database server operated by the vendor.
![Out with the old and in with the improved: MFA needs a revamp](/static/build/img/news/out-with-the-old-and-in-with-the-improved-mfa-needs-a-revamp-small.jpg)
With MFA in place, when a hacker gets a hold of your account credentials, they cannot fulfill the additional identification requirement, meaning their ability to breach the system is dead in the water. We've seen lately a surprising number of high-profile social engineering attacks that result in MFA bypass.
![U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability](/static/build/img/news/u-s-cybersecurity-agency-warns-of-actively-exploited-ivanti-epmm-vulnerability-small.jpg)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core to its Known...