Security News

BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover
2019-06-05 14:14

A working exploit for the critical remote code-execution flaw shows how an unauthenticated attacker can achieve full run of a victim machine in about 22 seconds.

Week in review: BlueKeep vulnerability, preventing Google account takeovers
2019-05-26 17:45

Here’s an overview of some of last week’s most interesting news and articles: Data privacy: A hot-button issue for Americans one year after GDPR In recognition of GDPR’s first anniversary, nCipher...

Critical Flaws in Khan Academy Opened Door to Account Takeovers
2019-05-22 17:44

The two critical cross-site request forgery flaws in the online learning non-profit Khan Academy have been resolved.

How effective are login challenges at preventing Google account takeovers?
2019-05-21 05:15

Despite implementation bugs that might affect the security of physical security keys, they are the strongest protection against phishing currently available, Google maintains. On-device prompts...

Critical Flaw in Cisco Elastic Services Controller Allows Full System Takeover
2019-05-07 20:38

Cisco has patched a critical flaw in its virtualized function automation tool, Cisco Elastic Services Controller.

How to protect your business from account takeover attacks: 3 tips
2019-05-02 13:19

Account takeovers are one of the fastest-growing email security threats hitting Office 365 accounts, according to Barracuda.

2 Million IoT Devices Vulnerable to Complete Takeover
2019-04-29 13:37

Millions of security cameras, baby monitors and "smart" doorbells are open to hijack - and no solution is currently available.

Webinar: Defending account takeovers at Remitly
2019-02-19 12:51

Account Takeover attacks don’t follow conventional attack patterns – they look, act, and feel like legitimate users. Without the right tooling, visibility into your environment, and intimate...

Critical OkCupid Flaw Exposes Daters to App Takeovers
2019-02-14 12:30

The flaw is only one of many romance-related security issues as bad actors take advantage of Valentine's Day.

Critical WordPress Plugin Flaw Allows Complete Website Takeover
2019-02-12 20:29

Users of the popular plugin, Simple Social Buttons, are encouraged to update to version 2.0.22.