资讯

Threat Post3 年
Protecting Phones From Pegasus-Like Spyware Attacks
Pegasus spyware from the Israeli firm NSO Group is nearly invisible. It sends messages to compromise targeted phones without setting off any alarm bells to the phone’s user. There’s little you ...
Threat Post3 年
5 Cybersecurity Trends to Watch in 2022 - Threatpost
Here’s what cybersecurity watchers want infosec pros to know heading into 2022. No one could have predicted the sheer chaos the cybersecurity industry would experience over the course of 2021 ...
Threat Post4 年
Discord-Stealing Malware Invades npm Packages | Threatpost
The packages (named an0n-chat-lib, discord-fix and sonatype, all published by “scp173-deleted”) have been taken down, though it’s unknown how many developers used them before they were ...
Threat Post2 年
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post6 年
Phishing Scam Cloaks Malware With Fake Google reCAPTCHA
Phishing emails target a bank’s users with malware – and make their landing page look more legitimate with fake Google reCAPTCHAs. A recently-discovered phishing scam was found peddling ...
Threat Post12 年
Final Report on DigiNotar Hack Shows Total Compromise of CA Servers
Fox-IT’s report on the DigiNotar hack shows that all eight of the company’s certificate authority servers were compromised in the attack on the certificate authority and that the company could ...
Threat Post3 年
Merck Awarded $1.4B Insurance Payout over NotPetya Attack
Unsealed court records show pharmaceutical giant Merck was awarded a $1.4 billion payout last month on its property insurance policy, for losses the company suffered because of the 2017 NotPetya ...
Threat Post3 年
IoT Attacks Skyrocket, Doubling in 6 Months - Threatpost
The first half of 2021 saw 1.5 billion attacks on smart devices, with attackers looking to steal data, mine cryptocurrency or build botnets.
Threat Post3 年
Office 365 Config Loophole Opens OneDrive, SharePoint Data to Ransomware Attack
A reported a “potentially dangerous piece of functionality” allows an attacker to launch an attack on cloud infrastructure and ransom files stored in SharePoint and OneDrive.
Threat Post3 年
‘Malsmoke’ Exploits Microsoft’s E-Signature Verification
The info-stealing campaign using ZLoader malware – previously used to deliver Ryuk and Conti ransomware – already has claimed more than 2,000 victims across 111 countries.
Threat Post3 年
Lazarus Targets Job-Seeking Engineers with Malicious Documents
The notorious Lazarus advanced persistent threat (APT) group has been identified as the cybergang behind a campaign spreading malicious documents to job-seeking engineers. The ploy involves ...
Threat Post2 年
Twitter Whistleblower Complaint: The TL;DR Version - Threatpost
Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.