Security
Headlines
HeadlinesLatestCVEs

Tag

#mac

New Phishing Attacks Shame, Scare Victims into Surrendering Twitter, Discord Credentials

Scams pressure victims to "resolve an issue that could impact their status, business."

DARKReading
#web#mac#auth
What It Takes to Tackle Your SaaS Security

It's not a new concept that Office 365, Salesforce, Slack, Google Workspace or Zoom, etc., are amazing for enabling the hybrid workforce and hyper-productivity in businesses today. However, there are three main challenges that have arisen stemming from this evolution: (1) While SaaS apps include a host of native security settings, they need to be hardened by the security team of the organization

CVE-2022-2302: VDE-2022-030 | CERT@VDE

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

Europe threatens to ban Facebook over data transfers to the US

The EU is warning Meta that it needs to make big changes to the way it handles data transfers between the Europe and US. The post Europe threatens to ban Facebook over data transfers to the US appeared first on Malwarebytes Labs.

Microsoft appears to be rolling back Office Macro blocking

We waited three decades for macro blocking...and now it's going away again! The post Microsoft appears to be rolling back Office Macro blocking appeared first on Malwarebytes Labs.

Hackers Used Fake LinkedIn Job Offer to Hack Off $625M from Axie Infinity

By Deeba Ahmed Earlier in March this year, Ronin Network (RON), a blockchain network underpinning the famous crypto game Axie Infinity… This is a post from HackRead.com Read the original post: Hackers Used Fake LinkedIn Job Offer to Hack Off $625M from Axie Infinity

Hackers Exploiting Follina Bug to Deploy Rozena Backdoor

A newly observed phishing campaign is leveraging the recently disclosed Follina security vulnerability to distribute a previously undocumented backdoor on Windows systems. "Rozena is a backdoor malware that is capable of injecting a remote shell connection back to the attacker's machine," Fortinet FortiGuard Labs researcher Cara Lin said in a report this week. Tracked as CVE-2022-30190, the

Microsoft Reverses Course on Blocking Office Macros by Default

Security experts criticize company for reversing course, albeit temporarily, on a decision it made just this February to block macros in files downloaded from the Internet.

Threat Roundup for July 1 to July 8

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between July 1 and July 8. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics,... [[ This is only the beginning! Please visit the blog for the complete entry ]]