Massive LinkedIn Phishing, Bot Attacks Feed on the Job-Hungry
The phishing attacks are spoofing LinkedIn to target ‘Great Resignation’ job hunters, who are also being preyed on by huge data-scraping bot attacks.
Emotionally vulnerable and willing to offer...
Pixelating Text Leads to Information Leakage, Warns Firm
The common practice of blurring text using pixelation — where text is replaced with pixels representing averaged values — always bothered security researcher Dan Petro. Intuitively, he knew that...
Critical VMware Bugs Open ESXi, Fusion & Workstation to Attackers
A group of five security vulnerabilities could lead to a range of bad outcomes for virtual-machine enthusiasts, including command execution and DoS.
VMware has issued a critical security update to...
SquirrelWaffle Adds a Twist of Fraud to Exchange Server Malspamming
SquirrelWaffle attackers now use typosquatting to keep sending spam, even after Exchange servers are patched for ProxyLogon/ProxyShell.
SquirrelWaffle – the newish malware loader that first showed up in September –...
High-Severity RCE Bug Found in Popular Apache Cassandra Database
On the plus side, only instances with non-standard not recommended configurations are vulnerable. On the downside, those configurations aren’t easy to track down, and it’s easy as pie to...
TrickBot developers continue to refine the malware’s sneakiness and power
Written by Joe Warminsky Feb 16, 2022 |...
Trousseau bolsters its Kubernetes security capabilities with support for HashiCorp Vault
The project managers of an open-source plug-in for Kubernetes that allows the orchestration software to better use encryption to protect its secrets has announced support for its first key...
4 security concerns for low-code and no-code development
There’s an increased push for what is being dubbed the citizen developer, coupled with the desire to empower application development and creation by non-developers. This is typically facilitated using...
OpenSea to add Metalink customer service channel
On Tuesday, nonfungible token, or NFT, platform OpenSea launched a server on Metalink to give the verified owners of its collections a direct channel for support, feedback and updates....
