NY AG: 1.1M Online Consumer Accounts Found Compromised in Credential-Stuffing Attacks
The Office of the Attorney General (OAG) for the state of New York today said a months-long investigation into credential-stuffing operations uncovered some 1.1 million consumer online accounts that had been...
New Attack Campaign Exploits Microsoft Signature Verification
Security researchers are observing a new campaign in which attackers abuse the Microsoft e-signature verification to deploy Zloader, a banking malware designed to steal user credentials and private information.This...
‘Malsmoke’ Exploits Microsoft’s E-Signature Verification
The info-stealing campaign using ZLoader malware – previously used to deliver Ryuk and Conti ransomware – already has claimed more than 2,000 victims across 111 countries.
Threat actors are exploiting...
FTC to Go After Companies that Ignore Log4j
Companies that fail to protect consumer data from Log4J attacks are at risk of facing Equifax-esque legal action and fines, the FTC warned.
The Federal Trade Commission (FTC) will...
Uber Bug, Ignored for Years, Casts Doubt on Official Uber Emails
A simple-to-exploit bug that allows bad actors to send emails from Uber’s official system — skating past email security — went unaddressed despite multiple flagging by researchers.
A security vulnerability...
Why We Need To Reframe the False-Positive Problem
The concept of false positives has been pushed and pulled around for years in the cybersecurity industry. Countless vendor-sponsored studies reinforce the idea that false positives are directly contributing...
FTC: Companies Could Face Legal Action for Failing to Patch Log4j
The Federal Trade Commission (FTC) is warning US organizations they may face legal penalties if they don't take steps to protect consumer information from exposure via the Lo4j vulnerability.
In...
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
By: Ravie Lakshmanan
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy...
