Experts Urge Firms to Patch Trivial-to-Exploit Flaw in Linux PolicyKit
A local privilege escalation of (LPE) vulnerability in the software used to handle authorizations — and installed by default — on most major distributions of Linux is trivial to...
Was 2021 the year automotive got serious about cybersecurity?
2021 was something of a breakout year for cybersecurity in the automotive industry.
For instance, we saw the creation of both TR-68:3 ‘Autonomous vehicles: Cybersecurity principles and assessment framework’...
County of Kings alerts about the potential COVID-19 data breach
County of Kings, California, shared in a statement that a misconfiguration on their public web server has potentially left some COVID-19 data and individuals’ information exposed online.
Originally discovered...
Scammers ask for up to $40,000 for highjacked Instagram accounts
A phishing campaign targeted corporate accounts since August 2021.While ransomware has been trending for the past couple of years, it doesn't mean scammers have stopped trying to carry out...
Etherescan adds new messaging feature for anons: ‘Blockscan Chat’
The team behind the popular blockchain explorer and analytics platform Etherscan has launched an Ethereum-based wallet-to-wallet instant messaging service dubbed “Blockscan Chat.” Blockscan is currently in beta testing mode,...
Threat Actors Use Microsoft OneDrive for Command-and-Control in Attack Campaign
In what's believed to be the first known use of the tactic, an advanced persistent threat actor is leveraging Microsoft OneDrive services for command-and-control (C2) purposes in a sophisticated...
As IoT Attacks Increase, Experts Fear More Serious Threats
With attacks against Internet of Things devices on the rise, threat researchers are warning companies to make sure they know their devices and have processes in place to maintain...
