An active campaign inserts malicious VBScript into ZIP files posing as downloads for “John Wick 3,” “Contagion,” and other popular movies.
from Dark Reading: https://ift.tt/3bResUL
via IFTTT
Category Archives: Cybersecurity
7 Fraud Predictions in the Wake of the Coronavirus
It’s theme and variations in the fraud world, and fraudsters love — and thrive — during chaos and confusion
from Dark Reading: https://ift.tt/2KKb3LB
via IFTTT
Web Shells Continue to Threaten
A decade after their first use, Web shells remain a common tool for all stripes of attackers, from common cybercriminals to sophisticated state actors.
from Dark Reading: https://ift.tt/2W9yBPh
via IFTTT
Phishers Start to Exploit Oil Industry Amid COVID-19 Woes
from Dark Reading: https://ift.tt/2y9Ma9p
via IFTTT
4 Ways to Get to Defensive When Faced by an Advanced Attack
To hold your own against nation-state-grade attacks, you must think and act differently.
from Dark Reading: https://ift.tt/2KLZpzH
via IFTTT
Flaw in defunct WordPress plugin exploited to create backdoor
A vulnerability in the defunct OneTone WordPress theme plugin is being exploited to compromise entire sites while installing backdoor admin accounts.
from Naked Security https://ift.tt/3bTScK8
via IFTTT
[local] Druva inSync Windows Client 6.5.2 – Local Privilege Escalation
Druva inSync Windows Client 6.5.2 – Local Privilege Escalation
from Exploit-DB.com RSS Feed https://ift.tt/3d0OxKi
via IFTTT
[webapps] hits script 1.0 – ‘item_name’ SQL Injection
hits script 1.0 – ‘item_name’ SQL Injection
from Exploit-DB.com RSS Feed https://ift.tt/3aMOfp5
via IFTTT
[local] EmEditor 19.8 – Insecure File Permissions
EmEditor 19.8 – Insecure File Permissions
from Exploit-DB.com RSS Feed https://ift.tt/3cYJcTS
via IFTTT
Twitter turns off SMS-based tweeting in most countries
Buh-bye, original way of tweeting. Twitter said it’s to keep our accounts safe, referring to unspecified SMS-enabled vulnerabilities.
from Naked Security https://ift.tt/2VNVYPe
via IFTTT
Pacosite's Blog 