The Glamoriser Smart Bluetooth straightener offers up yet another example of how not to add a risky product to the Internet of Things (IoT).
from Naked Security https://ift.tt/2JRQLz3
via IFTTT
Category Archives: Cybersecurity
[local] Microsoft Windows 10 1903/1809 – RPCSS Activation Kernel Security Callback Privilege Escalation
Microsoft Windows 10 1903/1809 – RPCSS Activation Kernel Security Callback Privilege Escalation
from Exploit-DB.com RSS Feed https://ift.tt/2LsIKnb
via IFTTT
Slide Show
from Dark Reading: https://ift.tt/2Ls9MeB
via IFTTT
Google Chrome is ditching its XSS detection tool
Google’s throwing in the towel on XSS Auditor and putting its trust in Trusted Types instead.
from Naked Security https://ift.tt/2xV8rUQ
via IFTTT
Still not using HTTPS? Firefox is about to shame you
Two years after promising to report all HTTP-based web pages as insecure, Mozilla is about to deliver.
from Naked Security https://ift.tt/30F2tDW
via IFTTT
Okrum: Ke3chang group targets diplomatic missions
Tracking the malicious activities of the elusive Ke3chang APT group, ESET researchers have discovered new versions of malware families linked to the group, and a previously unreported backdoor
The post Okrum: Ke3chang group targets diplomatic missions appeared first on WeLiveSecurity
from WeLiveSecurity https://ift.tt/2Yiqval
via IFTTT
MITRE ATT&CK Framework Not Just for the Big Guys
At Black Hat, analysts from MITRE and Splunk will detail how organizations of many different sizes are leveraging ATT&CK’s common language.
from Dark Reading: https://ift.tt/2LTDh8x
via IFTTT
Party Like a Russian, Carder’s Edition
“It takes a certain kind of man with a certain reputation
To alleviate the cash from a whole entire nation…”
KrebsOnSecurity has seen some creative yet truly bizarre ads for dodgy services in the cybercrime underground, but the following animated advertisement for a popular credit card fraud shop likely takes the cake.
The name of this particular card shop won’t be mentioned here, and its various domain names featured in the video have been pixelated so as not to further promote the online store in question.
But points for knowing your customers, and understanding how to push emotional buttons among a clientele that mostly views America’s financial system as one giant ATM that never seems to run out of cash.
WARNING: Some viewers may find this video disturbing. Also, it is almost certainly Not Safe for Work.
The above commercial is vaguely reminiscent of the slick ads produced for and promoted by convicted Ukrainian credit card fraudster Vladislav “BadB” Horohorin, who was sentenced in 2013 to serve 88 months in prison for his role in the theft of more than $9 million from RBS Worldpay, an Atlanta-based credit card processor. (In February 2017, Horohorin was released and deported from the United States. He now works as a private cybersecurity consultant).
The clip above is loosely based on the 2016 music video, “Party Like a Russian,” produced by British singer-songwriter Robbie Williams.
Tip of the hat to Alex Holden of Hold Security for finding and sharing this video.
from Krebs on Security https://ift.tt/2JOHZBz
via IFTTT
Bluetooth Bug Enables Tracking on Windows 10, iOS & macOS Devices
Researchers discover a third-party algorithm in multiple high-profile Bluetooth devices exposes users to third-party tracking and data access.
from Dark Reading: https://ift.tt/2JLLh8V
via IFTTT
BlueKeep patching isn’t progressing fast enough
Keeping up with BlueKeep; or how many internet-facing systems, and in which countries and industries, remain ripe for exploitation?
The post BlueKeep patching isn’t progressing fast enough appeared first on WeLiveSecurity
from WeLiveSecurity https://ift.tt/2M0LKXp
via IFTTT
