ProtonVPN, NordVPN Flaws Open Door to Privilege Escalation
A pair of vulnerabilities in the ProtonVPN and NordVPN VPN clients have been uncovered, which allow attackers to execute code as an administrator on targeted Read More
Bad Actors Sizing Up Systems Via Lightweight Recon Malware
Well-known financial crime gang Cobalt Group and other threat actors have recently shifted tactics to incorporate lightweight modular downloaders that “vet” target machines for their Read More
British Airways Website, Mobile App Breach Compromises 380k
British Airways said approximately 380,000 card payments were compromised after a security breach occurred on the company’s website and mobile app in August. According to Read More
Threatlist: Email Attacks Surge, Targeting Execs
There was a 36 percent increase in email attacks against businesses between the first and second quarters of 2018, with retail, healthcare and government experiencing Read More
Millions of Records Exposed in Veeam Misconfigured Server
Hundreds of millions of records were exposed after a MongoDB server belonging to disaster-recovery firm Veeam was left misconfigured, researchers found. The open server contained Read More
Open .Git Directories Leave 390K Websites Vulnerable
A scan of more than 230 million web domains worldwide has uncovered 390,000 web pages with open .git directories – a worrying state of affairs Read More
Threat Actors Eyeing IQY Files To Peddle Malspam
More threat actors are pushing weaponized Excel web query (IQY) files to deliver malicious code – as seen in recent campaigns by several major malspam Read More
Threatpost News Wrap Podcast For Sept. 7
The Threatpost team breaks down the biggest news from the week ended Sept. 7. Read More
High-Severity Flaws in Cisco Secure Internet Gateway Service Patched
Two high-severity vulnerabilities have been disclosed in Cisco’s security platform that could allow an attacker to gain administrative privileges – and take full control of Read More
U.S. Ties Lazarus to North Korea and Major Hacking Conspiracy
The Justice Department has charged a North Korean man in the hacking of Sony Pictures Entertainment (SPE) in 2014 – as well as the global Read More