资讯

Threat Post2 年
Newsletter Sign-up | Threatpost
Sign-up for the Threatpost Newsletter to stay current with breaking security news, the latest threats, the best ways to stay protected against those threats, and participate in the discussions ...
Threat Post2 年
Infosec Insiders Community - Threatpost
Browse our curated content, contributed by the Threatpost community of industry experts, technical gurus and thought leaders.
Threat Post2 年
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands - Threatpost
Through the first half of 2022, 34 percent of all unique phishing attacks tracked by the researchers impersonated financial services brands. The next most popular industry for criminals to abuse ...
Threat Post3 年
SEGA's Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API ... - Threatpost
SEGA's disclosure underscores a common, potentially catastrophic, flub — misconfigured Amazon Web Services (AWS) S3 buckets.
Threat Post2 年
Ransomware Attacks are on the Rise | Threatpost
With data gathered by “actively monitoring the leak sites used by each ransomware group and scraping victim details as they are released,” researchers have determined that Lockbit was by far ...
Threat Post2 年
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post3 年
2FA Bypassed in $34.6M Crypto.com Heist | Threatpost
In a display of 2FA’s fallibility, unauthorized transactions approved without users’ authentication bled 483 accounts of funds. Early Thursday morning, Crypto.com acknowledged that it had lost ...
Threat Post3 年
Office 365 Phishing Campaign Abuses Stolen Amazon SES Token
One phishing campaign tracked by researchers appear to abuse an Amazon service called Amazon Simple Email Service (SES), designed to let developers send email messages from apps. The campaign ...
Threat Post3 年
5 Cybersecurity Trends to Watch in 2022 - Threatpost
Here’s what cybersecurity watchers want infosec pros to know heading into 2022. No one could have predicted the sheer chaos the cybersecurity industry would experience over the course of 2021 ...
Threat Post2 年
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
New research indicates that over 80,000 Hikvision surveillance cameras in the world today are vulnerable to an 11 month-old command injection flaw.
Threat Post3 年
Cyberattackers Leverage DocuSign to Steal Microsoft Outlook Logins
Microsoft’s Spam Confidence Level (SCL) – a measure of the perceived legitimacy of any given email – assigned these malicious emails a score of ‘-1.’ In SCL, -1 is the lowest possible ...
Threat Post3 年
Malware Makers Using ‘Exotic’ Programming Languages
Malware authors are increasingly using rarely spotted programming languages such as Go, Rust, Nim and DLang in order to create new tools and to hinder analysis, researchers have found.