Reddit got hacked. According to the investigation, it looks like hackers accessed employees 2FA protected accounts. An attacker 'compromised a few of Reddit's accounts with cloud and source code hosting providers by intercepting SMS 2FA verification codes'.
Posted
#Weekly-News
Researchers from the Palo Alto Networks analyzed new Mirai and Gafgyt IoT/Linux botnet campaigns. The samples used more than 11 exploits for spreading, exploiting D-Link, Dasan GPON routers.
Posted
#Weekly-News
Marcus Brinkmann demonstrated how some configuration options in the GnuPG allow remote attackers to spoof arbitrary signature. He used the embedded “filename” parameter in OpenPGP literal data packets, together with the verbose option set in their gpg.conf file.
Posted
#Weekly-News
The U.S. Secret Service is warning about a new scam scheme where the crooks are intercepting new debit cards in the mail and replace the chips on the cards with chips from old cards. Once owners activate the cards, crooks will use stolen chips for their financial gain.
Posted
#Weekly-News
According to the annual State of Open Source Security report, 77% of 433000 analyzed sites use at least one front-end JavaScript library with a known security vulnerability.
Posted
#Weekly-News
The security researcher Pierre Kim has discovered ten critical zero-day vulnerabilities in D-Link routers.
Posted
#Weekly-News
Malware samples recovered from watering hole attacks against the Polish financial regulator's website contain false flags that fraudulently suggest Russian actors are behind the campaign. BAE Systems Threat Research attributed the attack to the notoriously known Lazarus Group.
Posted
#Weekly-News