US voters won't support candidates who approve ransomware payments: survey

A new survey shows that, among other things, nearly two thirds of registered US voters will not vote for candidates who approve of making ransomware payments. | Continue reading


@secalerts.co | 4 years ago

Company pays ransom of $300k to ex-employee who stole the data of millions

An ex-employee has been paid at least $300,000 ransom by his former employer, Asurion, after claiming he stole the private data of more than a million customers, as well as thousands of employees. | Continue reading


@secalerts.co | 4 years ago

Co-Ordinated Ransomware Attack Targets 23 Texas Towns

Twenty-three towns in Texas have been attacked by a co-ordinated ransomware attack, in what authorities believe was the actions of a single threat actor. | Continue reading


@secalerts.co | 4 years ago

Company pays $300K ransom to ex-employee who stole the personal data of millions

An ex-employee has been paid at least $300,000 ransom by his former employer, Asurion, after claiming he stole the private data of more than a million customers, as well as thousands of employees. | Continue reading


@secalerts.co | 4 years ago

Hundreds of thousands still using breached usernames and passwords

A study showing some of the initial results of Google's 'Password Checkup extension for Chrome' shows that hundreds of thousands are still using breached usernames and passwords. | Continue reading


@secalerts.co | 4 years ago

Student hacks high school software and finds “SQL injections galore”

A teenager has uncovered numerous flaws, including SQL injection and XML inclusion vulnerabilities, within software used in his school. | Continue reading


@secalerts.co | 4 years ago

Researchers show it's possible to infect a DSLR camera with ransomware

Researchers have shown that cameras can be hacked through WiFi connections and the USB, using vulnerabilities in the Picture Transfer Protocol. | Continue reading


@secalerts.co | 4 years ago

Millions of Instagram users have their data scraped by official business partner

The data of millions of Instagram users has been scraped by one of the social media giant's officially sanctioned business partners, after a marketing company created detailed records of users' physical whereabouts, personal bios, and photos. | Continue reading


@secalerts.co | 4 years ago

Cyberattacks net North Korea $2B for weapons of mass destruction program

A confidential UN report has found that North Korea used cyberattacks on banks and cryptocurrency exchanges to steal US$2 billion and fund its weapons of mass destruction program. | Continue reading


@secalerts.co | 4 years ago

US Military buy items that “have been known to contain security vulnerabilities”

A report by the Pentagon's inspector general has found that Air Force and Army employees have bought products that | Continue reading


@secalerts.co | 4 years ago

Analysis of CVE-2019-13602: VLC Media Player Integer Underflow

CVE-2019-13602 reveals an Integer Underflow in the MP4 file format of the VLC Media Player | Continue reading


@secalerts.co | 4 years ago

One of Australia's 'big four' banks compromises thousands of customer details

Thousands of National Australia Bank (NAB) customers have had 'some personal information' compromised after the bank uploaded the details to the servers of two 'data service companies'. | Continue reading


@secalerts.co | 4 years ago

Android Surveillance-Ware Has Links to 2016 US Election Interference

A newly-publicised mobile malware has been linked to a Russian company that had sanctions imposed on it for alleged interference in the 2016 US presidential election. | Continue reading


@secalerts.co | 4 years ago

'Monokle' surveillanceware has possible links to 2016 US presidential election

A newly-publicised mobile malware has been linked to a Russian company that had sanctions imposed on it for alleged interference in the 2016 US presidential election. | Continue reading


@secalerts.co | 4 years ago

White-Hat Group Doxes Hackers with Links to Chinese Government

The anonymous white-hat group, Intrusion Truth, have doxed three hackers believed to be members of a group known as APT17, with links to the Chinese Government. | Continue reading


@secalerts.co | 4 years ago

Software Security: The Buck (Now) Stops with Developers

Software developers are playing a leading role in the day-to-day operational responsibility for application security, as information security teams testing products before release become irrelevant. | Continue reading


@secalerts.co | 4 years ago

Australia’s Data Retention Law Allows Telco’s Metadata to Remain Unencrypted

One of Australia's leading telcos is keeping its legacy systems free from encryption, and is doing so in accordance with the country's Data Retention Act. | Continue reading


@secalerts.co | 4 years ago

Hackers Infiltrate DNS Settings of 180k Routers in Brazil

Hackers infiltrate the DNS settings of over 180,000 routers in Brazil and redirect victims to phishing pages for online giants such as PayPal, Netflix, Gmail, and Uber. | Continue reading


@secalerts.co | 4 years ago

Agent Smith Malware Infects 25M Android Devices

25 million Android devices have been infected by malware that replaces apps already on the device with malicious versions displaying ads. | Continue reading


@secalerts.co | 4 years ago

Chinese Border Guards Place Malware on Travellers' Phones

Chinese authorities are installing malware onto the phones of travellers crossing the border into the Xinjiang region. iPhones are connected to a machine that scans them, while a surveillance app is installed on Android phones. | Continue reading


@secalerts.co | 4 years ago

YouTube Ban on 'Hacking' Content Snares Educational Infosec Videos

YouTube has used its policy banning | Continue reading


@secalerts.co | 4 years ago

Two Billion Records Exposed in 'Smart Home' Breach

Security researchers have found a user database, belonging to a company that operates a smart home device management platform and consisting two billion records, | Continue reading


@secalerts.co | 4 years ago

Show HN: A weekly newsletter of vulnerabilities in your software stack

Security vulnerabilities in your inbox. | Continue reading


@secalerts.co | 5 years ago