Security news that informs and inspires

All Articles

2230 articles:

Enterprises Should Fix These 25 Flaws

Enterprise IT staff should prioritize fixing the flaws listed in the Top 25 list of most commonly targeted vulnerabilities released by the United States National Security Agency.

Vulnerability, Patch

Google Patches Bug Used in Active Attacks Against Chrome

Google has fixed a flaw in the FreeType library that attackers are attempting to exploit against Chrome users.

Google

British Airways GDPR Fine Lower Than Expected

Citing the pandemic, the United Kingdom privacy watchdog dramatically reduced the fine against British Airways for its 2018 data breach.

GDPR, Data Breaches

Trickbot Up to Its Old Tricks

Days after a takedown operation, the Trickbot botnet is back up and running with new C2 servers in Europe and South America.

Botnet, Malware

FCC Will Clarify Section 230 Rules on Content Moderation

The decision by the FCC to clarify the meaning of the Communications Act's Section 230 could affect the legal protections technology companies currently have regarding user-generated content.

Internet, Government, Disinformation

SonicWall Fixes Critical Flaw in Firewall Appliances

A critical flaw in SonicOS could lead to remote code execution in vulnerable SonicWall firewall appliances.

Vpn

New York Wants Social Media Companies to be Regulated

New York’s Department of Financial Services investigated the July attack on Twitter called for greater cybersecurity oversight for major technology platforms, especially social media companies.

Social Media, Data Breaches, Financial Services, Government

FIN11 Cybercrime Group Uses Ransomware, Extortion to Cash In

The newly identified FIN11 group uses the Clop ransomware and various public malware tools in operations against companies around the world.

Ransomware, Cybercrime

Microsoft Fixes Ping of Death Flaw in Windows

A flaw (CVE-2020-16898) in Windows 10 and Server 2019 can allow remote code execution with one malformed ICMP packet.

Microsoft

Microsoft and Partners Disrupt Trickbot Botnet

Microsoft and several other security companies worked together to disrupt the Trickbot malware network, seizing C2 servers and disabling IP addresses associated with it.

Trickbot, Microsoft, Ransomware

Morgan Stanley to Pay $60 Million Fine for 2016 Data Breach

Morgan Stanley has agreed to pay a $60 million fine for its repeated failures to adequately protect customer data when disposing of old equipment.

Data Breaches, Risk Management

New Android Ransomware Variant Shows Constant Evolution

A new Android ransomware strain known as MalLocker.B is using new techniques to persist and evade defenses.

Ransomware, Android

Cybercrime Victims Are Not Calling the Police

Ransomware, business email compromise, and social engineering are among the top threats facing organizations, but the magnitude of the problem is not well-understood, Europol said in its threat assessment report.

Android, Malware

California Voters Asked to Amend Privacy Law

California voters will vote on Proposition 24, on whether to expand the groundbreaking privacy law that was passed just two yeras ago. Proposition 24, or the California Privacy Rights Act of 2020, builds on the California Consumer Privacy Act of 2018 which just took effect this year.

Government, Privacy

Global Privacy Control Protocol Aims to Pick Up Where Do Not Track Left Off

The new Global Privacy Control protocol is designed to let users tell websites not to sell their data.

Privacy