Criminals can bypass two-factor authentication and hijack user accounts by simply convincing a mobile carrier to swap SIM cards for a phone number. A group of Senators and Representatives are asking the FCC to protect consumers from these kinds of scams.
Mozilla has released an emergency fix for a vulnerability in Firefox that attackers are actively exploiting.
MITRE adds information about threat groups, malware, and techniques used by adversaries in attacks against industrial control systems in its ATT&CK framework.
A chosen prefix collision in SHA-1 has demonstrated a new issue with the venerable hash function developed by the NSA.
As CCPA goes into effect, Mozilla is making a change that will allow people to request the deletion of any telemetry data collected by Firefox.