We End Violence LLC is notifying an unspecified number of students that their personal information may be in the hands of hackers after the Agent of Change web site was accessed by unauthorized individual(s). Link: San Diego-based Agent of Change notifying students that personal and sensitive information accessed by hackers
The Sofacy Group (also known as Pawn Storm or APT28) is well known for deploying zero-day exploits in their APT campaigns. For example, two recent zero-days used by the Sofacy Group were exploiting vulnerabilities in Microsoft Office CVE-2015-2424 and Java CVE-2015-2590. Link: Sofacy Recycles Carberp and Metasploit Code
Sofacy Recycles Carberp and Metasploit Code Read More »
Heimdal Security published an interesting post on the increase in malicious scripts that are being injected into legit websites in order to serve ransomware. Link: Hundreds million legit websites could serve Ransomware because of Script Injection compromise
An unpatched vulnerability affecting PayPal’s mobile applications can be exploited to access restricted accounts and even bypass the two-factor authentication (2FA) mechanism, a researcher claims. Link: PayPal Mobile Apps Plagued by Authentication Flaw: Researcher
PayPal Mobile Apps Plagued by Authentication Flaw: Researcher Read More »
A report published in Security Week confirms that LinkedIn accounts of security researchers across the globe have been recently assaulted with recruitment requests from a series of fake accounts in what appears to be an attempt to map their networks. Link: Stay alert Security Researchers as Fake Recruiters send you invitation on LinkedIn
Stay alert Security Researchers as Fake Recruiters send you invitation on LinkedIn Read More »
