Researchers recently identified a phishing campaign set up to lure unsuspecting Netflix users into giving up their credentials and credit card data.
Tag Archives: Web Security
MongoDB Attacks Jump From Hundreds to 28,000 In Just Days
Security researchers report a massive uptick in the number of MongoDB databases hijacked and held for ransom.
Hello Kitty Database of 3.3 Million Breached Credentials Surfaces
A database of 3.3 million Hello Kitty users tied to a 2015 breach surfaced over the weekend exposing thousands of minors to potential credential theft.
Experts Warn of Novel PDF-Based Phishing Scam
Security experts are warning of an active phishing campaign that utilizes PDF attachments in a novel ploy to harvest email credentials from victims.
PHPMailer, SwiftMailer Updates Resolve Critical Remote Code Execution Vulnerabilities
Critical remote code execution vulnerabilities in PHPMailer and SwiftMailer, libraries used to send emails via PHP, were patched this week.
PHPMailer Bug Leaves Millions of Websites Open to Attack
A critical PHPMailer bug tied to the way websites handle email and feedback forms is leaving millions of websites hosted on popular web-publishing platforms such as WordPress, Drupal and Joomla open to attack.
Clever Facebook Hack Reveals Private Email Address of Any User
A bug bounty hunter earned $5,000 for a Facebook hack that allowed him to bypass security protection and access any Facebook user’s true email address.
Siemens Patches Insufficient Entropy Vulnerability in ICS Systems
German industrial giant Siemens has provided a firmware update addressing software vulnerabilities that are found in a popular line of its Desigo PX industrial control hardware.
Congressional Group Says Encryption Backdoors Are a Bad Idea
Members of the bipartisan encryption working group released a year-end report concluding that encryption backdoor laws would do more harm than good.
Fraudulent Video Ad Bot Rakes in Close to $5 Million Daily
An cybercrime group from Russia earns $3 million to $5 million daily through defrauding major U.S. websites of video ad revenue.