Home Tags Credentials

Tag: credentials

Experts Doubt Hackers’ Claim Of Millions Of Breached Apple Credentials

Security experts say they are skeptical that a group called Turkish Crime Family actually possess a cache of hundreds of millions of Apple iCloud...

Google takes Symantec to the woodshed for mis-issuing 30,000 HTTPS certs...

Enlarge (credit: Nyttend) In a severe rebuke of one of the biggest suppliers of HTTPS credentials, Google Chrome developers announced plans to drastically...

iPhone, Mac owners: How to stymie hackers extorting Apple, threatening to...

Hackers claiming to have hundreds of millions of iCloud credentials have threatened to wipe date from iPhones, iPads and Macs if Apple does not...

Hackers threaten to wipe millions of Apple devices, demand ransom

A group of hackers is threatening to wipe data from millions of Apple devices in two weeks if the company doesn’t pay them $150,000.The...

Local Windows Admins Can Hijack Sessions Without Credentials

A researcher has published a method by which a local admin can hijack any other Windows sessions without the need for credentials.

How did Yahoo get breached? Employee got spear phished, FBI suggests

Enlarge / Dmitry Dokuchaev, Igor Sushchin, Alexsey Belan, and Karim Baratov—the four indicted by the US in the Yahoo hacking case. SAN...

VU#553503: D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass and...

Vulnerability Note VU#553503 D-Link DIR-130 and DIR-330 are vulnerable to authentication bypass and do not protect credentials Original Release date: 15 Mar 2017 |...

PetrWrap: the new Petya-based ransomware used in targeted attacks

This year we found a new family of ransomware used in targeted attacks against organizations.After penetrating an organization’s network the threat actors used the...

Hundreds of Thousands of Vulnerable IP Cameras Easy Target for Botnet,...

A researcher claims that almost 200,000 shoddily made IP cameras could be an easy target for attackers looking to spy, brute force them or...

VU#247016: Flash Seats Mobile App for Android and iOS fails to...

Vulnerability Note VU#247016 Flash Seats Mobile App for Android and iOS fails to validate SSL certificates Original Release date: 08 Mar 2017 | Last...

Dahua video kit left user credentials in plain sight

Bad code or backdoor? Whichever it was, patch it now Chinese security camera/DVR company Dahua is pushing firmware patches after accusations by a security...

VU#355151: ACTi cameras models from the D, B, I, and E...

Vulnerability Note VU#355151 ACTi cameras models from the D, B, I, and E series contain multiple security vulnerabilities Original Release date: 07 Mar 2017...