iOS Password Prompts are Ripe for Abuse
Apple’s password prompts for iOS devices are an easy target for phishing attacks to steal iTunes passwords and IDs.
Tom Spring
About
Tom Spring is Editor-in-Chief of Threatpost. For the past two decades he has worked at a number of national publications in the roles of executive editor, technical editor and investigative reporter.
Microsoft Patches Office Bug Actively Being Exploited
Microsoft’s Patch Tuesday security bulletin includes 62 fixes for vulnerabilities tied to Office, SBM1 and the Windows DNS client.
Porn Site Becomes Hub for Malvertising Campaigns
A popular porn site is used by KovCoreG Group to launch multiple malvertising campaigns exposing millions to fake browser updates and malware.
FormBook info-stealing malware has been part of two recent distribution campaigns and is being sold on the Dark Web for as little as $29 a week.
Researchers uncover a misconfigured Elasticsearch database, exposing data tied to NFL players and their agents.
U.S. Deputy Attorney General and other top cyber policy makers warn the use of strong encryption hobbles law enforcement’s ability to protect the public and solve crimes and is a serious problem.
The nature of cyberattacks is changing and increasingly leveraging social networks as they take aim at new targets.
Android receives three remote code execution patches for vulnerabilities rated critical as Google launches a new Pixel/Nexus Security Bulletin.
A domain name system server implementation is at risk of remote code execution, information exposure and denial-of-service attacks after a seven vulnerability were disclosed by Google and patched by the maintainers of Dnsmasq.
Netgear patches over a dozen vulnerabilities impacting its routers, switches and NAS devices.
