Scams Ramp Up Ahead of Black Friday Cybercriminal Craze
With more online shoppers this year due to COVID-19, cybercriminals are pulling the trigger on new scams ahead of Black Friday and Cyber Monday.
Vulnerabilities
Credential-Stuffing Attack Hits The North Face
The North Face has reset an undisclosed number of customer accounts after detecting a credential-stuffing attack on its website.
Digging into the Dark Web: How Security Researchers Learn to Think Like the Bad Guys
Fortinet’s Aamir Lakhani discusses hacker forums as a rich source of threat intelligence.
Security problems in Schneider Electric programmable logic controllers allow compromise of the hardware, responsible for physical plant operations.
Browser users are once again being asked to patch severe vulnerabilities that can lead to remote code execution.
Three security vulnerabilities can be chained to enable unauthenticated remote code execution.
Both Nvidia and Intel faced severe security issues this week – including a high-severity bug in Nvidia’s GeForce NOW.
The flaw stems from an issue with the ingress packet processing function of Cisco IOS XR software.
Philippines COVID-KAYA app allowed for unauthorized access typically protected by ‘superuser’ credentials and also may have exposed patient data.
Remote code execution vulnerabilities dominate this month’s security bulletin of warnings and patches.
