Airline DMARC Policies Lag, Opening Flyers to Email Fraud
Up to 61 percent out of the IATA (International Air Transport Association) airline members do not have a published DMARC record.
Web Security
IcedID Trojan Rebooted with New Evasive Tactics
Juniper identifies phishing campaign targeting business customers with malware using password protection, among other techniques, to avoid detection.
‘EmoCrash’ Exploit Stoppered Emotet For 6 Months
A researcher developed a killswitch exploiting a buffer overflow in Emotet – preventing the malware from infecting systems for six months.
The REvil ransomware and savvy phone scammers have exposed sensitive information.
The Canada Revenue Agency (CRA) suspended online services after accounts were hit in a third wave of credential stuffing attacks this weekend – giving bad actors access to various government services.
Researchers have discovered freely available PoC code and exploit that can be used to attack unpatched security holes in Apache Struts 2.
The XCSSET suite of malware also hijacks browsers, has a ransomware module and more — and uses a pair of zero-day exploits.
The recently patched flaws could be abused by an unauthenticated, remote attackers to take over vulnerable websites.
The consumer-electronics giant had suffered partial outages across its U.S. website and internal systems reportedly, thanks to the Maze gang.
The video-conferencing specialist has yet to roll out full encryption, but it says it’s working on it.
