Slack Bug Allows Remote File Hijacking, Malware Injection
An attacker can supply a malicious hyperlink in order to secretly alter the download path for files shared in a Slack channel.
Web Security
WordPress WP Live Chat Support Plugin Fixes XSS Flaw
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites.
How Decoding Network Traffic Can Save Your Data Bacon
The importance of reading the network tealeaves of a company’s network traffic to head off an attack.
Attackers have been tampering with TLS signatures at a scale never before seen using a technique called cipher-stunting.
Microsoft Patch Tuesday security bulletin tackles 22 critical vulnerabilities.
Adobe has issued patches for 87 vulnerabilities on Patch Tuesday – the bulk of which exist in Adobe’s Acrobat and Reader product.
Cynet protects the entire internal environment – including hosts, files, users and the network.
A Twitter glitch “inadvertently” leaked iOS users’ location data to an unnamed partner.
In its latest observed campaign, there were also overlaps in victimology with the DarkHotel APT.
From ZIP attachments spreading Gandcrab, to DOC files distributing Trickbot, researchers tracked five widescale spam campaigns in 2019 that have made use of malicious attachments.
