Tag: security
Hackers could take over millions of Dahua CCTV cameras because of two critical flaws – here’s how to stay safe
Dahua CCTV flaws identified by Bitdefender affect over 100 popular security camera models Vulnerabilities allow remote code execution without authentication over local or internet connections Company urges firmware updates and network isolation to prevent exploitation Researchers at Bitdefender have announced two critical vulnerabilities affecting a large number of Dahua smart…
Read More
Windows Entra IDs can be bypassed worryingly easily – here’s what we know
Experts warn FIDO is not supported on certain clients when accessing Entra ID This triggers a fallback login mechanism that can be picked up Mitigations should be put in place, researchers say FIDO-based authenticator apps are considered one of the strongest practical defenses against phishing and credential theft, but judging…
Read More
UK immigration system targeted by hackers – dangerous new phishing campaign hits Sponsorship Management System
Mimecast uncovers phishing campaign targeting the UK Home Office Accounts are being stolen through phishing emails and fake websites The fake sites are almost indistinguishable A phishing campaign has been uncovered by Mimecast researchers targeting the Home Office Sponsorship Management System (SMS). The main aim of the campaign appear to…
Read More
Watch where you click – adult sites are hiding clickjacking malware in images, and all for Facebook likes
Malicious SVG files are being weaponized to secretly like Facebook posts without user consent Attackers hide obfuscated JavaScript in images to bypass detection and execute dangerous social media hijacks Trojan.JS.Likejack silently boosts targeted Facebook posts by exploiting active sessions of unsuspecting victims Security researchers have uncovered dozens of adult websites…
Read More
Docker could still be hosting a whole load of potentially malicious images – putting users at risk
XZ-Utils backdoor was found over a year ago Despite warnings, some Linux images still contain it Debian won’t budge as the images are “historical artifacts” At least 35 Linux images hosted on Docker Hub contain dangerous backdoor malware, which could put software developers and their products at risk of takeover,…
Read More
Allianz Life data leaked following recent breach – our tips on how to stay safe
Cybercriminals leaked stolen data in a Telegram channel Almost 3 million records from more than a million people were leaked There are ways to mitigate the risk Experts have warned the data stolen in the recent Allianz Life ransomware attack has been leaked to the open internet, and have urged…
Read More