Phishing kit screenshots 📸 the victim's email address domain to generate phishing webpage's background on the fly, and uses Clearbit to fetch the appropriate logo.
securityreport.com/phishing-…
#phishing #emailsecurity
Security Report retweeted
Royal Mail Track & Trace website is back online after a mysterious week-long outage. EXCEPT with a caveat: a captcha puzzle with a rather high difficulty level leaving users frustrated.
securityreport.com/royal-mai…
Royal Mail Track & Trace website is back online after a mysterious week-long #outage. EXCEPT with a caveat: a captcha puzzle with a rather high difficulty level leaving users frustrated. #RoyalMail
securityreport.com/royal-mai…
Security Report retweeted
Verified mess — Twitter's $8 blue tick rollout sees 'verified' fakes - @Ax_Sharma
bleepingcomputer.com/news/se…
New convincing #phishing campaign targets Booking[.]com and Blockchain customers.
securityreport.com/new-convi…
A spreadsheet hosted on Intel[.]com is flagged as malware—but is it?
h/t @malmoeb
securityreport.com/a-spreads…
Principal Dutch railway network operator, NS Trains halted trains for hours on Sunday due to IT system failure. International trains not impacted:
securityreport.com/ns-trains…
Zero-click attacks and how to defend against them
securityreport.com/beware-of…
NEW: Movie studios sue TorGuard alleging the VPN provider encourages piracy and keeps no logs against #copyright infringers.
securityreport.com/movie-stu…
#dmca #piracy #Lawsuit
Mozilla removes Firefox add-ons 'Bypass' and 'Bypass XM' installed by 455,000 users. These add-ons blocked access to browser updates and access control lists by misusing the proxy API.
securityreport.com/mozilla-d…
Security Report retweeted
Moorfields Eye Hospital in Dubai 🇦🇪, branch of #NHS-backed London Moorfields 🇬🇧 confirms a security incident as AvosLocker #ransomware threatens they'll leak 60 GB of patient data:
securityreport.com/nhs-moorf…
#databreach #databreaches
Security firm @varonis explains how misconfigured #Salesforce community sites can expose sensitive data to any unauthenticated user on the internet.
securityreport.com/how-can-s…
#dataleak #vulnerability
Security Report retweeted
BTW, "are" is a legitimate PyPI package from @andreilapets -- the researchers meant "aryi" (now removed). Luckily, caught this while writing my report.
8 malicious PyPI packages w/ 30,000 downloads found by @jfrog can:
* Steal credit card numbers stored in web browsers
* Steal Discord tokens and sensitive info
* Perform recon. (gather screenshots/files and upload em to Discord webhook)
bleepingcomputer.com/news/se…
#Python #malware
21,000 U.S. driver licenses are up for sale on a hacker forum. The seller also told us that they had over 2,000 credit reports with sensitive customer information, like names, dates of birth, SSNs, addresses, credit history, etc.
securityreport.com/21000-u-s…
#databreach #HackerNews
Audacity's updated #privacy notice has #opensource users concerned. The new terms also forbid those "under 13" (e.g. school pupils) from using Audacity, posing new challenges.
Some are forking the #Audacity project to remove telemetry.
via @Ax_Sharma
securityreport.com/audacity-…
Dental and vision #insurance giant Dominion National has reached a $2 million settlement in a data breach class-action lawsuit concerning over 122,000 members.
Decade-old #databreach had exposed names, DOBs, SSNs, and other PII.
securityreport.com/insurer-d…
#healthcare
#Twitter slaps many with DMCA takedown notices for years-old violations.
securityreport.com/twitter-s…
#DMCA #copyright #technews
#Google has gone #opensource with their Fully Homomorphic #Encryption toolkit — especially useful for developers and data scientists in #healthcare.
securityreport.com/google-re…
Adobe installs its anti-piracy "Genuine Service" application on users running Adobe apps, to catch counterfeit apps -- but is it safe?
securityreport.com/adobe-has…
Jailbreaking your #Roku devices with persistent root privileges using "RootMyRoku"
securityreport.com/jailbreak…
#jailbreak #exploit #vulnerability









