Security Report | Latest security news, analysis, expert opinions on cybersecurity, digital technology and legislation.
United Kingdom
Joined June 2020
- Tweets115
- Following20
- Followers462
- Likes48
Security Report retweeted
Royal Mail Track & Trace website is back online after a mysterious week-long outage. EXCEPT with a caveat: a captcha puzzle with a rather high difficulty level leaving users frustrated.
securityreport.com/royal-mai…
Security Report retweeted
Verified mess — Twitter's $8 blue tick rollout sees 'verified' fakes - @Ax_Sharma
bleepingcomputer.com/news/se…
Security Report retweeted
Moorfields Eye Hospital in Dubai 🇦🇪, branch of #NHS-backed London Moorfields 🇬🇧 confirms a security incident as AvosLocker #ransomware threatens they'll leak 60 GB of patient data:
securityreport.com/nhs-moorf…
#databreach #databreaches
Security Report retweeted
BTW, "are" is a legitimate PyPI package from @andreilapets -- the researchers meant "aryi" (now removed). Luckily, caught this while writing my report.
8 malicious PyPI packages w/ 30,000 downloads found by @jfrog can:
* Steal credit card numbers stored in web browsers
* Steal Discord tokens and sensitive info
* Perform recon. (gather screenshots/files and upload em to Discord webhook)
bleepingcomputer.com/news/se…
#Python #malware
Security Report retweeted
#npm malware with #njRAT Bladabindi spotted at @sonatype.
"db-json.js" looks legit but pulls in #malware via dependency that:
* executes commands
* logs keystrokes
* modifies registry
* “speaks” via text-to-speech
* kills critical processes, and more...
blog.sonatype.com/bladabindi…
Security Report retweeted
🔥 A new feature in #macOS Big Sur allows Apple apps to bypass firewalls and VPNs—potentially letting #malware also exploit the same shortcoming to access sensitive data stored on users' systems and transmit it to remote servers.
Read: thehackernews.com/2020/11/ap…
#cybersecurity
Security Report retweeted
These newly discovered malicious typosquatting npm packages broadcast your IP, username, and device fingerprinting info on the web!
blog.sonatype.com/sonatype-s…
Discovered by @Sonatype automated #malware detection.
#infosec #securitynews #devsecops #devops #opensource
Security Report retweeted
This Prototype Pollution #vulnerability in a #NodeJS component with >7M downloads could lead to DoS and RCE.
As a @sonatype customer, you're protected! Check out the free Nexus Vulnerability scanner for yourself.
blog.sonatype.com/how-can-ad…
#devsecops #devops #security #infosec
Security Report retweeted
BREAKING: BleepingComputer has confirmed that Garmin received decryptor for their WastedLocker Ransomware attack.
bleepingcomputer.com/news/se…
Security Report retweeted
It turns out nearly 300 executables in your System32 folder are vulnerable to relative path DLL Hijacking.
Did you know that with a simple VBScript some of these EXEs can be used to elevate such executions, bypassing UAC entirely?
Full blog post here 👉 wietze.github.io/blog/hijack…
