HackDig : Dig high-quality web security articles for hacker

Does Your Domain Have a Registry Lock?

If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being hijacked. Here’s the
Publish At:2020-01-24 15:35 | Read:172 | Comments:0 | Tags:Latest Warnings The Coming Storm Web Fraud 2.0 Arno Vis CSC

Phishing for Apples, Bobbing for Links

Anyone searching for a primer on how to spot clever phishing links need look no further than those targeting customers of Apple, whose brand by many measures remains among the most-targeted. Past stories here have examined how scammers working with organized gangs try to phish iCloud credentials from Apple customers who have a mobile device that is lost or s
Publish At:2020-01-13 15:35 | Read:138 | Comments:0 | Tags:Latest Warnings Web Fraud 2.0 Apple phishing

Tricky Phish Angles for Persistence, Not Passwords

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertentl
Publish At:2020-01-07 20:35 | Read:184 | Comments:0 | Tags:Latest Warnings The Coming Storm Web Fraud 2.0 Jeff Jones lo

Patch Tuesday Lowdown, October 2019 Edition

On Tuesday Microsoft issued software updates to fix almost five dozen security problems in Windows and software designed to run on top of it. By most accounts, it’s a relatively light patch batch this month. Here’s a look at the highlights. Happily, only about 15 percent of the bugs patched this week earned Microsoft’s most dire “crit
Publish At:2019-10-09 04:40 | Read:2101 | Comments:0 | Tags:Latest Warnings Security Tools Time to Patch CVE-2019-1367 I

Phishers are Angling for Your Cloud Providers

Many companies are now outsourcing their marketing efforts to cloud-based Customer Relationship Management (CRM) providers. But when accounts at those CRM providers get hacked or phished, the results can be damaging for both the client’s brand and their customers. Here’s a look at a recent CRM-based phishing campaign that targeted customers of Fo
Publish At:2019-09-19 16:10 | Read:378 | Comments:0 | Tags:Latest Warnings The Coming Storm Web Fraud 2.0 Anti-Phishing

Before He Spammed You, this Sly Prince Stalked Your Mailbox

A reader forwarded what he briefly imagined might be a bold, if potentially costly, innovation on the old Nigerian prince scam that asks for help squirreling away millions in unclaimed fortune: It was sent via the U.S. Postal Service, with a postmarked stamp and everything. In truth these old fashioned “advance fee” or “419” scams pr
Publish At:2019-09-19 16:10 | Read:386 | Comments:0 | Tags:A Little Sunshine Latest Warnings Ne'er-Do-Well News

Visa Alert and Update on the Oracle Breach

Credit card industry giant Visa on Friday issued a security alert warning companies using point-of-sale devices made by Oracle‘s MICROS retail unit to double-check the machines for malicious software or unusual network activity, and to change passwords on the devices. Visa also published a list of Internet addresses that may have been involved in the O
Publish At:2016-08-13 21:00 | Read:5209 | Comments:0 | Tags:A Little Sunshine Latest Warnings The Coming Storm alex hold

Road Warriors: Beware of ‘Video Jacking’

A little-known feature of many modern smartphones is their ability to duplicate video on the device’s screen so that it also shows up on a much larger display — like a TV. However, new research shows that this feature may quietly expose users to a simple and cheap new form of digital eavesdropping. Dubbed “video jacking” by its master
Publish At:2016-08-11 14:10 | Read:4979 | Comments:0 | Tags:A Little Sunshine Latest Warnings The Coming Storm Android B

Social Security Administration Now Requires Two-Factor Authentication

The U.S. Social Security Administration announced last week that it will now require a cell phone number from all Americans who wish to manage their retirement benefits at ssa.gov. Unfortunately, the new security measure does little to prevent identity thieves from fraudulently creating online accounts to siphon benefits from Americans who haven’t yet
Publish At:2016-08-01 16:15 | Read:4851 | Comments:0 | Tags:A Little Sunshine Latest Warnings The Coming Storm my Social

Citing Attack, GoToMyPC Resets All Passwords

GoToMyPC, a service that helps people access and control their computers remotely over the Internet, is forcing all users to change their passwords, citing a spike in attacks that target people who re-use passwords across multiple sites. Owned by Santa Clara, Calif. based networking giant Citrix, GoToMyPC is a popular software-as-a-service product that lets
Publish At:2016-06-20 18:45 | Read:4965 | Comments:0 | Tags:Data Breaches Latest Warnings Citrix GoToMyPC John Bennett

Got $90,000? A Windows 0-Day Could Be Yours

How much would a cybercriminal, nation state or organized crime group pay for blueprints on how to exploit a serious, currently undocumented, unpatched vulnerability in all versions of Microsoft Windows? That price probably depends on the power of the exploit and what the market will bear at the time, but here’s a look at one convincing recent exploit
Publish At:2016-06-16 05:15 | Read:5353 | Comments:0 | Tags:A Little Sunshine Latest Warnings Ne'er-Do-Well News The Com

Dental Assn Mails Malware to Members

The American Dental Association (ADA) says it may have inadvertently mailed malware-laced USB thumb drives to thousands of dental offices nationwide. The problem first came to light in a post on the DSL Reports Security Forum. DSLR member “Mike” from Pittsburgh got curious about the integrity of a USB drive that the ADA mailed to members to share
Publish At:2016-04-28 12:20 | Read:3380 | Comments:0 | Tags:A Little Sunshine Latest Warnings ADA malware American Denta

FBI: $2.3 Billion Lost to CEO Email Scams

The U.S. Federal Bureau of Investigation (FBI) this week warned about a “dramatic” increase in so-called “CEO fraud,” e-mail scams in which the attacker spoofs a message from the boss and tricks someone at the organization into wiring funds to the fraudsters. The FBI estimates these scams have cost organizations more than $2.3 billion
Publish At:2016-04-18 15:05 | Read:3533 | Comments:0 | Tags:A Little Sunshine Latest Warnings The Coming Storm ceo fraud

Adobe Patches Flash Player Zero-Day Threat

Adobe Systems this week rushed out an emergency patch to plug a security hole in its widely-installed Flash Player software, warning that the vulnerability is already being exploited in active attacks. Adobe said a “critical” bug exists in all versions of Flash including Flash versions 21.0.0.197 and lower (older) across a broad range of systems,
Publish At:2016-04-18 15:05 | Read:3036 | Comments:0 | Tags:Latest Warnings Time to Patch cve-2016-1019 Flash Player zer

New Threat Can Auto-Brick Apple Devices

If you use an Apple iPhone, iPad or other iDevice, now would be an excellent time to ensure that the machine is running the latest version of Apple’s mobile operating system — version 9.3.1. Failing to do so could expose your devices to automated threats capable of rendering them unresponsive and perhaps forever useless. Zach Straley demonstratin
Publish At:2016-04-18 15:05 | Read:4721 | Comments:0 | Tags:A Little Sunshine Latest Warnings The Coming Storm Time to P

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud