SDK Bug Lets Attackers Spy on User’s Video Calls Across Dating, Healthcare Apps
Apps like eHarmony and MeetMe are affected by a flaw in the Agora toolkit that went unpatched for eight months, researchers discovered.
[...]
Web Security
Articles targeted at Web App Security, hacks, guides, how to’s and the latest vulnerabilities.
Ninja Forms WordPress Plugin Bug Opens Websites to Hacks
The popular plugin is installed on more than 1 million websites, and has four flaws that allow various kinds of serious attacks, including
[...]
Masslogger Swipes Microsoft Outlook, Google Chrome Credentials
A new version of the Masslogger trojan has been targeting Windows users – now using a compiled HTML (CHM) file format to start
[...]
Details Tied to Safari Browser-based ‘ScamClub’ Campaign Revealed
Public disclosure of a privilege escalation attack details how a cybergang bypassed browser iframe sandboxing with malicious PostMessage popups.
Source: Threat Post
[...]
Economics of 0-Day Disclosures: The Good, Bad and Ugly
UPCOMING: March 24 @ 2-3pm ET: Threatpost webinar on how the zero-day bug economy works and why understanding it can keep your company
[...]
Complaint Blasts TikTok’s ‘Misleading’ Privacy Policies
TikTok is again in hot water for how the popular video-sharing app collects and shares data – particularly from its underage userbase.
[...]
Let’s Encrypt Gears Up to Replace 200M Certificates a Day
The open CA prepares for ‘worst scenarios’ with new fiber, servers, cryptographic signing and more.
Source: Threat Post – Web Security –
[...]
DDoS Attacks Wane in Q4 Amid Cryptomining Resurgence
The volume of attacks fell 31 percent in the last part of 2020, as Bitcoin values skyrocketed. But there were still several notable
[...]
Misconfigured Baby Monitors Allow Unauthorized Viewing
Hundreds of thousands of individuals are potentially affected by this vulnerability.
Source: Threat Post – Web Security – Misconfigured Baby Monitors Allow
[...]
Microsoft Pulls Bad Windows Update After Patch Tuesday Headaches
Microsoft released a new servicing stack update (KB5001078) after an older one caused problems for Windows users installing Patch Tuesday security updates.
[...]