ThreatList: DDoS Attack Sizes Drop 85 Percent Post FBI Crackdown
The FBI’s crackdown on 15 DDoS-for-hire sites appears to have had an impact on DDoS attacks, the average size for which dropped 85
[...]
Web Security
Articles targeted at Web App Security, hacks, guides, how to’s and the latest vulnerabilities.
Fourth Major Credential Spill in a Month Hits DreamMarket
Gnosticplayers has released about 26 million records from what he said are breaches of six new companies.
Source: Threat Post – Web
[...]
Mirai Variant Goes After Enterprise Systems
The newest Mirai variant is targeting WePresent WiPG-1000 Wireless Presentation systems and LG Supersign TVs used by enterprises.
Source: Threat Post –
[...]
Threatlist: IMAP-Based Attacks Compromising Accounts at ‘Unprecedented Scale’
Attackers are increasingly targeting insecure legacy protocols, like IMAP, to avoid running into multi-factor authentication in password-spraying campaigns.
Source: Threat Post –
[...]
Cisco Patches Critical ‘Default Password’ Bug
Vulnerability allows adversaries to access monitoring system used for gathering info on operating systems and hardware.
Source: Threat Post – Web Security
[...]
Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw
Newly patched CVE-2019-0797 is being actively exploited by two APTs, FruityArmor and SandCat.
Source: Threat Post – Web Security – Threat Groups
[...]
ThreatList: Phishing Attacks Doubled in 2018
Scammers used both older, tested-and-true phishing tactics in 2018 – but also newer tricks, such as fresh distribution methods, according to a new
[...]
Adobe Patches Critical Photoshop, Digital Edition Flaws
Adobe fixed two arbitrary code execution flaws in its Photoshop and Digital Edition products.
Source: Threat Post – Web Security – Adobe
[...]
RSAC 2019: TLS Markets Flourish on the Dark Web
The certificates are often paired with ancillary products, like Google-indexed “aged” domains, after-sale support, web design services and even integration with a range
[...]
RSA Conference: BEC Scammer Gang Takes Aim at Boy Scouts, Other Nonprofts
A scammer ring dubbed Scarlet Widow has targeted nonprofits, schools and universities with an array of business email compromise (BEC) attacks over the
[...]