Saturday 27 February 2021

Judge Approves $650M Facebook Privacy Lawsuit Settlement

A federal judge on Friday approved a $650 million settlement of a privacy lawsuit against Facebook for allegedly using photo face-tagging and other biometric data without the permission of its users.

read more



from SecurityWeek RSS Feed https://ift.tt/3uCg9PG
via https://ifttt.com/ IFTTT

Friday 26 February 2021

HYAS Raises $16 Million to Hunt Adversary Infrastructure

HYAS, a Victoria, Canada-based provider of threat intelligence based on adversary infrastructure, announced this week that it has closed a $16 million Series B round of funding led by S3 Ventures. 

HYAS logo

read more



from SecurityWeek RSS Feed https://ift.tt/2PhvQf5
via https://ifttt.com/ IFTTT

Meet the Vaccine Appointment Bots, and Their Foes

Having trouble scoring a COVID-19 vaccine appointment? You’re not alone. To cope, some people are turning to bots that scan overwhelmed websites and send alerts on social media when slots open up.

read more



from SecurityWeek RSS Feed https://ift.tt/3qYjRB1
via https://ifttt.com/ IFTTT

Chinese Threat Actor Uses Browser Extension to Hack Gmail Accounts

In early 2021, a Chinese threat actor tracked as TA413 attempted to hack into the Gmail accounts of Tibetan organizations using a malicious browser extension, researchers with cybersecurity firm Proofpoint have discovered.

read more



from SecurityWeek RSS Feed https://ift.tt/3krQW5O
via https://ifttt.com/ IFTTT

Security, Privacy Issues Found in Tens of COVID-19 Contact Tracing Apps

An analysis of 40 COVID-19 contact tracing applications for Android has led to the discovery of numerous security and privacy issues, according to a new research paper.

Contact tracing applications have been created to help authorities automate the process of identifying those who have been in close contact with infected individuals.

read more



from SecurityWeek RSS Feed https://ift.tt/37Q1F52
via https://ifttt.com/ IFTTT

В контроллерах Rockwell выявлена 10-балльная уязвимость

В контроллерах Rockwell выявлена 10-балльная уязвимость

В двух десятках ПЛК производства Rockwell Automation выявлена возможность обхода аутентификации, позволяющая получить удаленный доступ к устройству и изменить его настройки и/или код приложения. Степень опасности уязвимости оценена в 10 баллов из 10 возможных по шкале CVSS.



from Новости информационной безопасности - Anti-Malware.ru https://ift.tt/3aWWkLh
via https://ifttt.com/ IFTTT

CrowdStrike выявила взаимосвязи между киберпреступниками

CrowdStrike выявила взаимосвязи между киберпреступниками

Специалисты ИБ-компании CrowdStrike, отслеживающие деятельность множества преступных групп, проанализировали их бизнес-модели и партнерские взаимоотношения. Результаты проведенной работы показали, что экосистема киберкриминала на самом деле не столь велика, как может показаться стороннему наблюдателю, однако за последние годы она обросла обширной сетью сервисов, облегчающих задачу злоумышленникам.



from Новости информационной безопасности - Anti-Malware.ru https://ift.tt/2P4efab
via https://ifttt.com/ IFTTT

Microsoft Releases Open Source Resources for Solorigate Threat Hunting

Microsoft on Thursday announced the open source availability of CodeQL queries that it used during its investigation into the SolarWinds attack.

read more



from SecurityWeek RSS Feed https://ift.tt/2NGbED7
via https://ifttt.com/ IFTTT