Data on Indian Mobile Payments App Reportedly Exposed via Open S3 Bucket
Over 7 million records exposed, according to vpnMentor, but app maker says there is no sign of malicious use.
Read moreCyber Security
Umbrella with SecureX built-in: Coordinated Protection
Cisco SecureX connects the breadth of Cisco’s integrated security portfolio – including Umbrella– and your other security tools for a consistent experience that unifies visibility, enables automation, and strengthens your security across network, endpoints, cloud, and applications.
The post Umbrella with SecureX built-in: Coordinated Protection appeared first on Cisco Blogs.
Read moreApple Pays Researcher $100,000 for Critical Vulnerability
Apple has fixed a flaw in the “Sign in with Apple” feature that could have enabled attackers to break into user accounts for third-party services.
Read moreWhite House says security incidents at US federal agencies went down in 2019
US federal agencies reported 28,581 cyber-security incidents in 2019, down by 8% from 31,107 in 2018.
Read more26 IoT Flaws Enable Denial-of-Service Attacks, Privilege Escalation
Research details vulnerabilities in the Zephyr Real Time Operating Systems and MCUboot, both used in IoT devices and sensors.
Read moreAfter a breach, users rarely change their passwords, study finds
Only a third of users changed their password following a data breach.
Read moreRare NSA Advisory About Russia-Based Cyberattacks Unlikely to Stop Them
The Sandworm group — behind disinformation and election-hacking campaigns and responsible for a 2016 power outage in the Ukraine — is now targeting e-mail servers.
Read moreApple Pays $100K Bounty for Critical ‘Sign in With Apple’ Flaw
Apple has fixed a critical flaw in its Sign in with Apple feature, which could have been abused by attackers to takeover victims’ third-party applications.
Read moreMinneapolis Police Department Hack Likely Fake, Says Researcher
Troy Hunt said that the supposed data breach perpetrated by Anonymous is most likely a hoax.
Read moreNo password required! “Sign in with Apple” account takeover flaw patched
A bug bounty hunter found a way to login using “Sign in with Apple”… but without the part where you have to put in a password.
Read more