News

The beautiful game is back on the pitch in the U.K. — and cyberattackers will be looking to take advantage of fans streaming the games. England’s Premier League is returning this week, with millions of soccer fans around the world looking to stream matches using their online video accounts, often to support their team or stay on top of their fantasy league points. Unfortunately, the U.K.’s National Cyber Security Centre (NCSC) is warning on phishing,...

In a series of data breach notifications, IT services giant Cognizant has stated that unencrypted data was most likely accessed and stolen during an April Maze Ransomware attack. Cognizant is one of the largest IT managed services company in the world with close to 300,000 employees and over $15 billion in revenue. As a managed service provider (MSP), Cognizant remotely manages many of its clients to fix issues, install patches, and monitor their security. On April...

  According to the latest figures, more than one in four or some 8.9 million workers have now been furloughed in the UK. It means, among other things, that a staggering amount of email inboxes are going unchecked - becoming a source of anxiety for employees and even gathering potential threats daily. In fact, a study conducted by Censuswide on behalf of KnowBe4 examined the attitudes of the British furloughed workforce regarding anxiety or stress,...

Facebook boss Mark Zuckerberg says users will be able to turn off political adverts on the social network in the run-up to the 2020 US election. In a piece written for USA Today newspaper, he also says he hopes to help four million Americans sign up as new voters. Facebook has faced heavy criticism for allowing adverts from politicians that contain false information. Rival social platform Twitter banned political advertising last October. “For those of...

Plex has patched and mitigated three vulnerabilities affecting Plex Media Server for Windows that could enable attackers to take full control of the underlying system when chained together. Plex Media Server is a desktop app and the backend server for the Plex media streaming service, designed for streaming movies, TV shows, music, and photo collections to over the Internet and on local area networks. The three vulnerabilities tracked CVE-2020-5740, CVE-2020-5741, and CVE-2020-5742 were found by Tenable security researcher Chris Lyne and reported to...

Infosec pros and hackers regularly abuse cloud service providers to conduct reconnaissance and attacks, despite efforts by cloud providers to limit such activity. In a recent research paper titled "Cloud as an Attack Platform", five boffins from Texas Tech University – Moitrayee Chatterjee, Prerit Datta, Faranak Abri, Akbar Siami-Namin, and Keith Jones – describe a series of interviews they conducted with computer security pros attending the Black Hat and DEF CON conferences. Of the 75...

Cosmetics giant Avon is recovering from a mysterious cyber-security incident that took place last week, on June 8, sources have told ZDNet. The company has filed documents with the US Securities Exchange Commission disclosing the incident on June 9, a day after the company first discovered issues with some of its IT infrastructure. The company said the incident "interrupted some systems and partially affected operations." Last week, Avon distributors reported problems accessing the company's backend, where...

A security vulnerability in President Trump’s mobile campaign app exposed Twitter application keys and secrets, Google apps and maps keys and Branch.io keys in the Android APK file, researchers at Website Planet recently discovered. A research team led by Noam Rotem and Ran Locar said the exposed keys and secrets provided access to the app’s Twitter API and other parts of the app. “While the exposed keys allowed access to many parts of the app,...

A new hack allowed researchers to discern sound — including “Let it Be” by the Beatles, and audio from a Donald Trump speech — from lightbulb vibrations. Researchers have discovered a novel way to spy on conversations that are happening in houses from almost a hundred feet away. The hack stems simply from a lightbulb hanging in the home. The hack, dubbed “lamphone,” is performed by analyzing the tiny vibrations of a hanging lightbulb, which...

Norway, Bahrain, and Kuwait are amongst the "most dangerous" for privacy in their deployment of COVID-19 contact tracing apps, as they track their citizens' locations on a live or near real-time basis. These apps adopt an "invasive centralised approach" and pose a "great threat to privacy", according to an Amnesty International study. The group's research, however, does not include countries in Asia or the US. Conducted by Amnesty's Security Lab, the study assessed contact tracing...