News

Apple fixes bug that allows nearby hackers to render iPads and iPhones unusable. Apple fixed a bug in its file-swapping feature AirDrop, Tuesday, which allows nearby hackers to render iPhones and iPads inoperable. The bug opens the door for a type of denial-of-service attack, allowing an attacker to infinitely spam all nearby iPhones and iPads with AirDrop share popup notifications, according to the researcher who found it. Source: Threat Post

As the craze for the latest Off-White, Nike, and Adidas sneakers heats up, sites selling counterfeit kicks have popped up to capitalize on sneakerheads searching for the best deal. To make a bad deal even worse, hackers are now targeting these sites to install malicious Magecart scripts that also steal your credit card information. When shoppers purchase sneakers off of counterfeit sites, they will find that they didn't get the sneakers they were expecting, and...

Google yesterday announced that its latest Chrome release adds real-time phishing alerts and password breach warning capabilities to the browser. The real-time anti-phishing capabilities represents an upgrade to Google’s Safe Browsing service, which compiles an ever-changing blacklist of dangerous websites that browsers can check against. Source: SC Magazine

Pensacola officials confirmed that an ongoing cyberattack that began early Saturday morning is a ransomware attack. While the city did not release any additional details, the Pensacola News Journal said city spokeswoman Kaycee Lagarde confirmed the attack included a ransom, something that Mayor Grover Robinson initially declined to discuss. Source: SC Magazine

Woolworths customers have had their rewards cards hacked and their points stolen just two weeks before Christmas. The Australian supermarket giant confirmed on Wednesday that Woolworths Rewards members had reported hundreds of dollars worth of points as stolen.  Disgruntled customers took to the company's social media pages to voice their concerns over the credit taken from their accounts. Source: Daily Mail

Researchers found three broad types of vulnerabilities, one of which should be particularly concerning to consumers. Amazon's popular Blink home security cameras come packed with more than most consumers bargain for, including a variety of attack vectors that could allow criminals to hijack cameras and Blink accounts. Source: Dark Reading

A Florida family has shared footage of the moment their Ring security system was accessed without permission and used to spew racial slurs last weekend. The incident occurred on Sunday in Cape Coral, with the culprit forcing a loud alarm to blare throughout the home before verbally taunting two parents, NBC-2 reported. The hacker, who sounds young, makes references to their son despite him not appearing in the frame. Source: News Week

Google is upping its efforts to safeguard users against phishing scams with a new real-time alert system. In a blog post on Tuesday, Google said it will expand on its current system that checks a reference list of flagged sites against URL's the a users has visited once every 30 minutes. According to the tech giant, while the standard has worked to mitigate many phishing scams, which involve using phony web pages and online forms to hoover users'...

The key, only one-third the length of most commercial encryption keys, took more than 35 million compute hours to break. How safe is "safe"? That's the question at the heart of research into breaking encryption keys — research that has led a team in France to the most complex encryption algorithm to date. At 240 characters long, the new record bests the old decryption record by 8 characters, though it still falls far short of...

Researchers discovered a new Snatch ransomware strain that will reboot computers it infects into Safe Mode to disable any resident security solutions and immediately starts encrypting files once the system loads. Encrypting the victim's files is possible because most security tools are automatically disabled when Windows devices boot in Safe Mode as the Sophos Managed Threat Response (MTR) team and SophosLabs researchers found. Source: Bleeping Computer