News

Thinking of gifting your kids a smartwatch this holiday season? You might want to check that list again. Smartwatches for children that were purchased on Amazon are vulnerable to hackers, allowing them to track and even communicate with children, according to cybersecurity research firm Rapid7. Source: CBS News

It’s not that uncommon for some people to experience an amount of joy and excitement at the news of websites, databases, and institutions getting hacked. Some people, however, view these incidents as something far removed from them, something that happens to everyone except them. Reality, however, has taken on a frightening turn for owners of Ring security cameras who suddenly find virtual intruders in their homes, thanks to hackers who break into the security system...

A newly discovered phishing campaign is targeting government departments worldwide in what may be an attempt to gain information on government procurement services. Detailed today by security researchers at Anomali Inc., the campaign uses phishing emails specifically customized to target specific departments using information related to bidding and other procurement processes. Links in the emails then take those targeted through to fake sites that likewise have been designed to imitate real sites so attackers can harvest login credentials....

The malware affected 100 different online publishers. A malicious web redirect campaign affecting iPhone users has impacted more than 100 publisher websites, including online newspapers and international weekly news magazines. According to the Media Trust’s Digital Security & Operations (DSO) team, iPhone users visiting any of the impacted websites were redirected in a recent malvertising campaign via a multistage process, to eventually land on a fraudulent popup masquerading as a grocery store reward ad. Along...

Apple fixes bug that allows nearby hackers to render iPads and iPhones unusable. Apple fixed a bug in its file-swapping feature AirDrop, Tuesday, which allows nearby hackers to render iPhones and iPads inoperable. The bug opens the door for a type of denial-of-service attack, allowing an attacker to infinitely spam all nearby iPhones and iPads with AirDrop share popup notifications, according to the researcher who found it. Source: Threat Post

As the craze for the latest Off-White, Nike, and Adidas sneakers heats up, sites selling counterfeit kicks have popped up to capitalize on sneakerheads searching for the best deal. To make a bad deal even worse, hackers are now targeting these sites to install malicious Magecart scripts that also steal your credit card information. When shoppers purchase sneakers off of counterfeit sites, they will find that they didn't get the sneakers they were expecting, and...

Google yesterday announced that its latest Chrome release adds real-time phishing alerts and password breach warning capabilities to the browser. The real-time anti-phishing capabilities represents an upgrade to Google’s Safe Browsing service, which compiles an ever-changing blacklist of dangerous websites that browsers can check against. Source: SC Magazine

Pensacola officials confirmed that an ongoing cyberattack that began early Saturday morning is a ransomware attack. While the city did not release any additional details, the Pensacola News Journal said city spokeswoman Kaycee Lagarde confirmed the attack included a ransom, something that Mayor Grover Robinson initially declined to discuss. Source: SC Magazine

Woolworths customers have had their rewards cards hacked and their points stolen just two weeks before Christmas. The Australian supermarket giant confirmed on Wednesday that Woolworths Rewards members had reported hundreds of dollars worth of points as stolen.  Disgruntled customers took to the company's social media pages to voice their concerns over the credit taken from their accounts. Source: Daily Mail

Researchers found three broad types of vulnerabilities, one of which should be particularly concerning to consumers. Amazon's popular Blink home security cameras come packed with more than most consumers bargain for, including a variety of attack vectors that could allow criminals to hijack cameras and Blink accounts. Source: Dark Reading