FTC Imposes 30M Penalties On Amazon Ring, Alexa Privacy Row
Amazon has agreed to pay a fine of $25 million to settle allegations made by the US Federal Trade Commission (FTC) stating that the company…
Month: June 2023
Improving Signal Over 10,000 Bugs
On July 2nd, 2015, HackerOne reached 10,000 valid security vulnerabilities resolved on our platform – that’s 10,000 fewer ways for attackers to exploit users, steal…
How Wazuh Improves IT Hygiene for Cyber Security Resilience
IT hygiene is a security best practice that ensures that digital assets in an organization’s environment are secure and running properly. Good IT hygiene includes…
AI interview: Dan McQuillan, critical computing expert
The ways that artificial intelligence (AI) will impact upon our lives are being determined by governments and corporations, with little input from ordinary people, says…
Threat actors can exfiltrate data from Google Drive without leaving a trace
Google Workspace (formerly G Suite) has a weak spot that can prevent the discovery of data exfiltration from Google Drive by a malicious outsider or…
Malicious PyPI Packages Using Compiled Python Code to Bypass Detection
Jun 01, 2023Ravie LakshmananProgramming / Supply Chain Researchers have discovered a novel attack on the Python Package Index (PyPI) repository that employs compiled Python code…
CIO interview: Adam Warne, CIO, River Island
Experienced retail technologist Adam Warne made an important transition when he became CIO at high street fashion brand River Island in October 2021. “I’ve been…
AvidXchange Data Leak Claimed By 3 Ransomware Groups
AvidXchange, a company allegedly targeted in a ransomware attack, is now facing data leaks orchestrated by several cybercriminal groups. These groups have taken to the…
6 Tools Slated To Come Out Of Black Hat
By Ericka Chickowski Security summer camp is upon us as Black Hat is just a few days away. The infosec community was busy with research…
Hacker Claims StoneX Data Breach, Offers Stolen Data
StoneX, a prominent global financial services firm, has allegedly fallen victim to a cyber attack. The breach, which the threat actor claims occurred on May…
Security Leads Share Bug Bounty Program Tips
Yesterday, I ran an invitational security panel featuring security leads from large and small companies with varying levels of vulnerability disclosure programs. We curated the…
New Cryptomining Malware Delivered Using TeamViewer Accounts
In May 2023, Huntress ThreatOps Center analysts detected a cryptocurrency miner (XMRig) on an endpoint, identified the miner’s associated site and wallet address by locating…