ThreatsHub Cybersecurity News

ZDNet | Security

An inside look at how credential stuffing operations work

April 25, 2019 TH Author

Data breaches, custom software, proxies, IoT botnets, and hacking forums –all play a role.
READ MORE HERE…

Packet Storm

NSA Reportedly Recommends Retiring Phone Surveillance Program

April 24, 2019 TH Author headline,government,privacy,usa,phone,spyware,nsa

Security researcher creates new backdoor inspired by leaked NSA malware

April 24, 2019 TH Author

New experimental backdoor highlights an OS section that antivirus products are not looking at.
READ MORE HERE…

The Register

FYI: Yeah, the cops can force your finger onto a suspect’s iPhone to see if it unlocks, says judge

April 24, 2019 TH Author

Unsealed warrant in Massachusetts adds to growing privacy debate Analysis A US judge gave the cops permission to force people’s fingers onto seized iPhones to see who could unlock them, a newly unsealed search warrant has revealed.… READ MORE HERE…

Threatpost

Facebook May Face $5 Billion FTC Fine for Data Misuse

April 24, 2019 TH Author Cambridge Analytica, Data Privacy, data security, earnings report, Facebook, facebook $5 billion, facebook fine, FTC, FTC fine, Government, Privacy

Facebook may be fined as much as $5 billion by the FTC for data issues related to the Cambridge Analytica incident. READ MORE HERE…

The Register

Sophos antivirus tools. Working Windows box. Latest Patch Tuesday fixes. Pick two: ‘Puters knackered by bad combo

April 24, 2019 TH Author

Two weeks and counting, and no sign of a proper solution Unlucky Sophos antivirus users face a dilemma: either uninstall the software, or install April’s Windows security fixes. That’s because having both in place at the same time will bork their machines.… READ MORE HERE…

Networkworld

Cisco: DNSpionage attack adds new tools, morphs tactics

April 24, 2019 TH Author Security

The group behind the Domain Name System attacks known as DNSpionage have upped their dark actions with new tools and malware to focus their attacks and better hide their activities. Cisco Talos security researchers, who discovered DNSpionage in November, this week warned of new exploits and capabilities of the nefarious campaign.
More about DNS:
DNS in the cloud: Why and why not
DNS over HTTPS seeks to make internet use more private
How to protect your infrastructure from DNS cache poisoning
ICANN housecleaning revokes old DNS security key

“The threat actor’s ongoing development of DNSpionage malware shows that the attacker continues to find new ways to avoid detection. DNS tunneling is a popular method of exfiltration for some actors and recent examples of DNSpionage show that we must ensure DNS is monitored as closely as an organization’s normal proxy or weblogs,” Talos wrote. “DNS is essentially the phonebook of the internet, and when it is tampered with, it becomes difficult for anyone to discern whether what they are seeing online is legitimate.”To read this article in full, please click here READ MORE HERE…

Threatpost