GitHub

MalwareBytesSecurity

A week in security (January 16—22)

Categories: News

Tags: Google

Tags: Rust

Tags: Chromium

Tags: Mailchimp

Tags: SweepWizard

Tags: bossware

Tags: TikTok

Tags: surveillance firm

Tags: Voyager Labs

Tags: TracketPacer

Tags: Facebook

Tags: Instagram

Tags: Vice Society

Tags: Liquor Control Board of Ontario

Tags: Zoho ManageEngine

Tags: GitHub

Tags: LastPass

Tags: Git flaw

Tags: ransomware

Tags: credit card fraud

The most interesting security related news from the week of January 16-22.

(Read more…)

The post A week in security (January 16—22) appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

A week in security (January 9—15)

Categories: News

Tags: AWIS

Tags: weekly blog roundup

Tags: week in security

Tags: Slack

Tags: GitHub

Tags: Magecart

Tags: Microsoft

Tags: Pokemon NFT

Tags: Facebook

Tags: Instagram

Tags: Snapchat

Tags: TikTok

Tags: YouTube

Tags: Google

Tags: Meta

Tags: identity theft

Tags: Maternal & Family Health Services

Tags: 2023 predictions

Tags: Royal Mail

Tags: K-12 security

Tags: K-12

Tags: WhatsApp

Tags: NSO Group

Tags: Department of Interior

Tags: weak passwords

Tags: Vice Society

Tags: ransomware. Vice Society ransomware

The most interesting security related news from the week of January 9—15.

(Read more…)

The post A week in security (January 9—15) appeared first on Malwarebytes Labs.

Read More
MalwareBytesSecurity

Fake Proof-of-Concepts used to lure security professionals

Categories: Exploits and vulnerabilities

Categories: News

Tags: PoC

Tags: PoCs

Tags: Leiden

Tags: GitHub

Tags: VirusTotal

Tags: AbuseIPDB

Researchers from Leiden University analyzed many thousands of Proof-of-Concepts and found that 10 percent of those they found on GitHub are malicious

(Read more…)

The post Fake Proof-of-Concepts used to lure security professionals appeared first on Malwarebytes Labs.

Read More
IndependentKrebs

Fighting Fake EDRs With ‘Credit Ratings’ for Police

Credit to Author: BrianKrebs| Date: Wed, 27 Apr 2022 14:27:35 +0000

When KrebsOnSecurity last month explored how cybercriminals were using hacked email accounts at police departments worldwide to obtain warrantless Emergency Data Requests (EDRs) from social media and technology providers, many security experts called it a fundamentally unfixable problem. But don’t tell that to Matt Donahue, a former FBI agent who recently quit the agency to launch a startup that aims to help tech companies do a better job screening out phony law enforcement data requests — in part by assigning trustworthiness or “credit ratings” to law enforcement authorities worldwide.

Read More