Aggregator

Ken Palla on Lessons From U.K and Australia to Reduce Fraud and Scams
The U.S. Consumer Financial Protection Bureau's decision to file a lawsuit against Zelle is too late and too narrow to reduce scams, said Ken Palla, retired director with MUFG Bank. CFPB last month sued the operator of Zelle, as well as three banks for failing to protect consumers from fraud.

Developers Listed as Public Contact Points Targeted in Phishing Campaign
A supply chain attack that subverted legitimate Google Chrome browser extensions to inject data-stealing malware is more widespread than security researchers first suspected. So far researchers have identified 36 subverted extensions collectively used by 2.6 million people.

Integrity Technology Group Built Botnet for Chinese Hackers, US Treasury Says
The Department of Treasury blacklisted Integrity Technology Group, declaring transactions with the company to be off-limits for U.S. financial institutions and persons. The effect will likely have more symbolic than actual disruptive effect.

We want to wish you a Happy New Year! 

The post Looking into 2025: Reflections & Observations from the Tidal Cyber Founders appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Time Capsule Instructions’ appeared first on Security Boulevard.

The proposed settlement would amount to roughly $20 per Apple product that has Siri enabled, for each plaintiff.

Omnisci3nt: Unveiling the Hidden Layers of the Web – A Comprehensive Web Reconnaissance Tool

Want to Learn More?Get the full guide! Download our whitepaper, Unlock Proactive Cybersecurit

Welcome to the Security Weekly Podcast Network, your all-in-one so

A vulnerability was found in Apple Safari up to 5.1.7 and classified as very critical. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2012-3605. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Apple iTunes 10.6.3. Affected is an unknown function of the component WebKit. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2012-3604. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple iOS up to 5.1.1. It has been classified as critical. Affected is an unknown function of the component WebKit. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2012-3604. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple Safari up to 5.1.7 and classified as very critical. Affected by this vulnerability is an unknown functionality of the component WebKit. The manipulation leads to memory corruption. This vulnerability is known as CVE-2012-3604. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple Apple Remote Desktop up to 3.5.2 and classified as problematic. This vulnerability affects unknown code of the component Remote Desktop. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2012-0681. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in SugarCRM CE up to 6.3.1. Affected by this vulnerability is the function unserialize. The manipulation leads to improper input validation. This vulnerability is known as CVE-2012-0694. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in IBM WebSphere Application Server up to 7.0.0.14. This issue affects some unknown processing. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2012-0717. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.