News
-
The Spine Collector: Man arrested for using fake email addresses to steal hundreds of unpublished manuscripts
For years, “The Spine Collector” has been haunting publishers around the world, attempting to steal manuscripts by famous authors. Read more in my article on the Hot for Security blog. Read More
-
Attack misuses Google Docs comments to spew out “massive wave” of malicious links
Security researchers say they have seen a “massive wave” of hackers exploiting the comment feature in Google Docs to spread malicious content into the inboxes of unsuspecting targeted users. Read more in my article on the Tripwire State of Security blog. Read More
-
Norton 360 Now Comes With a Cryptominer
Norton 360, one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers’ computers. Norton’s parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme — in which the company keeps 15 percent of any currencies mined —…
-
The Feeling of Safety
The internet’s greatest feat? Fundamentally shifting how we live. Once a revelation, it quickly set our long-standing beliefs about how we work, play, and connect into a whole new context. Today, the shifts come fast. Video meetings once felt alien. Now, they’re part of our routine. We’ve gone from setting doctor’s appointments online to actually…
-
Endangered data in online transactions and how to safeguard company information
This blog was written by an independent guest blogger. Online transactions are essential for every modern business. From online shopping to banking, transferring funds, and sending invoices, online transactions ensure utter convenience and efficiency. However, the familiarity of making financial transactions online can make people forget about security and all the dangers that they may…
-
Technical Analysis of CVE-2021-1732
Introduction In February 2021, the company Dbappsecurity discovered a sample in the wild that exploited a zero-day vulnerability on Windows 10 x64. The vulnerability, CVE-2021-1732, is a win32k window object type confusion leading to an OOB (out-of-bounds) write which can be used to create arbitrary memory read and write capabilities within the Windows kernel (local…
-
The Bug Report – December 2021
Your Cybersecurity Comic Relief Why am I here? If you’re reading these words, CONGRATULATIONS! You’ve made it to 2022! And even better, you found your way to ATR’s monthly security digest where we discuss our favorite vulnerabilities of the last 30 days. Feel free to pat yourself on the back, get yourself a nice cup of coffee, tea, LaCroix (you…
-
CIS Benchmarks January 2022 Update
The following CIS Benchmarks have been updated or released for January 2022. We’ve highlighted the major updates below. Each Benchmark includes a full changelog that can be referenced to see all changes made. Read More
-
Welcome McAfee Forward—the Future of Online Protection Today
With digital life-changing so rapidly, it’s time for a new way to protect it. Welcome to McAfee Forward—the future of online protection today. As all that change reshapes how we spend our time online, we believe that one thing remains constant: meaningful protection is a personal right. Your right. That’s how we see it here…
-
US police warn of parking meters with phishing QR codes
Think carefully before rushing to scan the payment QR code stuck on the side of a parking meter – it may well be an attempt by fraudsters to phish your financial information. Read more in my article on the Hot for Security blog. Read More