An inspired writer and content manager who has been with SensorsTechForum since the project started. A professional with 10+ years of experience in creating engaging content. Focused on user privacy and malware development, she strongly believes in a world where cybersecurity plays a central role. If common sense makes no sense, she will be there to take notes. Those notes may later turn into articles! Follow Milena @Milenyim
CVE-2018-10115 is the identifier of the latest security vulnerability discovered in 7-Zip that affects all the versions of the program prior to 18.05. More about 7-Zip 7-Zip is a free open-source archiver with a high compression ratio. The program is…
A new cryptocurrency miner has been detected infecting servers worldwide. The miner, dubbed MassMiner, is exploiting several known vulnerabilities in its malicious campaigns: An Oracle WebLogic flaw known as CVE-2017-10271 A Windows SMB flaw known as CVE-2017-0143 An Apache Struts…
Two magnetic tapes containing transaction details for 12 million accounts that belong to Australia’s Commonwealth Bank are missing. This incident is perhaps the largest data loss in Australia. Curiously, the incident stayed under the radar for two years – until…
Check Point researchers recently decided to review the Linux kernel, and more specifically they looked into drivers trying to roll their own usage of the mmap() function. CVE-2018-8781 Official Description: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version…
Facebook has been widely accused of being negligent and abusive in terms of the privacy of its users. However, it is not the only social network that has been caught at the crime scene. Apparently, Twitter has recently confirmed to…
Companies such as Netflix, PayPal, DHL, and Amazon are often leveraged in various phishing scams, where cyber crooks exploit their popularity to trick users into sharing personal and financial information. There is barely a user who hasn’t received a crafty…
Security researchers at Kromtech recently came across a MongoDB database that contained the personal details of more than 25,000 users who invested in the Bezop (BEZ) token. The database contained plenty of personal details including full names, home addresses, email…
Security researchers just discovered a new phishing attack that is responsible for the distribution of over 550 million emails since Q1 2018. The campaign was first detected in the beginning of January when it was observed targeting users on a…
The world’s biggest DDoS-for-hire service, Webstresser.org, is now down thanks to a coordinated international operation. The DDoS provider was shut down on Wednesday after a thorough investigation carried out by UK’s National Crime Agency and the Dutch National Police and…
Drupalgeddon continues with one more remote code execution bug has been discovered in content management system. Identified as CVE-2018-7602, the highly critical vulnerability affects Drupal versions 7.x and 8.x. Affected users should immediately upgrade to Drupal v7.59 and 8.5.3. The…
Cryptomining malware has dethroned ransomware as the number one cyber threat, and as such, it is evolving rapidly. That being said, a Python-based Monero miner using stolen NSA exploits and disabling security features has been discovered by security researchers. Related…
Security researchers at AdGuard recently revealed some interesting findings regarding the use of fake ad block extensions. There is evidence that some twenty million Chrome users have been tricked into downloading and installing rogue browser extensions concealed as ad blocking…
New Microsoft statistics reveal that the Windows operating system was continuously targeted by tech-support scams in 2017. More precisely, Microsoft recently reported that it received 153,000 reports from users who were targeted by tech-support scammers via the phone or the…
Not enough users are acquainted with the risks associated with their routers, and there’s a research that proves it. Broadband Genie researchers surveyed 2,205 people across the U.K. whether they had performed any router security hygiene like changing Wi-Fi passwords…
A critical security bug has been discovered in LinkedIn, more specifically in a social button. The exploit of the bug could have led to harvesting of LinkedIn users’ information, including information that wasn’t public. The discovery was made by Jack…
Another critical vulnerability identified as CVE-2018-0112 has been fixed Cisco WebEx videoconferencing software solution. Customers download and use the WebEx client application to attend meetings on Cisco WebEx Centers The bug could be leveraged by attackers to intercept conference call…
The first quarter of 2018 has already passed, and security researchers were able to draw some important conclusions. It appears that during the first three months of this year, ransomware was finally dethroned. The new most prevalent cybersecurity threat is…
strong>Roskomnadzor, Russia’s telecommunications watchdog, banned today over 1.8 million IP addresses belonging to Amazon and Google’s cloud infrastructure. Roskomnadzor Bans More Than 1.8 Million IP Addresses Belonging to Amazon and Google It has been reported that Roskomnadzor, Russian Federal Service…
Intel has just announced several new initiatives that use features specific to the Intel hardware platform to improve security, Arstechnica reported. The first one of these initiatives is Intel Threat Detection Technology (TDT) which is designed to use specific features…
Researchers have discovered a vulnerability residing in the JavaScript SecureRandom() function used for generating random Bitcoin addresses and their corresponding private keys. The flaw makes old Bitcoin addresses generated in the browser or via JS-based wallet application vulnerable to brute-force…
