Author: admin

Info-stealers take top three spots, says Check Point

CISA is now pushing phishing-resistant multifactor authentication.

Roger Grimes has an excellent post reminding everyone that “phishing-resistant” is not “phishing proof,” and that everyone needs to stop pretending otherwise. His list of different attacks is particularly useful.

In a recent 8-K filing with the SEC, the firm said it reached an agreement with shareholders

The data comes from workforce cyber intelligence and security company Dtex

The dropper hides behind a fake utility app with limited permissions and a small footprint

Man stole 50,000 Bitcoin from notorious dark web marketplace

Some 90% of risk is still uninsured, warns industry giant

Concerns come amid worries over ransomware surge

Between February and July, 81 victim organizations were listed on the groups’ data leak sites

This technique measures device response time to determine distance:

The scientists tested the exploit by modifying an off-the-shelf drone to create a flying scanning device, the Wi-Peep. The robotic aircraft sends several messages to each device as it flies around, establishing the positions of devices in each room. A thief using the drone could find vulnerable areas in a home or office by checking for the absence of security cameras and other signs that a room is monitored or occupied. It could also be used to follow a security guard, or even to help rival hotels spy on each other by gauging the number of rooms in use.

There have been attempts to exploit similar WiFi problems before, but the team says these typically require bulky and costly devices that would give away attempts. Wi-Peep only requires a small drone and about $15 US in equipment that includes two WiFi modules and a voltage regulator. An intruder could quickly scan a building without revealing their presence.

Research paper.