CCTV Installations

A known vulnerability combined with a weakness in bare-metal server reclamation opens the door to powerful, high-impact attacks. from Threatpost | The first stop for security news https://threatpost.com/cloudborne-iaas-attack-cloud/142223/ via CCTV Installers

SHAREit has fixed two flaws in its app that allow bad actors to authenticate their devices and steal files from a victim's device. from Threatpost | The first stop for security news https://threatpost.com/shareit-flaws-files/142200/ via CCTV Installers

The spam campaign is being used to spread a malicious .exe file, taking advantage of a vulnerability in WinRAR which was patched in January. from Threatpost | The first stop for security news https://threatpost.com/critical-winrar-flaw-found-actively-being-exploited/142204/ via CCTV Installers

How features such as infotainment and driver-assist can give others a leg up on car owners. from Threatpost | The first stop for security news https://threatpost.com/modern-car-warning/142190/ via CCTV Installers

A Threatpost reader poll examined risk, vulnerabilities, 2FA, the human element, attitudes on spreadsheets and more when it comes to password managers. from Threatpost | The first stop for security news https://threatpost.com/password-managers-risk-poll/142183/ via CCTV Installers

The attack threatens users with location-tracking, DoS, fake notifications and more. from Threatpost | The first stop for security news https://threatpost.com/torpedo-privacy-4g-5g/142174/ via CCTV Installers

Google has announced FIDO2 certification for devices running on Android 7 and above - meaning that users can use biometrics, fingerprint login or PINs instead of passwords. from Threatpost | The first stop for security news https://threatpost.com/google-ditches-passwords-in-latest-android-devices/142164/ via CCTV Installers

Phishing emails target a bank's users with malware - and make their landing page look more legitimate with fake Google reCAPTCHAs. from Threatpost | The first stop for security news https://threatpost.com/phishing-scam-malware-google-recaptcha/142142/ via CCTV Installers

There was a shocking turn of events in crypto-world. from Threatpost | The first stop for security news https://threatpost.com/reddit-alice-bob-mitm/142145/ via CCTV Installers

Threatpost talks to HackerOne CEO Marten Mickos on the EU's funding of open source bug bounty programs, how a company can start a program, and the next generation of bounty hunters. from Threatpost | The first stop for security news https://threatpost.com/video-hackerone-ceo-on-the-evolving-bug-bounty-landscape/142128/ via CCTV Installers

U.S. and subcontinent consumers were the most affected by this week's exposure revelations. from Threatpost | The first stop for security news https://threatpost.com/data-breaches-pos-malware/142132/ via CCTV Installers

From password manager vulnerabilities to 19-year-old flaws, the Threatpost team broke down this week's biggest news stories. from Threatpost | The first stop for security news https://threatpost.com/threatpost-news-wrap-podcast-for-feb-22/142124/ via CCTV Installers

Weigh in on password managers with our Threatpost poll. from Threatpost | The first stop for security news https://threatpost.com/poll-password-managers-risky/142114/ via CCTV Installers

Premium-access credentials to porn sites are hot in the cyber-underground, as credential-harvesting malware proliferates. from Threatpost | The first stop for security news https://threatpost.com/porn-malware-dark-web/142105/ via CCTV Installers

Adobe has issued yet another patch for a critical vulnerability in its Acrobat Reader - a week after the original fix. from Threatpost | The first stop for security news https://threatpost.com/adobe-re-patches-critical-acrobat-reader-flaw/142098/ via CCTV Installers

Admins should update immediately to fix a remote code-execution vulnerability. from Threatpost | The first stop for security news https://threatpost.com/critical-drupal-rce-flaw/142091/ via CCTV Installers

Users of the popular file-compression tool are urged to immediately update after a serious code-execution flaw was found in WinRAR. from Threatpost | The first stop for security news https://threatpost.com/winrar-flaw-500-million-users/142080/ via CCTV Installers

There are no permission dialogues for apps in certain folders for macOS Mojave, which allows a malicious app to spy on browsing histories.. from Threatpost | The first stop for security news https://threatpost.com/apple-macos-safari-spy/141775/ via CCTV Installers

The affected SICAM 230 process control system is used as an integrated energy system for utility companies, and as a monitoring system for smart-grid applications. from Threatpost | The first stop for security news https://threatpost.com/siemens-critical-remote-code-execution/141768/ via CCTV Installers

Dunkin' Donuts' loyalty program was hit with a credential stuffing attack that targeted names, email addresses, 16-digit DD Perks account numbers and DD Perks QR codes. from Threatpost | The first stop for security news https://threatpost.com/dunkin-credential-stuffing/141754/ via CCTV Installers