PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bug Bytes for November 30: Cyber Criminals Never Sleep

bugcrowd.com | blog | #supply-chain | #javascript | #usps | #wannacry | #bug-bytes | #weekly-roundup | #routers
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Weekly roundup: a trojanized JavaScript library stole Bitcoin wallet credentials, a broken USPS API exposed data on 60 million users, and Germany drafted security rules for home routers.
Published
Collected

Related coverage

blog · bugcrowd.com
Bug Bytes for January 11: Device security is top of mind as CES wraps
This week's Bug Bytes: attackers sent false alerts via Australia's early warning network, GPS data for 11,000 Indian buses sat exposed online, and a Skype authentication bypass was patched.
blog · bugcrowd.com
Bug Bytes for January 4: More from Marriott, election security, and the biggest breaches of 2018
The first 2019 Bug Bytes recaps Germany's Linke party hack, malware disrupting LA Times printing, Marriott's 383-million-record breach, and a US election security bill proposing a bug bounty.
blog · bugcrowd.com
Bug Bytes for December 21: Nation State Attacks, Cybersecurity Legislation and Bug Bounty News
This Bug Bytes covers the Cloud Hopper campaign tied to China's Ministry of State Security, the NASA employee data breach, and automated phishing of Google, Yahoo and Protonmail accounts.
blog · bugcrowd.com
Bug Bytes for December 14: Big Bugs, Evidence of Nation-State Threats and the Rise of Ethical Hacking
This Bug Bytes covers the FBI branding Chinese economic espionage the top counterintelligence threat, Marriott's breach tied to Chinese intelligence, and stolen Navy contractor missile plans.
blog · bugcrowd.com
Bug Bytes for December 7: Australia Goes Full Tilt Toward Encryption Bill
Weekly roundup: Australia passes a law compelling tech firms to circumvent encryption, Quora discloses a breach of 100 million user accounts, and DanaBot banking trojan activity expands.
blog · bugcrowd.com
Bug Bytes for November 16: Google Traffic Gone Haywire and New Government Initiatives
Weekly roundup: Google traffic was briefly rerouted through Russia and China, a patched Facebook CSRF bug exposed friend data despite privacy settings, and NSTAC pitched a cybersecurity 'Moonshot'.
Back