A selection of this week’s more interesting vulnerability disclosures and cyber security news. I’m all for raising the awareness of the risk of IoT vulnerabilities however this new idea by McAfee leaves me wondering if users will be left with a false sense of security. It will have to be rock solid and from experience in the IT industry over the last couple of decades has been proved wrong so many times:
A new and interesting attack vector. Considering how prevalent this subsystem is they could score well:
More data exposed, from who knows where…
- Russian computer hackers in Colorado sold stolen credit card numbers for $3.6 million Kirk Mitchell reports
- UK: Hackers break into school’s CCTV system and stream footage of pupils live on the internet James Tozer reports
- ‘Critical’ T-Mobile Bug Allowed Hackers To Hijack User’s Accounts Lorenzo Franceschi-Bicchierai reports
- Adobe Flash Vulnerability Reappears in Malicious Word Files CVE-2018-4878, a Flash zero-day patched earlier this month, has resurfaced in another campaign as attackers capitalize on the bug.