SecurityWeek
WhatsApp Fights Fake News With Message Forwarding Limit
WhatsApp, the popular messaging application that has roughly 1.5 billion users, now only allows messages to be forwarded to a maximum of 5 people in an effort to block attempts to abuse the platform for spreading false information.
Adobe Patches Information Disclosure Flaws in Experience Manager
Updates released on Tuesday by Adobe for its Experience Manager and Experience Manager Forms products address several vulnerabilities that can lead to information disclosure.
Russian Watchdog Launches 'Administrative Proceedings' Against Facebook, Twitter
Russia's media watchdog Roskomnadzor launched "administrative proceedings" Monday against US social media giants Facebook and Twitter, accusing them of not complying with Russian law, news agencies reported.
Mitsubishi Develops Cybersecurity Technology for Cars
Japanese electronics and electrical equipment giant Mitsubishi Electric Corporation on Monday unveiled new technology designed to protect connected vehicles against cyber threats.
VLC Responds to Criticism Over Lack of HTTPS for Updates
The developers of the popular open source video player VLC, which recently surpassed 3 billion downloads, have responded to criticism over the use of HTTP for software updates.
France Hits Google With 50 Million Euro Data Consent Fine
France's data watchdog on Monday announced a fine of 50 million euros ($57 million) for US search giant Google, using the EU's strict General Data Protection Regulation (GDPR) for the first time.
DarkHydrus Hackers Use Google Drive in Recent Attacks
The DarkHydrus threat group has added new functionality to the payloads used in recent attacks and is also leveraging Google Drive for command and control (C&C) purposes, Palo Alto Networks security researchers say.
Websites Can Exploit Browser Extensions to Steal User Data
Web applications can exploit browser extensions to access privileged capabilities and steal sensitive user information, including credentials, a researcher has discovered.
Report: Facebook's Privacy Lapses May Result in Record Fine
Facebook may be facing the biggest fine ever imposed by the U.S. Federal Trade Commission for privacy violations involving the personal information of its 2.2 billion users.
Former Employee Hacks Popular WordPress Plugin’s Website
The website for a popular WordPress plugin was hacked over the weekend, when a former employee abused a previously implemented backdoor to take over the domain.
Flaws in Omron HMI Product Exploitable via Malicious Project Files
Japan-based electronics company Omron has released an update for its CX-Supervisor product to address several vulnerabilities that can be exploited for denial-of-service (DoS) attacks and remote code execution.
DNC: Russian Hackers Attacked Us Again After Midterm Elections
Hackers believed to be associated with the Russian government targeted the US Democratic National Committee (DNC) shortly after the 2018 midterm elections, court documents show.
Bulgaria Extradites Russian Hacker to US: Embassy
Bulgaria has extradited a Russian indicted by a US court for mounting a complex hacking scheme to the United States, the Russian embassy in Washington said Saturday.
Exploit for Recent Flash Zero-Day Added to Fallout Exploit Kit
An updated version of the Fallout exploit kit recently emerged with an exploit for a recent Flash zero-day included in its arsenal, Malwarebytes Labs security researchers warn.
Hackers Actively Scanning for ThinkPHP Vulnerability, Akamai Says
There is widespread scanning for a recently disclosed remote code execution vulnerability in the ThinkPHP framework, Akamai reveals.
Xbash Malware Uninstalls Cloud Security Products
Recent samples of the destructive Xbash Linux malware can uninstall cloud security protection products from infected servers, Palo Alto Networks reports.
Marco Rubio Proposes New Federal Data Privacy Bill
U.S. Senator Marco Rubio (R-Fla.) introduced a bill on Wednesday designed to provide privacy legislation for the entire nation -- that is, federal law. It is based on the Privacy Act of 1974, which was introduced post-Watergate to protect people from government storage and retrieval of personal data.
Barracuda Adds Incident Response to Email Security Offering
Barracuda Networks this week announced automated incident response capabilities are now available for customers using its Total Email Protection solution.
PCI SSC Releases New Security Standards for Payment Software
The Payment Card Industry Security Standards Council (PCI SSC) this week announced new security standards for the design, development and maintenance of payment software.