Information scraped from LinkedIn user profiles includes full names, gender, email addresses and phone numbers. For the second time this year, data scraped from the accounts of hundreds of millions of LinkedIn users has been posted for sale on a hacking forum. This haul seems to be even bigger than the one that involved data … More Data for 700 million LinkedIn users up for grabs on hacker forum
Most medical and fitness apps in Google Play have tracking capabilities enabled and their data collection practices aren’t transparent. As many as 88 percent of almost 21,000 mobile health (mHealth) applications that are accessible on the Google Play Store from Australia include code that can access and even share users’ personal data with third parties, … More Most health apps engage in unhealthy data‑harvesting habits
Websites using Fancy Product Designer are susceptible to remote code execution attacks even if the plugin is deactivated. Cybercriminals have been actively exploiting a zero-day vulnerability in Fancy Product Designer, a WordPress plugin used by more than 17,000 websites, according to a blog post by Defiant, which makes Wordfence security plugins for the web publishing platform. Attackers … More Zero‑day in popular WordPress plugin exploited to take over websites
An all-new privacy dashboard and better location, microphone and camera controls are all aimed at curbing apps’ data-slurping habits. With the upcoming official release of Android 12, Google has outlined a range of security and privacy improvements that users can expect to experience once the new version of the mobile operating system is launched. Android’s new iteration … More Android 12 will give you more control over how much data you share with apps
The attack is a reminder of growing cyberthreats to critical infrastructure while also showing why providers of essential services are ripe targets for cybercriminals. While detractors have argued that threats against physical infrastructure are overstated and largely theoretical, the growing list of organizations that have been successfully attacked suggests otherwise. And now the media is full of … More Colonial Pipeline attack: Hacking the physical world
ESET Ireland 