Security
Headlines
HeadlinesLatestCVEs

Source

Malwarebytes

Okta breach happened after employee logged into personal Google account

Okta has concluded that the root cause of its breach was an employee storing company credentials in a private Google account.

Malwarebytes
#web#google#git#auth#chrome
Medical research data Advarra stolen after SIM swap

Medical research company Advarra reportedly had data stolen after a SIM swap incident on one of their employees.

Defeating Little Brother requires a new outlook on privacy: Lock and Code S04E23

This week on the Lock and Code podcast, we speak with Anna Brading and Mark Stockley from Malwarebytes about the apparent "appeal" of Little Brother surveillance, whether the tenets of privacy can ever fully defeat that surveillance, and what the possible merits of this surveillance could be.

A week in security (October 30 – November 5)

A list of topics we covered in the week of October 30 to November 5 of 2023

Apache ActiveMQ vulnerability used in ransomware attacks

A remote code execution vulnerability in Apache ActiveMQ is being used by the HelloKItty ransomware group.

YouTube launches “global effort” to block ad blockers

The ongoing struggle between YouTube and ad blockers is turning ugly. Users are left with the choice between paying for Premium or watching ads.

Should you allow your browser to remember your passwords?

It’s very convenient to store your passwords in your browser. But is it a good idea?

Atlassian: “Take immediate action” to patch your Confluence Data Center and Server instances

Atlassian has released an advisory about a critical severity authentication vulnerability in the Confluence Server and Data Center.

What Gen Z really cares about when it comes to privacy

It would be easy to think that Gen Z doesn’t care about privacy. It's not that, though, they just care about privacy in a different way to older generations.

SolarWinds and its CISO accused of misleading investors before major cyberattack

The SEC has announced charges against SolarWinds and its CISO for fraud and internal control failures related to the company's cybersecurity.