Amazon Sellers Dealing With Increased Hacking And Fraud

May 28th, 2019

Amazon has a problem.

If you're an Amazon shopper, that means you have a problem.

The company recently revealed that more than a hundred sellers using the company's platform were victims of what the company is describing as an "extensive fraud operation.

Chrome Will Offer More Ways To Control Web Tracking

May 27th, 2019

Google announced a pair of important security features of upcoming versions of its Chrome browser at this year's I/O Developer Conference.

Both changes are designed with the same goal in mind:

To give users some additional tools to block or at least mitigate the threat of online tracking.

Some Dell Systems Are At Risk Of New Hacks

May 25th, 2019

Do you use Dell equipment at home or in your office?

If so, then the recent discovery made by independent security researcher Bill Demirkapi should give you pause.

Recently, Mr. Demrikapi discovered a flaw in the company's SupportAssist utility that comes pre-installed on most Dell systems.

Security Is Now A Concern For Open Source Software

May 24th, 2019

This year's Open Source Security and Risk Analysis Report analyzed the anonymized data of more than 1,200 commercial codebases from 2018. According to the report, managing open source risk continues to pose a significant challenge for industry.

The Synopsys Cybersecurity Research Center produces the report, and found that 96 percent of the code bases they analyzed contained open source components.

Stolen Personal And Medical Information Was Found Online

May 23rd, 2019

Jeremiah Fowler, a researcher with Security Discovery recently found an unprotected Elasticsearch databased owned by a company called SkyMed on the internet.  According to his findings the database was configured such that it was open and visible to any browser.

Google Giving More Flexibility To Private Data Removal

May 22nd, 2019

Tech giant Google recently unveiled the next step in its plan to put more power in the hands of users when it comes to their own data.  The most recent change involves the introduction of a new auto-delete feature tied to your Google account.

It will allow you to set your Location History, Web data and App Activity data to auto-delete after a set period of time defined by you.

Scammers Now Use Google Ads To Steal Information

May 21st, 2019

There's a new scam afoot that involves using Google Ads.

We're frankly surprised that it's working, but apparently, it's drawing some unsuspecting customers in. It appears to be an organized campaign.

The unknown scam artists are creating ads with phrases like:

"Amazon.

Email Providers Found To Have Signature Vulnerabilities

May 20th, 2019

A team of security researchers have uncovered a serious flaw in several major email clients you need to be aware of.

The flaw allows hackers to fake verified signatures, which gives their phishing and other email-based attacks the appearance of legitimacy.

Android Wifi Hotspot App Leaks Network Passwords And Information

May 18th, 2019

Do you use an Android App called 'WiFi Finder'?  If so, be advised that your network password has likely been exposed, based on research conducted by Sanyam Jain, of the GDI Foundation.

Jain discovered an unprotected database online associated with the app that contained more than two million network passwords.

Popular Fitness Site Endures A Customer Information Breach 

May 17th, 2019

Do you frequent the website bodybuilding.com?

If so, be advised that the site has been breached.

According to a recent statement by the company behind the site, the breach occurred in February, 2019 and had its origins in a phishing email the company received back in July of 2018.

A detailed account of the incident was published on the company's help center and contained most of the elements we've come to expect when things like this happen:

The company is very sorry that it happened
"Certain" customer/member information may have been compromised
The company has been working with law enforcement and has brought in a third party to assist with the forensic investigation, which is ongoing

The company also stressed that while partial payment account numbers were compromised, no full debit or credit card information was at risk.