Important: BreachAware does not operate under any other brand name and will never provide unauthorised access to compromised credentials. We ask our users to beware of illegitimate websites imitating BreachAware.

Global News Feed

POPULAR CYBERSECURITY PUBLICATIONS
2020-08-13 13:06:00 UTC
ThreatPost
ThreatPost
ReVoLTE Attack Allows Hackers to Listen in on Mobile Calls

Rare attack on cellular protocol exploits an encryption-implementation flaw at base stations to record voice calls.

Hacks Mobile Security Privacy Academic Research Attack Cellular Protocols Encryption GSMA Hackers LTE Matthew Green Mobile ReVoLTE Smartphone Voice Over LTE
2020-08-13 13:00:00 UTC
Dark Reading
Dark Reading
Emotet Return Brings New Tactics & Evasion Techniques

Security researchers tracking Emotet report its reemergence brings new tricks, including new evasion techniques to bypass security tools.

2020-08-13 12:34:00 UTC
ThreatPost
ThreatPost
High-Severity TinyMCE Cross-Site Scripting Flaw Fixed

The cross-site scripting flaw could enable arbitrary code execution, information disclosure - and even account takeover.

Vulnerabilities Web Security App Code Cross Site Scripting CVE-2020-12648 Flaw HTML Javascript Poc Security TinyMCE XSS
2020-08-13 12:33:00 UTC
The Daily Swig
The Daily Swig
TinyMCE suffers big XSS flaw

Inadequate sanitization checks result in web security flaw in HTML text editor

2020-08-13 11:18:00 UTC
The Daily Swig
The Daily Swig
US DoJ to shut down 300 fraudulent websites exploiting coronavirus

Move comes following joint investigation between US and Vietnam

2020-08-13 10:00:00 UTC
ThreatPost
ThreatPost
Amazon Alexa ‘One-Click’ Attack Can Divulge Personal Data

Researchers disclosed flaws in Amazon Alexa that could allow attackers to access personal data and install skills on Echo devices.

IoT Privacy Vulnerabilities Amazon Amazon Alexa Data Privacy Flaw Personal Data Vulnerability
2020-08-12 22:32:00 UTC
HackRead
HackRead
TikTok collected MAC addresses for Android phones against Google’s ToS

By Zara Khan

TikTok also collected unique identifiers and sent them to Byte Dance, its parent company.

This is a post from HackRead.com Read the original post: TikTok collected MAC addresses for Android phones against Google’s ToS

Surveillance Android China Data Google Privacy Security Spying TikTok
2020-08-12 18:26:00 UTC
HackRead
HackRead
SANS InfoSec institute loses 28,000 records in phishing attack

By Waqas

SANS is known for providing high-profile and expensive training on InfoSec and cyber security. Oh, the irony.

This is a post from HackRead.com Read the original post: SANS InfoSec institute loses 28,000 records in phishing attack

Cyber Crime Phishing Scam Breach Cyber Security Data Hacking Infosec Phishing Security
2020-08-12 16:45:00 UTC
Dark Reading
Dark Reading
SANS Security Training Firm Hit with Data Breach

A phishing email allowed an attacker to compromise a SANS employee's email environment, the organization reports.

2020-08-12 16:32:00 UTC
The Daily Swig
The Daily Swig
California Privacy Rights Act: State poised to raise privacy bar with ‘CCPA 2.0’

New law would provide California residents with an expanded set of digital rights

BreachAware Insight

THE LATEST CURATED INTEL FROM OUR RESEARCH CENTRE
BreachAware Podcast

Listen to our podcast, where Andrew, the visionary CEO of BreachAware, sits down with unsung heroes of the cyber security industry. Get ready to uncover the stories and insights of industry trailblazers you might not have heard of before, as they share their experiences, opinions, and insider intel. But beware, it's not all serious talk—expect a healthy dose of humour (and the odd cussing) sprinkled throughout the conversation.

Amazon Music Apple Podcasts Spotify Podcast BreachAware YouTube Channel

Point of View

OUR TAKE ON TRENDING STORIES

Weekly Summary

SPOTLIGHT, VULNERABILITY CHAT & PRIVACY HEADLINES