SecurityWeek

Authorities in Maryland have issued an advisory about an apparent email phishing scam targeting firearms dealers in the state.Maryland State Police said it was issued after the Maryland State Police Licensing Division was notified Tuesday about emails received by at least two firearms dealers.

With $4 million in seed funding, Adaptive Shield this week emerged from stealth mode to automate the security of software-as-a-service (SaaS) applications.The Tel Aviv, Israel-based startup seeks to tackle the issue of incorrect configuration of SaaS applications, which can expose them to cyberattacks, data leaks, and other risks.

Check Point security researchers have identified a series of vulnerabilities that potentially opened the gate for a variety of attacks targeting Alexa, Amazon’s virtual assistant.

A newly discovered piece of malware designed to target macOS systems spreads through Xcode projects and exploits what researchers have described as two zero-day vulnerabilities.

Facebook on Thursday launched its voting information center as internet platforms unveiled fresh moves to protect the November US election from manipulation and interference.The hub was described as central to defending against deception and confusion in what promises to be an election roiled by the pandemic and efforts to dupe voters.

Windows Defender has caused problems for some Citrix customers after deleting two services incorrectly detected as malware.

Since the beginning of 2020, the North Korea-linked threat group known as Lazarus has successfully compromised dozens of organizations in Israel and other countries by targeting their employees with appealing job offers, UK-based cybersecurity firm ClearSky reported this week.

A previously misfiring smartphone app to help track transmission of the coronavirus will be trialled again in parts of England following two months of troubleshooting, the government said on Thursday.

The United States on Thursday published information on Drovorub, a previously undisclosed piece of malware that Russia-linked cyber-spies are using in attacks targeting Linux systems.

Google announced on Wednesday that it’s preparing to run an experiment in Chrome 86 as part of its fight against URL spoofing.

A Chinese threat actor tracked by Kaspersky as CactusPete was observed leveraging an updated backdoor in recent attacks targeting military and financial organizations in Eastern Europe.

Group-IB security researchers have identified an advanced persistent threat group that has launched at least 26 targeted attacks since 2018.

There Are Times When a Given Plan May No Longer be Appropriate or Effective

A potentially serious cross-site scripting (XSS) vulnerability affecting the TinyMCE rich text editor can be exploited — depending on the implementation — for privilege escalation, obtaining information, or account takeover.

FireEye this week announced that its Bugcrowd-powered bug bounty program has become public, for all registered researchers to participate.

Microsoft failed to properly address an elevation of privilege vulnerability in the Windows Local Security Authority Subsystem Service (LSASS), the Google Project Zero researcher who discovered the issue says.

Secure Access Service Edge (SASE) and Network-as-a-Service (NaaS) solutions provider Perimeter 81 has closed a $40 million Series B funding round that brings the total raised by the company to $65 million.

The Israeli defence ministry said on Wednesday that it had foiled an attempted cyber attack by a foreign group targeting the country's defence manufacturers.

SecurityWeek will host its 2020 Cloud Security Summit virtual event on Thursday, August 13, 2020.

Hackers have breached Michigan State University’s online store, gaining access to customer credit card numbers and other personal information, the university said.