The first stop for security news | Threatpost

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

By Nate Nelson — August 29^th 2022 at 14:56

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.

The first stop for security news | Threatpost

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

By Nate Nelson — August 25^th 2022 at 18:47

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed.

The first stop for security news | Threatpost

Twitter Whistleblower Complaint: The TL;DR Version

By Threatpost — August 24^th 2022 at 14:17

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk.

The first stop for security news | Threatpost

Facebook’s In-app Browser on iOS Tracks ‘Anything You Do on Any Website’

By Threatpost — August 12^th 2022 at 13:24

Researcher shows how Instagram and Facebook’s use of an in-app browser within both its iOS apps can track interactions with external websites.

The first stop for security news | Threatpost

Authentication Risks Discovered in Okta Platform

By Nate Nelson — July 19^th 2022 at 15:33

Four newly discovered attack paths could lead to PII exposure, account takeover, even organizational data destruction.

The first stop for security news | Threatpost

Human Error Blamed for Leak of 1 Billion Records of Chinese Citizens

By Elizabeth Montalbano — July 6^th 2022 at 10:33

A developer appears to have divulged credentials to a police database on a popular developer forum, leading to a breach and subsequent bid to sell 23 terabytes of personal data on the dark web.

The first stop for security news | Threatpost

Leaky Access Tokens Exposed Amazon Photos of Users

By Nate Nelson — June 29^th 2022 at 20:18

Hackers with Amazon users’ authentication tokens could’ve stolen or encrypted personal photos and documents.