A lack of authentication in Apple’s Device Enrollment Program could allow attackers to scoop up Wi-Fi passwords and VPN configurations. Go to Source

Hackers see green field opportunities in vulnerable software supply chains. Go to Source

Seven new modules discovered in VPNFilter further fill in the blanks about how the malware operates and reveals a wider breath of capabilities. Go to Source

The tech giant promised that it will be more transparent about users’ data in Chrome 70 after coming under fire for its privacy policies earlier this week. Go to Source

Online ad industry moves away from once prolific ads that are now deemed insecure because of DOM-based XSS vulnerabilities. Go to Source

A data breach targeting women’s apparel giant SHEIN occurred between June and August 2018. Go to Source

Malicious apps can trivially thwart Mojave 10.14’s new privacy protections. Go to Source

A recent cryptomining campaign shows criminal ingenuity. Go to Source

The spam campaign mostly targets victims in Turkey and Germany. Go to Source

Chrome users are now automatically signed into the browser if they’re signed into any other Google service, such as Gmail. Go to Source