The human factor doesn’t have to be an intangible when assessing cyber risks within a company. Go to Source

There are currently no mitigations for the Firefox attack, a researcher told Threatpost. Go to Source

Up to two billion devices are still vulnerable to the BlueBorne IoT attack – and may not ever get a patch. Go to Source

Cisco has patched vulnerability in its video surveillance manager software that could give an unauthenticated, remote attacker the ability to execute arbitrary commands on targeted systems. Go to Source

The company said it has issued a patch for the issue, which has been ongoing since May 2017. Go to Source

Many different threat actors are using this crypting service/tool for their operations, possibly buying it from the developer itself. Go to Source

Microsoft said that it’s working on a fix for a zero-day flaw in its JET Database Engine. Go to Source

The threat actor’s Android-focused cyber-arms package, dubbed Black Rose Lucy, is limited in reach for now, but clearly has global ambitions. Go to Source

Vulnerability allowed an unauthenticated remote attacker to log in to a device at the time the system initially boots up. Go to Source

The incident, hard on the heels of the British Airways breach, shows that Magecart is quickly evolving and shows no signs of slowing down. Go to Source