An ongoing phishing campaign is targeting hundreds of businesses to steal their email and browser credentials using a simply – but effective – malware. Go to Source

The music-recognition app that Apple bought for $400 million is removing Facebook Ads, DoubleClick, Facebook Analytics and more. Go to Source

1Password, Dashlane, KeePass and LastPass each downplay what researchers say is a flaw in how the utilities manage memory. Go to Source

GitHub is offering unlimited rewards for critical vulnerabilities – and has added “safe harbor” terms to its bug bounty program. Go to Source

Windows 7 and Windows Server 2008 users are being asked to upgrade their encryption support. Go to Source

Russia-linked actors need just 18 minutes to go from compromise to lateral movement. Go to Source

This is the third update to the prolific GandCrab malware within the past year. Go to Source

The WinPot malware takes its cues from slot machines. Go to Source

Physical security goes hand in hand with cyberdefense. What happens when – as we see all too often – the physical side is overlooked? Go to Source

Researchers warn that the phishing campaign looks “deceptively realistic.” Go to Source