November 2020 – Page 9

The North Face resets passwords after credential stuffing attack

Outdoor retail giant The North Face has reset the passwords of an undisclosed number of customers following a successful credential stuffing attack that took place last month, on October 9th. […]

12 Nov

Luxottica data breach exposes 820K EyeMed, LensCrafters patients

A Luxottica data breach has exposed the personal and protected health information of 829,454 patients at LensCrafters, Target Optical, EyeMed, and other eye care practices. […]

12 Nov

DNS cache poisoning attacks return due to Linux weakness

Researchers from Tsinghua University and the University of California have identified a new method that can be used to conduct DNS cache poisoning attacks. The findings reopen a vulnerability that had been discovered by Kaminsky in 2008 and thought to have been resolved. […]

12 Nov

Google fixes more Chrome zero-days exploited in the wild

Google has released Chrome 86.0.4240.198 for Windows, Mac, and Linux to address two zero-day vulnerabilities exploited in the wild. […]

12 Nov

New tool lets attackers easily create reply-chain phishing emails

A new email tool advertised on a cybercriminal forum provides a stealthier method for carrying out fraud or malware attacks by allowing messages to be injected directly into the victim’s inbox. […]

12 Nov

Animal Jam kids’ virtual world hit by data breach, impacts 46M accounts

The immensely popular children’s online playground Animal Jam has suffered a data breach impacting 46 million accounts. […]

11 Nov

Intel fixes 95 vulnerabilities in November 2020 Platform Update

Intel addressed 95 vulnerabilities as part of the November 2020 Patch Tuesday, including critical ones affecting Intel Wireless Bluetooth products and Intel Active Management Technology (AMT). […]

11 Nov

Alleged source code of Cobalt Strike toolkit shared online

The source code for the widely-used Cobalt Strike post-exploitation toolkit has allegedly been leaked online in a GitHub repository. […]

11 Nov

Microsoft now lets you run multiple Android apps in Windows 10

Microsoft has announced today that Windows 10 customers with devices running the latest Insider build can launch and interact with multiple Android apps directly on their computers’ desktops. […]

11 Nov

Office November security updates fix remote code execution bugs

Microsoft has released the November 2020 Office security updates with a total of 22 updates and 5 cumulative updates for 7 different products, fixing 14 vulnerabilities with five of them potentially enabling remote attackers to execute arbitrary code on vulnerable systems. […]

Month: November 2020

The North Face resets passwords after credential stuffing attack

Luxottica data breach exposes 820K EyeMed, LensCrafters patients

DNS cache poisoning attacks return due to Linux weakness

Google fixes more Chrome zero-days exploited in the wild

New tool lets attackers easily create reply-chain phishing emails

Animal Jam kids’ virtual world hit by data breach, impacts 46M accounts

Intel fixes 95 vulnerabilities in November 2020 Platform Update

Alleged source code of Cobalt Strike toolkit shared online

Microsoft now lets you run multiple Android apps in Windows 10

Office November security updates fix remote code execution bugs