OpenSea has had its fair share of security issues in the past year, but this vulnerability affects one of the foundational pillars of web 3.0 — anonymity. Cross-Search Vulnerability According to Imperva, OpenSea did not restrict cross-origin communication, which allowed access to restricted content on its platform. This left the marketplace open to a cross-site search vulnerability that would’ve allowed an attacker to access sensitive information, including users’ email addresses and IPs....

Also: How to use the Opera VPN (and why you should) I know exactly what you’re thinking… bloat. This happened to Firefox some time ago. The developers all of a sudden decided their browser would be a kitchen sink affair by throwing everything at it to see what would stick. That led to the browser being horribly bloated and nearly useless. Fortunately, Mozilla pulled away from that idea and trimmed Firefox back down to its current state....

The study is a monthly pulse study complied from 4,000 respondents in the US. Inflation is impacting vulnerable, stressed, and overextended banking customers the most, the study found. Vulnerable customers are defined as individuals who struggle month to month to meet basic needs such as bill payments. Stressed customers make monthly payments but can’t plan for future finances, and overextended customers have a future plan – like a 401K through their work – but struggle to meet monthly needs....

Non-GAAP net income for the first quarter was $170.3 million, or $1.64 per diluted share. First-quarter revenue grew 32% year-over-year to $1.2 billion. Analysts were expecting earnings of $1.57 per share on revenue of $1.2 billion. “Q1 was a strong start to the fiscal year 2022, driven by strength in both our product and Next-Generation Security businesses, giving us the confidence to raise our revenue and billings guidance for the year,” chairman and CEO Nikesh Arora said in a statement....

The security team pored through hundreds of BEC cases, finding the average wire fraud attempted was $567,000, and the highest was $6 million. Among the hundreds of BEC cases Unit 42 tackled since the beginning of last year, researchers found that 89% of victims failed to turn on multi-factor authentication or follow best practices for its implementation. The FBI often cites BEC as one of the most lucrative cybercrimes, and the law enforcement agency reported last year that it led to $1....

VMware released a patch for two critical remote code execution flaws on May 25. The two bugs, tracked as CVE-2021-21985 and CVE-2021-21986, have a severity rating of 9.8 out of 10 and 6.5 out of 10, respectively. The bugs affect VMware vCenter Server (vCenter Server) and VMware Cloud Foundation (Cloud Foundation). CISA has now warned that it is “aware of the likelihood that cyber-threat actors are attempting to exploit CVE-2021-21985”....

What is Agent Tesla? Agent Tesla is .Net based Windows spyware that is commercially available on the dark web. It is a Remote Access Trojan (RAT) that has been active since at least 2014. Agent Tesla is used to spy on victims by keylogging, as well as stealing clipboard contents, screenshots and credentials. This Trojan is also able to kill malware analysis related processes and antivirus solutions on infected systems. Since 2014, Agent Tesla has undergone many improvements and updates....

Below is a quick roundup of everything we currently know, and what you need to know, about each of the hardware announcements during the opening keynote. Pixel 6a Google’s next mid-range smartphone will be called the Google Pixel 6a. There’s a lot to like about the Pixel 6a, on paper at least. It features the same basic design as the Pixel 6 and 6 Pro that were released in late 2021....

Largest Crypto Heist in History The events leading up to the bug bounty programs will go into hackers history books as the largest cryptocurrency heists ever. On 10 August 2021, unknown perpetrators stole 600 million dollars’ worth of cryptocurrency. They transferred the stolen Ether, Binance Coin and Tether into separate wallets. In an open letter, Poly Networks urged the cybercriminals to return the hacked assets. Surprisingly, they did. Or at least in part....

Given these concerns, we would not recommend that readers use the Popcorn Time app. But for those who must, it’s important that you have the proper security mechanisms in place. Some steps that you can take to ensure your safety are: Popcorn Time has been one of the most popular methods of streaming TV shows and movies online for free. Since it first launched in 2014, it has gained many fans due to its slick interface, vast catalog of TV shows and movies, and virtually zero ads....

Their approach to encryption even prevents ProtonMail itself from reading what it sends and stores for you. There may not be an actual human being spying on you when you use a familiar e-mail client. But there’s a reason why these services are free. E-mail clients are designed to extract keywords from your conversations and use them to choose targeted ads for you. Aside from this, there’s a real danger of more malicious spying....

Conor Company Profile Based in South Africa, Conor is an information and communications technology (ICT) company that develops software products for clients in Africa and South America. They create a range of solutions for businesses in numerous industries, including finance, mobile internet, SMEs, and data monetization. Conor boasts 80 million mobile subscribers to their products, with some high profile clients, including Vodafone and Telkom. Timeline of Discovery and Owner Reaction Sometimes, the extent of a data breach and the owner of the data are obvious, and the issue quickly resolved....

The databases in question had indices named after two Groupe Phosphore brands: Henrri, a free billing and invoicing platform for small and midsize businesses (SMBs); and Rivalis, a professional support network and consultancy firm for business leaders. The leak exposed sensitive data belonging to Groupe Phosphore, their brands, employees, and job applicants. It also exposed data of businesses within the Groupe Phosphore support network and clients using their software in France and Belgium....

The vpnMentor research team, led by Noam Rotem, uncovered the server and found Personally Identifiable Information (PII) data for potentially over 20 million VPN users, according to claims of user numbers made by the VPNs. Each of these VPNs claims that their services are “no-log” VPNs, which means that they don’t record any user activity on their respective apps. However, we found multiple instances of internet activity logs on their shared server....

Proud Makatizen is an official website from the city of Makati, Philippines. It began as an online portal for providing Covid-19 relief services, such as signing up for vaccinations, financial support, and more. The Proud Makatizen data breach totaled 39.7GB and exposed around 300,000 Makati residents to potentially devastating online attacks, like identity theft and privacy violations. Data Breach Summary What is Proud Makatizen? The Proud Makatizen website and service began in April of 2020 while the Covid-19 pandemic was still in its early stages....

Please tell us a little bit about your background and current position at Rohde & Schwarz Cybersecurity. My background is a very technical one. I’ve been in IT security for over 15 years. I was with HP Labs in the UK for ten years working on IT security, networking data center, high-speed networks and so on. About five years ago I joined Rohde & Schwarz Cybersecurity. Recovering from the March 22 cyber-attack has already cost the city of Atlanta $2....

Accessibility: Fire Stick Available content: Overall tie, with a slight advantage for Fire Stick Ease of use: Fire Stick Tech specs: Tie Pricing: Roku If you want to find out why we think Fire Stick is better in most of these categories, as well as when we think Roku might be the right choice for you, read our full comparison below. However, there are slight differences. For example, some streaming apps (such as Vudu) aren’t available on Roku, and the Roku Channel isn’t available on Fire Stick....

But don’t worry, there’s an easy way to get rid of it. Here’s how: Search Encrypt isn’t your classic type of virus. But it definitely acts like annoying malware, much different from those annoying search engine extensions. In this article, we’ll discuss what Search Encrypt is, how it spreads, what it affects, and more importantly, how to get rid of Search Encrypt. What Is Search Encrypt? Search Encrypt claims to be a simple browser extension with a private search engine....

Data Breach Years Old Information about the blackmail became known to Vastaamo towards the end of September, after three Vastaamo employees received a blackmail message from an unknown person. The extortionist demanded 40 bitcoins (over $500,000) in exchange for not releasing stolen patient records. Vastaamo immediately reported the matter to the police. They also notified the Finnish Cyber Security Center, the national agency Valvira and the Data Protection Commissioner. Next, they hired Nixu Cybersecurity to investigate the hack....

Don’t be surprised if somebody makes a huge donation in your name to a fake front organization or takes out a mortgage using your identity. And your problems could just be starting. Once hackers break into your home network, they have access to your laptops, smart security cameras, and other connected devices - including the webcam you use to Zoom or Skype with friends and family. Not only will the hackers easily discover where you live - but they’ll know the age of your children and where they go to school....