cyberwire

Active XSS attacks exploiting vulnerable Wordpress plugin, Sofacy aka Fancy Bear using new Cannon Trojan and the Emotet returns with new phishing tricks on episode 168 of our daily podcast.

Interview with security researcher at Pen Test Partners, Ken Munro, on the firm’s recent discovery of dangerous vulnerabilities in MiSafes GPS enabled child tracking smartwatches.

Twitter says third-party app used in Bitcoin scams, Instagram flaw leaked plain text passwords and over 6,500 Dark Web sites deleted in hosting provider hack on episode 166 of our daily podcast.

Kids miSafes watch vulnerabilities put children at risk, Firefox to display a warning on sites with data breaches and Japan’s cybersecurity minister says he’s never used a computer on episode 165 of our daily podcast.

More Spectre and Meltdown attacks discovered, new US cybersecurity agency bill moves forward and Google and Target Twitter accounts hijacked for Bitcoin scam on the Latest Hacking News Podcast.

A look at seven of the MageCart groups and November’s Microsoft Patch Tuesday update on episode 163 of our daily podcast.

New nation-state backed group targets Pakistan military, the Paris cybercrime agreement and a Trojan found on Google Play was available for nearly a year on episode 162 of our daily podcast.

Ruby impacted by deserialization issues, Steam bug awards researcher $20,000 bounty and 5th guilty plea in international cell phone fraud case on episode 161 of our daily podcast.

Pentagon begins uploading APT malware samples to VirusTotal, Lazarus Group’s FastCash malware tool uncovered and man pleads guilty to DDoS attacks on gaming companies on episode 160 of our daily podcast.

New GPU side-channel attacks, new initiative looks to place military veterans in cybersecurity roles and Evernote for Windows XSS flaw on episode 159 of our daily podcast.