WPForms bug allows Stripe refunds on millions of WordPress sites
A vulnerability in WPForms, a WordPress plugin used in over 6 million websites, could allow subscriber-level users to issue arbitrary…
Why Phishers Love New TLDs Like .shop, .top and .xyz
Phishing attacks increased nearly 40 percent in the year ending August 2024, with much of that growth concentrated at a…
DocuSign’s Envelopes API abused to send realistic fake invoices
Threat actors are abusing DocuSign's Envelopes API to create and mass-distribute fake invoices that appear genuine, impersonating well-known brands like…
LastPass warns of fake support centers trying to steal customer data
LastPass is warning about an ongoing campaign where scammers are writing reviews for its Chrome extension to promote a fake…
New FIDO proposal lets you securely move passkeys across platforms
The Fast IDentity Online (FIDO) Alliance has published a working draft of a new specification that aims to enable the…
Top Tips and Risks Ahead of the 2024 Olympic Games
As buzz and excitement continues to build around the upcoming 2024 Summer Olympics, it is important to be aware of the…
Tech Giants Agree to Standardize AI Security
The Coalition for Secure AI is a consortium of influential AI companies aiming to develop tools to secure AI applications…
Authenticator for X, TikTok Exposes Personal User Info for 18 Months
With many popular apps, users must hand over personal information to prove their identity, and the big downside is they…
FTC Issues $5.6M in Refunds to Customers After Ring Privacy Settlement
The refunds will be made to individual affected customers through thousands of PayPal payments, available to be redeemed for a…
Ring customers get $5.6 million in privacy breach settlement
The Federal Trade Commission is sending $5.6 million in refunds to Ring users whose private video feeds were accessed without…