Security
Cybersecurity company alarmed by ease of scam creation with Lovable website builder
Lovable is the easiest tool for creating phishing scams out of three AI tools tested, a report claims.
Read more about Cybersecurity company alarmed by ease of scam creation with Lovable website builder
Flaws and breaches plague DNA-testing services DRAFT
Business Digital Index research indicates significant gaps in cybersecurity practices across the DNA testing industry. Most of the top consumer DNA services score a D or less in cybersecurity.
Read more about Flaws and breaches plague DNA-testing services DRAFT
Bank of China and DBS confirms data breach through compromised printing partner
A ransomware attack on a printing vendor has affected DBS and Bank of China – two major banks in Asia. Thousands of customers are exposed.
Read more about Bank of China and DBS confirms data breach through compromised printing partner
WordPress becoming an increasingly interesting target for hackers
In 2024, just under one million WordPress websites were infected with malware, and there were roughly 325,000 to 350,000 infected sites on any given day.
Read more about WordPress becoming an increasingly interesting target for hackers
iOS privacy app can’t keep secrets – and spills user notes with passwords
Before you entrust your private data to any app, ask yourself: who’s really on the other side of the screen? Research reveals that the Apple iOS app used to securely store private data has instead left it accessible to anyone on the internet.
Read more about iOS privacy app can’t keep secrets – and spills user notes with passwords
348 million Discord messages are allegedly up for sale
Hundreds of millions of Discord messages have been scraped and are now for sale on hacker forums. At least, that’s what the seller claims.
Read more about 348 million Discord messages are allegedly up for sale
Microsoft fixes zero-day flaw exploited by cybercrooks to elevate privileges
Microsoft warns that Windows is affected by a zero-day flaw that hackers are exploiting to deploy ransomware. The patch arrives with the latest monthly security update.
Read more about Microsoft fixes zero-day flaw exploited by cybercrooks to elevate privileges
17,000,000 GrubHub passwords and other data exposed, hackers claim
Attackers claim they have their hands on a whopping 70 million lines of GrubHub’s data, including millions of hashed passwords, phone numbers, and email addresses.
Read more about 17,000,000 GrubHub passwords and other data exposed, hackers claim
Bitwarden thinks rhyming passwords are secure
Redditors on the subreddit r/Bitwarden are debating whether passwords or passphrases that rhyme are less secure.
Read more about Bitwarden thinks rhyming passwords are secure
NASCAR massive data breach claimed by Medusa ransomware, over 1TB allegedly stolen
Medusa ransomware has claimed a massive data breach at NASCAR (The National Association for Stock Car Auto Racing). Hackers have released the organization’s internal file structure and 33 screenshots containing sensitive personal details and documents.
Read more about NASCAR massive data breach claimed by Medusa ransomware, over 1TB allegedly stolen
Biometric recognition systems aren't that safe, Europol says
Biometric technology isn’t without risks and has vulnerabilities that can be used for criminal abuse.
Read more about Biometric recognition systems aren't that safe, Europol says
Court orders Belgian ISPs to block illegal sports streams and IPTV platforms
Belgian internet service providers (ISPs) and public DNS resolver operators must block access to more than 130 pirate sports streaming domains and five illegal IPTV platforms.
Read more about Court orders Belgian ISPs to block illegal sports streams and IPTV platforms
US Treasury bank regulators' emails accessed for years in “major" hacking incident
The US Treasury’s Office of the Comptroller of the Currency (OCC) on Tuesday disclosed to Congress that hackers had access to the email accounts of top federal banking regulators and 150,000 staff emails for over a year.
Read more about US Treasury bank regulators' emails accessed for years in “major" hacking incident
Android affected by critical vulnerabilities: hackers can take control without any interaction
Google has patched severe Android vulnerabilities, some of which could allow attackers to gain control of a device without user interaction or execution privileges. Two zero-day vulnerabilities have already been exploited to unlock phones.
Read more about Android affected by critical vulnerabilities: hackers can take control without any interaction
300K vehicles and millions of trips exposed in fleet manager’s data leak
NexOpt, a vehicle tracking service provider, has leaked sensitive real-time and historic travel data.
Read more about 300K vehicles and millions of trips exposed in fleet manager’s data leak
Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers
LFTD Partners Inc., a publicly traded cannabis and psychedelics company, has fallen victim to digital asset theft after converting a substantial portion of its cash into stablecoin.
Read more about Cannabis firm LFTD Partners buys $350K worth of USDC, loses it to hackers
Hackers on WhatsApp can spoof executables as images or other files
WhatsApp has patched a dangerous spoofing issue that enabled attackers to send executables that appeared to receivers like images, PDFs, or other files.
Read more about Hackers on WhatsApp can spoof executables as images or other files
UMMC facing class action lawsuit for enabling cyberstalking campaign
The University of Maryland Medical Center (UMMC) is being sued by former and current employees over a security breach.
Read more about UMMC facing class action lawsuit for enabling cyberstalking campaign
Apple appealing against UK 'back door' order
Apple is appealing against a British government order to create a "back door" to its encrypted cloud storage systems, the Investigatory Powers Tribunal (IPT) confirmed on Monday.
Read more about Apple appealing against UK 'back door' order
Extremely dangerous malware spreading via YouTube: it comes with a password stealer
These RATs are not after crumbs. They're here for your passwords, crypto, and total control of your systems.
Read more about Extremely dangerous malware spreading via YouTube: it comes with a password stealer
