Security
Hackers are using QR codes to steal your login info – and it’s working
Cybercriminals have found a new way to steal login credentials, and it only takes one quick scan of a QR code. The US and Europe are among the targeted regions.
Read more about Hackers are using QR codes to steal your login info – and it’s working
Startup aims to end phishing: what’s behind bold claims?
Hackers can steal your password. They can lure you into granting them access by entering a one-time code received by SMS or other means. But what if a little code runs tied to your device and updates cryptographic keys on every interaction?
Read more about Startup aims to end phishing: what’s behind bold claims?
Devastating security failure hits “Gay Daddy” dating app: 50K users exposed
Check the app’s code, and you’ll find hardcoded credentials. Probe the endpoints, and you'll find that no authorization is required. The result? Over 124,000 messages from “Gay Daddy: 40+ Date & Chat” users laid bare.
Read more about Devastating security failure hits “Gay Daddy” dating app: 50K users exposed
Massive 2.9B-user Twitter leak less serious than feared
Hackers on the illicit marketplace Breach Forums have disseminated a massive dataset allegedly containing 2.9 billion Twitter (X) user records. Although most of the data in a “leak” is public, cybercriminals can still find many uses for it.
Read more about Massive 2.9B-user Twitter leak less serious than feared
Malicious IPs suddenly started scanning PAN-OS firewalls
Researchers are tracking a significant surge in login scanning activity targeting Palo Alto Networks (PAN) firewalls. Network defenders are advised to check for signs of compromise.
Read more about Malicious IPs suddenly started scanning PAN-OS firewalls
April Fools’ Day: Belgium introduces ‘mandatory cyber driving license’
Mandatory cyber driving license required to access the internet.
Read more about April Fools’ Day: Belgium introduces ‘mandatory cyber driving license’
New naming convention for threat actors unveiled: they're sh*ts
The cybersecurity community wants to radically overhaul how the malicious threat actors are named. Calling them various types of “shits” is supposed to strip away the perceived glamour of cybercriminal life and deter youth crime.
Read more about New naming convention for threat actors unveiled: they're sh*ts
Microsoft prompts AI to look for flaws in bootloaders, finds twenty
Widely used open-source bootloaders, including GRUB2 for Linux, U-boot, and Barebox, are affected by dangerous flaws that enable attackers to run arbitrary code and take over systems. Microsoft said it used AI to unveil the flaws, saving a week’s worth of time.
Read more about Microsoft prompts AI to look for flaws in bootloaders, finds twenty
Gig platform app Yoojo leaks millions of user files
The service marketplace platform Yoojo has exposed over 14 million files, including passports and communication screenshots.
Read more about Gig platform app Yoojo leaks millions of user files
Royal Mail customer data stolen in massive attack, hackers claim
Attackers say they breached the British postal service last month, scooping a whopping 144 gigabytes of data, including confidential documents and customer names and addresses.
Read more about Royal Mail customer data stolen in massive attack, hackers claim
Moscow Metro targeted in likely retaliatory cyberattack
The Moscow subway’s website and mobile app experienced disruptions on Monday, with many users saying that they couldn’t access their personal accounts a day later. A likely retaliatory cyberattack is suspected after Russian-aligned threat actors hacked Ukrainian Railways.
Read more about Moscow Metro targeted in likely retaliatory cyberattack
Researchers are warning Android users about Crocodilus banking Trojan
New Android malware uses advanced techniques for device takeover and data theft.
Read more about Researchers are warning Android users about Crocodilus banking Trojan
Hackers broke Google’s AI. Here’s how they did it
Hackers cracked Google’s AI and got rewarded.
Read more about Hackers broke Google’s AI. Here’s how they did it
65% of the 100 largest US hospitals and health systems have had a recent data breach
Cybernews research team analyzed the 100 largest US hospitals and health systems websites and evaluated their cybersecurity posture.
Read more about 65% of the 100 largest US hospitals and health systems have had a recent data breach
A fake Zoom app is spreading – and it’s harvesting your data
A fake Zoom installer is making the rounds, luring unsuspecting users into downloading malware which quietly takes over their systems.
Read more about A fake Zoom app is spreading – and it’s harvesting your data
Was Check Point hacked? Security firm calls ransom demands old news
Hackers claim they’ve obtained a “sensitive dataset” from the Tel Aviv-based cybersecurity company Check Point Software. They want over $400,000 for what the firm calls an “old, known, and very pinpointed event.”
Read more about Was Check Point hacked? Security firm calls ransom demands old news
FBI investigates cyberattack at Oracle, patient records breached
The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle as the hackers broke into the cloud computing company's computer systems and stole patient data, Bloomberg News reported on Friday, citing a person familiar with the matter.
Read more about FBI investigates cyberattack at Oracle, patient records breached
Thousands of Australians just got their IDs and bank details exposed
Australia’s largest online marketplace for car loans has exposed thousands of driver's licenses and partial credit card details.
Read more about Thousands of Australians just got their IDs and bank details exposed
Browser-native ransomware may be the next billion-dollar threat
We might soon see a large-scale ransomware campaign without hackers even touching a device, a report warns.
Read more about Browser-native ransomware may be the next billion-dollar threat
If someone who sounds like Cristiano Ronaldo calls you, hang up
Cybercriminals are using artificial intelligence (AI) to clone the voices of these famous basketball players, football players, and other sportspeople.
Read more about If someone who sounds like Cristiano Ronaldo calls you, hang up
