Security
Unprotected AI service streams private Slack messages for 30 bucks a month
Struct Chat, a $29.95 per month AI-powered Slack tool, organizes and summarizes threads, answers questions, generates newsletters and exposes its users’ private data and communications.
Read more about Unprotected AI service streams private Slack messages for 30 bucks a month
ENGlobal energy corp says hackers accessed personal data in Nov breach
US-based energy infrastructure solutions company ENGlobal revealed on Tuesday that the attackers who breached the company last November were able to access sensitive personal information from its network servers.
Read more about ENGlobal energy corp says hackers accessed personal data in Nov breach
Daytrip data leak reveals detailed travel data, VIP members
A subcontractor mistake has put the intercity travel platform Daytrip in a hot spot. An exposed database revealed hundreds of thousands of customer records and travel orders.
Read more about Daytrip data leak reveals detailed travel data, VIP members
96% of S&P 500 companies had data breaches – report
Only 6% of S&P 500 companies scored an A for their cybersecurity, a new report by Cybernews shows.
Read more about 96% of S&P 500 companies had data breaches – report
Apple patches actively exploited zero-day affecting iPhones and other devices
Hackers are attacking iPhone users by exploiting a recently discovered security flaw that enables malicious apps to elevate privileges. Apple has released security updates addressing this zero-day among other vulnerabilities.
Read more about Apple patches actively exploited zero-day affecting iPhones and other devices
BASHE ransomware gang claims ICICI bank, leaves three days to pay the ransom
Hackers from the BASHE ransomware gang, also known as APT73, have added ICICI Bank, a major financial institution in India, to their victim site on the dark web and left three days to pay the ransom. The cybersecurity incident is not officially confirmed.
Read more about BASHE ransomware gang claims ICICI bank, leaves three days to pay the ransom
New crypto mining worm linked to global campaign
Tangerine Turkey is a visual basic script (VBS) worm that spreads via USB drives and deploys crypto mining malware to generate cryptocurrency for attackers.
Read more about New crypto mining worm linked to global campaign
Hackers evading email spam filters using hidden text, Cisco Talos alerts
There’s yet another reason to view email messages in plain text format instead of HTML. Hackers are increasingly ‘salting’ scam emails with text invisible to human readers, which deceives security systems.
Read more about Hackers evading email spam filters using hidden text, Cisco Talos alerts
FTC issues warning about dangerous deliveries: free gifts that contain identity theft
The Federal Trade Commission (FTC) has warned Americans about a dangerous new scam: mysterious ‘gifts’ arriving at doorsteps containing malicious QR codes. This makes old brushing schemes more sophisticated.
Read more about FTC issues warning about dangerous deliveries: free gifts that contain identity theft
DoD defense contractor Stark AeroSpace potentially breached by INC ransomware
Stark Aerospace, a US-based missile systems and aerial weapons manufacturer contracted with the US Military and the Department of Defense, has been claimed by the INC ransom group.
Read more about DoD defense contractor Stark AeroSpace potentially breached by INC ransomware
Scammers really like to impersonate Microsoft
If you get a phishing email impersonating a known brand, it will most likely masquerade as Microsoft.
Read more about Scammers really like to impersonate Microsoft
Network security firm SonicWall warns about critical vulnerability affecting its gateways
SonicWall, a network security solutions provider, alerts users about a critical 9.8 out of 10 vulnerability affecting its widely used unified, secure access gateways from the SMA 1000 series. Hackers are already exploiting the flaw.
Read more about Network security firm SonicWall warns about critical vulnerability affecting its gateways
Entire Georgian country population exposed in a massive data leak
A ghost database containing millions of records on Georgian citizens appeared in the cloud and then mysteriously vanished. The concerning leak potentially leaves sensitive personal data vulnerable to malicious actors.
Read more about Entire Georgian country population exposed in a massive data leak
Stealthy Chinese hackers target VPN users via infected installer
China-aligned attackers known for cyber espionage have launched a supply-chain attack targeting IPany VPN.
Read more about Stealthy Chinese hackers target VPN users via infected installer
Where are the Fortinet admins? Nearly 50K devices left unpatched and widely exploited
Nearly 50,000 vulnerable Fortinet devices are still accessible online despite the rushed patch addressing a widely exploited zero-day and security authorities. The critical flaw is an open door, allowing hackers to gain super-admin privileges.
Read more about Where are the Fortinet admins? Nearly 50K devices left unpatched and widely exploited
Companies who pay off ransomware attackers rarely get their data back, survey shows
Less than one fifth of companies who pay a ransom demand to their attackers have successfully been able to retrieve all of their data after the transaction.
Read more about Companies who pay off ransomware attackers rarely get their data back, survey shows
Largest DDoS attacks now torture servers with up to 5.6 Tbps
Cloudflare saw the number of distributed Denial of Service (DDoS) attacks surge by 53% in 2024. One record-breaking DDoS attack peaked at 5.6 Terabits per second (Tbps).
Read more about Largest DDoS attacks now torture servers with up to 5.6 Tbps
Restaurant booking platforms overrun with bots trying to steal data, researchers warn
A new analysis of restaurant booking websites shows that 100% of online reservation platforms lack robust security measures, leaving them and your data at risk to savvy attackers.
Read more about Restaurant booking platforms overrun with bots trying to steal data, researchers warn
New Russian campaign abuses Microsoft Teams to exfil data
Threat researchers have uncovered two new active campaigns abusing the Microsoft Office 365 platform to steal companies’ data and deploy ransomware. The threat actors are connected to Russian cybercriminals.
Read more about New Russian campaign abuses Microsoft Teams to exfil data
New Chinese AI model bites OpenAI, just don’t ask it about Tiananmen and Winnie-the-Pooh
DeepSeek has released a new open-source large language model (LLM) and claims it’s on par with the best from OpenAI. Yet, it won’t answer questions about Tiananmen Square, Tank Man, Winnie-the-Pooh, Taiwan, or even Chinese cyber threat actors.
Read more about New Chinese AI model bites OpenAI, just don’t ask it about Tiananmen and Winnie-the-Pooh
