Security
AI honeypot hit 800K times and managed to trap six AI-powered hacking agents
A new study highlights the risk of AI-powered hack attacks on the open internet.
Read more about AI honeypot hit 800K times and managed to trap six AI-powered hacking agents
Brace yourself for the 48 hours before election day: Russia, China, and Iran ramping up attacks
Microsoft observes ‘sustained influence efforts’ from state-sponsored actors aimed at corrupting US democratic processes and warns that the last days before elections will be key. Fake videos already garner millions of views in fewer than 24 hours.
Read more about Brace yourself for the 48 hours before election day: Russia, China, and Iran ramping up attacks
Vendors responsible for almost half of breaches in the energy sector, study finds
Critical US energy infrastructure might be unprepared for cyber risks in the current threat landscape, with nearly 1 in 5 companies rated as having poor cybersecurity evaluations, according to a new SecurityScorecard and KPMG study.
Read more about Vendors responsible for almost half of breaches in the energy sector, study finds
Confessions of a company infiltrator: "I was the last person you’d ever suspect"
Put simply, I was an insider threat and the last person you’d ever suspect of criminal mischief. This was my lifestyle.
Read more about Confessions of a company infiltrator: "I was the last person you’d ever suspect"
Users raise alarm bells after Samsung Health makes medical records accessible on the app
Samsung wants users to easily access their medical records. But at what cost?
Read more about Users raise alarm bells after Samsung Health makes medical records accessible on the app
Prove you’re not a robot by running malware: crooks delivering stealers with fake CAPTCHAs
Would you fall for a CAPTCHA that asks you to go and delete the System32 folder? Threat actors are successfully using malicious bot detection prompts to drop the notorious infostealer Lumma.
Read more about Prove you’re not a robot by running malware: crooks delivering stealers with fake CAPTCHAs
Flaw crashes Apple devices with a single click, Tesla also vulnerable
Visit a website, and your Apple device blacks out. Newer iPhones and Macs with M-series processors are affected by a resource exhaustion vulnerability that instantly crashes the system, Imperva researchers have discovered. You’re probably safe, though, as the issue was addressed in an update.
Read more about Flaw crashes Apple devices with a single click, Tesla also vulnerable
SEC hits security companies with massive fines for misdirection over SolarWinds Orion hack
The US Securities and Exchange Commission (US) is charging four cybersecurity companies for providing misleading disclosures related to the SolarWinds Orion hack. Unisys, Avaya, CheckPoint, and Mimecast allegedly failed to inform investors they had also been breached.
Read more about SEC hits security companies with massive fines for misdirection over SolarWinds Orion hack
Massive data leak hits Mexican healthcare sector with over 5 million at risk
Over five million patients in Mexico are at risk following a data leak from the hospital's information systems. The leak was caused by a missing password.
Read more about Massive data leak hits Mexican healthcare sector with over 5 million at risk
Threat actors prepare at least 1,000 new malicious domains ahead of US presidential elections
As the US election approaches, scammers and fraudsters are focusing on targeting voters. FortiGuard Labs researchers have observed phishing kits for sale on the dark web and more than 1,000 new domains incorporating election-related potentially malicious content.
Read more about Threat actors prepare at least 1,000 new malicious domains ahead of US presidential elections
High-risk vulnerability affecting UniFi Network Server
Ubiquiti’s Unifi Network Server, part of the UniFi platform, is currently affected by an 8.8 out of 10 vulnerability, which attackers can exploit to elevate their privileges.
Read more about High-risk vulnerability affecting UniFi Network Server
New macOS vulnerability discovered: get the patch before attackers get access
Microsoft researchers have unveiled a new macOS vulnerability that attackers can exploit to gain unauthorized access to protected data. A patch has been available since September 16th.
Read more about New macOS vulnerability discovered: get the patch before attackers get access
Talos warns of Russian-speaking hackers attacking Ukrainian and Polish companies
A new RomCom malware variant has been attacking targets in Ukraine and Poland. Behind it is a Russian-speaking actor with multiple motivations, including both ransomware and espionage, researchers at Cisco Talos warn.
Read more about Talos warns of Russian-speaking hackers attacking Ukrainian and Polish companies
Sophos warns of growing ‘quishing’ threat
Phishing attacks that leverage QR codes are increasing both in volume and sophistication, cybersecurity experts have warned.
Read more about Sophos warns of growing ‘quishing’ threat
How quickly do hackers exploit vulnerabilities? The answer may disturb you
Google’s Mandiant has sounded the alarm about how quickly cybercriminals start exploiting vulnerabilities. In 70% of cases, it’s a zero-day. For the remainder, cybercriminals create exploits in just five days on average, meaning a large chunk of them are exploited on the disclosure day.
Read more about How quickly do hackers exploit vulnerabilities? The answer may disturb you
One retailer mistake puts several million Europeans at risk
Over 3.5 million people have been affected across Europe after German eyewear company Brillen spilled order details and customer data to anyone on the internet.
Read more about One retailer mistake puts several million Europeans at risk
MacOS bypassing VPNs and leaking traffic after update, report reveals
Security analytics at Mullvad have discovered scenarios when the macOS firewall does not seem to function correctly and disregards rules. Many users seem angry about their settings disappearing after updates.
Read more about MacOS bypassing VPNs and leaking traffic after update, report reveals
Mobile threats rising: 200 malicious Play Store apps just the tip of the iceberg
More than 200 apps on the Google Play Store, downloaded nearly eight million times, turned out to be malicious, the Zscaler ThreatLabz research team has discovered. Yet, this is not the most likely way to get your phone infected.
Read more about Mobile threats rising: 200 malicious Play Store apps just the tip of the iceberg
Cyber onslaught: Microsoft reports 600M attacks a day, urges stricter penalties
Microsoft alone handles 600 million cyberattacks daily, ranging from ransomware to identity theft or phishing. The tech giant says that both cybercriminals and state-sponsored actors are undeterred by consequences when inducing harm.
Read more about Cyber onslaught: Microsoft reports 600M attacks a day, urges stricter penalties
Taiwan visitors exposed in massive hotel booking data leak
Blockchain technology solutions company OwlTing has inadvertently exposed 765,000 users' sensitive data by leaving open access to its AWS storage (S3). The spill mostly affected hotel guests in Taiwan.
Read more about Taiwan visitors exposed in massive hotel booking data leak
