Security
Meta’s FIRE pulls thousands of ‘celeb bait’ scam ads off Facebook, Instagram
Meta’s new FIRE scam reporting tool for banks has led to the removal of thousands of celebrity clickbait and other fraudulent ads on Facebook and Instagram targeting users in Australia and the UK.
Read more about Meta’s FIRE pulls thousands of ‘celeb bait’ scam ads off Facebook, Instagram
CISA’s platform receives 2,400 unique vulnerability disclosures, researchers paid $335K
During its two years of operation, the Vulnerability Disclosure Policy (VDP) Platform, operated by the Cybersecurity and Infrastructure Security Agency (CISA), onboarded 51 agency programs and received over 12,000 submissions for vulnerabilities.
Read more about CISA’s platform receives 2,400 unique vulnerability disclosures, researchers paid $335K
Data leak hits Latin America’s financial institutions, leads point to fintech app
Digital banking platform Bankingly has leaked data from seven financial institutions, exposing clients across Central and South America.
Read more about Data leak hits Latin America’s financial institutions, leads point to fintech app
Roblox cheaters targeted by cybercriminals offering malicious gaming ‘hacks’
Dozens of malware variants targeting Roblox players have appeared online, taking the form of Python packages, Github repositories, and executable files. Cybersecurity researchers from Imperva warn that many of them were downloaded hundreds of times, with cybercrooks stealing money, data, and accounts.
Read more about Roblox cheaters targeted by cybercriminals offering malicious gaming ‘hacks’
What is Pango's UltraAV, which rose from the ashes of Kaspersky's US Exit?
After Kaspersky was forced to leave the US, millions of Americans unknowingly boarded a new ‘ship’ – UltraAV, an antivirus offering by Pango. Dr. Zulfikar Ramzan, Pango's CTO, explains they had little choice. Otherwise, millions would’ve been left without protection. The new ship is being built on a reliable 20-year-old foundation and will continue to improve as it sails.
Read more about What is Pango's UltraAV, which rose from the ashes of Kaspersky's US Exit?
Fan forum leaks Miami Dolphins supporters’ private messages
While supporting any sports team comes with a fair share of stress, aficionados of the NFL’s Miami Dolphins may have to worry about more than their favorite team conceding a touchdown.
Read more about Fan forum leaks Miami Dolphins supporters’ private messages
Critical printing system bugs affect hundreds of thousands of Linux machines
Linux systems running a printing system CUPS (Common Unix Printing System) are vulnerable to a critical exploit, enabling attackers to run remote code.
Read more about Critical printing system bugs affect hundreds of thousands of Linux machines
FBI warns of sophisticated Iranian hackers targeting personal accounts
Senior officials, current or former, journalists, activists, lobbyists, and senior think tank personnel are all targets of cyber threat actors working on behalf of the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC).
Read more about FBI warns of sophisticated Iranian hackers targeting personal accounts
Meta fined $100M for exposing plaintext passwords of millions of Facebook users
The Data Protection Commission (DPC) Ireland slaps Meta Platforms with a $100 million fine on Friday for exposing the plaintext passwords of a reported 600 million Facebook users to internal employees.
Read more about Meta fined $100M for exposing plaintext passwords of millions of Facebook users
Kia vulnerabilities could allow bad actors to steal your car
Security researchers have found a set of vulnerabilities that could allow bad actors to hack into Kia vehicles made after 2013 and steal the owner's personal information.
Read more about Kia vulnerabilities could allow bad actors to steal your car
Former affiliate upgrades to ransomware gang and launches its own attacks
Microsoft has discovered a new threat actor that previously operated as an affiliate for other ransomware-as-a-service gangs, including Hive, BlackCat (ALPHV), Hunters International, LockBit, and most recently, Embargo ransomware. Now, they’re trying to do something of their own.
Read more about Former affiliate upgrades to ransomware gang and launches its own attacks
Hidden prompts in emails and docs can send Google Gemini haywire, researchers say
Gemini, a powerful Google Workspace AI assistant, can be manipulated to produce misleading or malicious unintended responses. HiddenLayer researchers have demonstrated that cybercriminals can distribute emails and docs that will alert users to change passwords, visit dangerous websites, or perform other actions.
Read more about Hidden prompts in emails and docs can send Google Gemini haywire, researchers say
Pro-Palestinian hackers claim they hacked famous Israeli politicians, share personal photos, emails
Handala Hack, a pro-Palestinian hacktivist group, leaked 60,000 thousand ‘secret emails’ allegedly belonging to Gabriel "Gabi" Ashkenazi, an Israeli politician who previously served as the Minister of Foreign Affairs. They also exposed Benny Gantz, former defense minister and retired army general.
Read more about Pro-Palestinian hackers claim they hacked famous Israeli politicians, share personal photos, emails
China-linked attackers Salt Typhoon infiltrate US internet service providers
The Beijing-linked threat actors breached several internet service providers in the US, according to an exclusive report by The Wall Street Journal.
Read more about China-linked attackers Salt Typhoon infiltrate US internet service providers
Hackers hiding malware in fake “deleted Diddy files”
Malicious attackers are trying to capitalize on public interest surrounding charges against the rap star Sean “Diddy” Combs. A new PDiddySploit malware has been detected by Veriti researchers.
Read more about Hackers hiding malware in fake “deleted Diddy files”
Over 90 million French records exposed: mysterious data hoarder leaves instances open
A massive leak has exposed 95 million records belonging to French citizens. The compromised phone numbers, email addresses, and partial payment information leave them vulnerable to targeted cyberattacks.
Read more about Over 90 million French records exposed: mysterious data hoarder leaves instances open
Apple silently axes dozens of VPN apps in Russia
Apple is silently removing VPN apps from its App Store in Russia, outpacing official reports from Russia’s communications regulator Roskomandzor, reveals a report by online freedom advocate GreatFire.
Read more about Apple silently axes dozens of VPN apps in Russia
Mozilla is “taking a leaf out of Google’s playbook”
Mozilla, known for its “privacy-focused” browser, Firefox, has quietly rolled out a new feature that allows the browser to track users' behavior as they search the web, sparking a new complaint.
Read more about Mozilla is “taking a leaf out of Google’s playbook”
AI threats pushing cyber pros to seek legal safeguards
Cybersecurity executives at the world’s leading firms say they are taking legal steps to protect themselves from “unprecedented” pressures of a shifting threat landscape.
Read more about AI threats pushing cyber pros to seek legal safeguards
Popular podcast platform leaks data of tens of millions of its customers
One of India’s most popular podcast and audiobook platforms, KukuFM, left a publicly accessible instance and exposed more people than the entire population of Poland.
Read more about Popular podcast platform leaks data of tens of millions of its customers
