Security
Tehran’s state-sponsored hackers helping cybergangs deploy ransomware
After they’re done spying for the government, the Iranian cyber army will trade access to victim organizations for money. The Federal Bureau of Investigation (FBI) warns that the state-sponsored group has a wide arsenal of tools to breach education, finance, healthcare, and defense organizations.
Read more about Tehran’s state-sponsored hackers helping cybergangs deploy ransomware
Apple, TikTok, Google, and Facebook give your data to law enforcement up to 80% of the time
Law enforcement can easily access your data, and some tech companies are willing to provide that information upon request. In fact, they comply 70% to 80% of the time.
Read more about Apple, TikTok, Google, and Facebook give your data to law enforcement up to 80% of the time
Chinese hackers exploit flaw in software used by telecoms
Chinese state-sponsored actors, known as Volt Typhoon or Bronze Silhouette, are actively exploiting a zero-day vulnerability in software used by many internet service providers and computer network management companies.
Read more about Chinese hackers exploit flaw in software used by telecoms
Muted Applause: leading software testing firm leaves credentials vulnerable
Applause, a leading software testing company, inadvertently left its credentials open to unauthorized visitors, allowing attackers to make a move for customer data.
Read more about Muted Applause: leading software testing firm leaves credentials vulnerable
Why Telegram’s out-of-the-box features don’t provide maximum security
Contrary to many messaging apps, Telegram doesn’t offer end-to-end encryption by default.
Read more about Why Telegram’s out-of-the-box features don’t provide maximum security
Almost a million affected by Young Consulting breach, BlackSuit ransomware claims responsibility
Software solutions provider Young Consulting, now known as Connexure, has notified 954,177 individuals in the US that their names and other personal identifiers were leaked in a data breach that occurred on April 10th, 2024.
Read more about Almost a million affected by Young Consulting breach, BlackSuit ransomware claims responsibility
Large number of businesses exposed in 32 million document leak from ServiceBridge
Security researcher Jeremiah Fowler has discovered a massive exposed data chest belonging to ServiceBridge, a cloud-based field service management platform. The exposed data contains contracts, work orders, invoices, proposals, inspections, agreements, partial credit card numbers, and even HIPAA consent forms dated back to 2012.
Read more about Large number of businesses exposed in 32 million document leak from ServiceBridge
Illinois county leaked over 470K critical voter documents
One of the largest state counties in Illinois, St. Clair County, has had its voter data exposed. The county clerk’s office leaked sensitive documents used to verify voter registration lists.
Read more about Illinois county leaked over 470K critical voter documents
Chrome-stored passwords targeted by notorious ransomware group
Qilin ransomware, the criminal ring behind the chaos at London hospitals this summer, has evolved its tactics to harvest passwords from Google Chrome, Sophos X-Ops research has revealed.
Read more about Chrome-stored passwords targeted by notorious ransomware group
Impostor psychics plaguing social media
The reputation of psychics is being dragged through the mud by online impostors, who are preying on vulnerable people that seek answers through unconventional means.
Read more about Impostor psychics plaguing social media
Five million WordPress websites in danger due to critical LiteSpeed Cache vulnerability
LiteSpeed Cache, a very popular plugin used to speed up many WordPress websites, has an inherent vulnerability that allows attackers to completely take over sites by gaining administrator-level access.
Read more about Five million WordPress websites in danger due to critical LiteSpeed Cache vulnerability
Attackers draining bank accounts using new Android card cloning malware
A new malware can transmit an NFC (near-field communication) signal from one Android device to another held by a thief draining an account at an ATM.
Read more about Attackers draining bank accounts using new Android card cloning malware
Hackers target online shoppers in new Adobe e-commerce malware campaign
A new malware campaign that steals payment information from online shoppers is discovered lurking in dozens of e-commerce sites that use Adobe’s Magento platform, Malwarebytes said.
Read more about Hackers target online shoppers in new Adobe e-commerce malware campaign
Google Cloud leak linked to Shark Tank contestant exposes 83,000
A leaking Google Cloud Storage bucket linked to Alice’s Table, a Shark Tank contestant offering virtual floral arrangement classes, has exposed the personal data of over 83,000 customers.
Read more about Google Cloud leak linked to Shark Tank contestant exposes 83,000
Security flaws in Dahua cameras being actively exploited, CISA warns
The US Cybersecurity and Infrastructure Security Agency (CISA) has warned about two critical vulnerabilities affecting Dahua IP cameras and related products.
Read more about Security flaws in Dahua cameras being actively exploited, CISA warns
Android and iOS users targeted with novel banking app phishing campaign
It looks just like a banking app, but it’s actually a malicious website. Threat actors are bypassing iOS and Android defenses in novel ways, with a new campaign affecting users in Eastern Europe.
Read more about Android and iOS users targeted with novel banking app phishing campaign
Donating to your political party could cost you, cyber experts warn
Online political donation sites have become a prime target for cybercrooks looking to take advantage of US voters who throw money at their favorite candidates, a new DataDome report warned on Tuesday.
Read more about Donating to your political party could cost you, cyber experts warn
Prominent Jewish rabbi targeted by Iranian phishers masquerading as podcasters
Iranian threat actor TA453, known for going to great lengths in its spear-phishing campaigns, recently attempted to target a well-known religious figure in Israel. They set up a trap by inviting the rabbi to join a podcast about “Jewish life in the Muslim world.”
Read more about Prominent Jewish rabbi targeted by Iranian phishers masquerading as podcasters
Al-Anon member details and chats exposed in data breach
Sensitive information, including full names, encrypted passwords, emails, phone numbers, and private chats of members of Al-Anon, a support group for the friends and families of alcoholics, has been exposed in a recent data breach.
Read more about Al-Anon member details and chats exposed in data breach
Macs in danger due to vulnerabilities in Microsoft Office apps
Six Microsoft applications on macOS are vulnerable to outside hackers, security researchers at Cisco Talos have discovered. Attackers can exploit flaws to access sensitive information, send emails, and record video and audio without any user interaction.
Read more about Macs in danger due to vulnerabilities in Microsoft Office apps
