Security
Russian hackers under the spotlight: 4000 malicious domains, IPs revealed
Researchers have dealt a significant blow to the notorious Russian cyber gang FIN7, exposing a network of over 4,000 malicious domains and dozens of IP addresses across Russia and Estonia.
Read more about Russian hackers under the spotlight: 4000 malicious domains, IPs revealed
OpenAI bans Iran ChatGPT accounts for generating fake US election content
Iranian accounts using ChatGPT to generate false content about US elections and other world events were kicked off the platform, the chatbot’s creator OpenAI said on Friday.
Read more about OpenAI bans Iran ChatGPT accounts for generating fake US election content
National Public Data confirms breach affecting Social Security numbers of nearly all Americans
National Public Data (NPD), a background check and personal lookup company, has acknowledged that it was breached. Hackers have been disseminating 2.7 billion records for free, including names, Social Security numbers, addresses, and other personal information.
Read more about National Public Data confirms breach affecting Social Security numbers of nearly all Americans
Pre-installed app on millions of Pixel devices is making them vulnerable to attack
The potential vulnerability made Palantir Technologies switch from Pixel to iPhone devices.
Read more about Pre-installed app on millions of Pixel devices is making them vulnerable to attack
Cybercrime consolidation: the big fish are getting bigger
In the first half of 2024, cybercriminals grabbed $16.7 billion of illicit funds, marking a 20% drop from last year and the fourth consecutive decline year-over-year. Despite that, the big players are thriving.
Read more about Cybercrime consolidation: the big fish are getting bigger
TP-Link routers made in China are national security risk, US lawmakers say
US lawmakers are calling for an investigation into routers manufactured by Chinese-owned TP-Link Technologies and sold in the US – over concerns the company’s WiFi devices can be used by China to launch state-sponsored hacking campaigns.
Read more about TP-Link routers made in China are national security risk, US lawmakers say
Data of more than half of Chile’s population exposed in massive leak
Caja Los Andes, Chile’s largest pension and social security fund, has exposed the sensitive data of half of the country’s population, Cybernews researchers have found.
Read more about Data of more than half of Chile’s population exposed in massive leak
New email phishing campaign targets Russian dissidents worldwide
Russian intelligence-backed hackers have launched a new email phishing campaign targeting critics of the Kremlin around the world, according to new research by digital rights groups Citizen Lab and Access Now..
Read more about New email phishing campaign targets Russian dissidents worldwide
More hackers want to bite Apple: new malware in high demand
With a rising market share, macOS devices are increasingly being targeted by cybercrime gangs. Intel 471, a cyber threat intelligence company, has observed more than 40 threat actors interested in malware and other exploits.
Read more about More hackers want to bite Apple: new malware in high demand
There’s a new ransomware gang on the block, and it’s exploiting the human element
A new threat actor dubbed "Mad Liberator” appeared in mid-July and is already stirring trouble for companies. According to researchers, the ransomware gang relies on social engineering tactics and sometimes doesn’t even bother to encrypt the data after it’s been stolen.
Read more about There’s a new ransomware gang on the block, and it’s exploiting the human element
Bob and Maria most breached male, female names
If your name is Bob or Maria, double-check your email security. A new study has found that these are the top two most commonly breached male and female names.
Read more about Bob and Maria most breached male, female names
Americans’ personal data posted online for free: over 2.7 billion records leaked
Millions of Americans' personal records, stolen from National Public Data (NPD), a background check and the personal lookup company, have appeared on illicit web forums for free. Experts warn that exposed Social Security numbers can lead to an increase in cybercrime, such as phishing and fraud.
Read more about Americans’ personal data posted online for free: over 2.7 billion records leaked
Horror story app Chilling haunted by loose permissions, spilling data
There is no autocorrect for cybersecurity, and one mistake can leave doors for attackers open for months. Chilling, a subscription-based app featuring narrated horror stories, was discovered leaking user data and sensitive secrets for nine months.
Read more about Horror story app Chilling haunted by loose permissions, spilling data
Hidden crisis in cybersecurity: 17 out of 20 professionals suffering from fatigue and burnout
Cybersecurity professionals, lacking resources and struggling with overwhelming workloads, are grappling with mental health issues, the Sophos commissioned Tech Research Asia research survey reveals.
Read more about Hidden crisis in cybersecurity: 17 out of 20 professionals suffering from fatigue and burnout
The world’s greatest cyber threats, according to pros on Reddit
Cybersecurity firms are sounding the alarm about a rise in almost all malicious activities. But which threat is the most dangerous? Is it highly resourced nation-state actors, aiming to score geopolitical points on the world stage? Criminal gangs running ransomware, malware, and infostealer scams? Or could it be just the simple negligence of big tech? The Cyber pros on Reddit seem to have a unique view.
Read more about The world’s greatest cyber threats, according to pros on Reddit
Russian hackers accessed UK Home Office’s emails and data – report
Russian foreign intelligence service-affiliated cyber spies, tracked as Midnight Blizzard, compromised the British Government in January 2024, according to a report by The Record.
Read more about Russian hackers accessed UK Home Office’s emails and data – report
DEF CON 32: the unfixable bug that allows malware to be deployed via a browser
A fundamental vulnerability in secure web gateway (SWG) logic opens virtually any business, organization, or user to “last mile reassembly” attacks, which enable attackers to deploy malware on a device, SquareX researchers announced at the DEF CON 32 conference.
Read more about DEF CON 32: the unfixable bug that allows malware to be deployed via a browser
Astrology app exposes locations of 6M users, founders likely linked to Russia
The Moonly app has leaked employee credentials and the GPS locations of a staggering number of users. The leak also suggests that the company, ostensibly headquartered in the US, might be largely operated from Russia.
Read more about Astrology app exposes locations of 6M users, founders likely linked to Russia
Swiss cow and calf dead after ransomware attack on milking robot
A ransomware attack on a Swiss farmer’s computer systems left milking robots offline and prevented access to vital cattle data, leading to the death of the calf and its mother.
Read more about Swiss cow and calf dead after ransomware attack on milking robot
Black Hat USA 2024: Microsoft’s AI will soon start leaking user data
A researcher at the Black Hat 2024 conference has revealed that Copilot, Microsoft’s AI assistant, has multiple security loopholes, allowing attackers to exfiltrate sensitive data and corporate credentials.
Read more about Black Hat USA 2024: Microsoft’s AI will soon start leaking user data
