Security
South Carolina's Summerville Police claimed by rumored ALPHV/BlackCat ransomware reboot
The Town of Summerville, South Carolina on Friday announced it was the victim of a recent ransomware attack – and now the cyber gang allegedly responsible for the hit, is claiming to have stolen over 1.7 TB of sensitive information from its local police department.
Read more about South Carolina's Summerville Police claimed by rumored ALPHV/BlackCat ransomware reboot
Thousands of surveilled devices exposed in spyware vendor hack
The Minnesota-based spyware maker Spytech Software and Design, Inc. has allegedly been breached, and “persons with knowledge” exposed the logs of thousands of remotely monitored phones, tablets, and computers, TechCrunch reports.
Read more about Thousands of surveilled devices exposed in spyware vendor hack
Feds warn of North Korean Andariel cyber group, offer $10 million reward
Pyongyang’s global cyber espionage campaign is targeting defense, aerospace, nuclear, and engineering organizations.
Read more about Feds warn of North Korean Andariel cyber group, offer $10 million reward
A secretive phishing network on GitHub is distributing malware
Researchers from Check Point have unveiled a “never seen before” sophisticated malicious operation on GitHub. A phishing ring, dubbed Stargazers Ghost Network, is spreading malware and targeting gamers, social media enthusiasts, and crypto holders via malicious repositories.
Read more about A secretive phishing network on GitHub is distributing malware
Biggest-ever leak of digital pirates: 10 million exposed by Z-Library copycat
Ten million people thought they were accessing an e-book piracy site called Z-Library. Instead, scammers collected their personal information, passwords, crypto addresses, and, possibly, payments. What’s worse, they leaked all their information, exposing users to other cybercriminals and authorities.
Read more about Biggest-ever leak of digital pirates: 10 million exposed by Z-Library copycat
Android Telegram users hit by zero-day exploit masquerading as “xHamster”
Telegram users find their Android phones trying to install malware named “xHamster Premium Mod.” The APK file, disguised as a media, is downloaded by the messaging app itself. Telegram released a patch to fight the complex zero-day, discovered by ESET.
Read more about Android Telegram users hit by zero-day exploit masquerading as “xHamster”
Major Tunisian internet provider leaks data of nearly half a million customers
A massive leak has exposed clients' data and employees' passwords, raising concerns over targeted attacks after the main internet provider in Tunisia failed to set up a password.
Read more about Major Tunisian internet provider leaks data of nearly half a million customers
The CrowdStrike butterfly effect: cyber pros weigh in on the far-reaching disaster
A few hours without flights, medical procedures, or financial transactions. A day or two without less critical services. And a week or two of work restoring every affected system. Yet the ripples caused by CrowdStrike's calamitous software update will be felt far beyond these short term disruptions, cybersecurity experts believe.
Read more about The CrowdStrike butterfly effect: cyber pros weigh in on the far-reaching disaster
CrowdStrike outage turns into playground for threat actors
As more systems come back online in the wake of Friday’s worldwide CrowdStrike IT outage, experts say for many industries, such as the airlines, healthcare, and banking sectors, the process will be lengthy and create a slew of unforeseen security challenges.
Read more about CrowdStrike outage turns into playground for threat actors
Chinese APT41 back in action compromising companies in Italy, Spain, Taiwan, Turkey, UK
Multiple organizations around the world have been compromised by the prolific Chinese state-sponsored threat group known as APT41, Google’s cybersecurity research arm Mandiant warns.
Read more about Chinese APT41 back in action compromising companies in Italy, Spain, Taiwan, Turkey, UK
Cisco, Oracle patch warning covers hundreds of critical vulnerabilities
CISA on Thursday warns of critical vulnerabilities found in multiple products for Cisco, Oracle, and Ivanti software in a trio of July patch advisories.
Read more about Cisco, Oracle patch warning covers hundreds of critical vulnerabilities
Hijacked YouTube channels pushing crypto scams using Trump assassination narrative
Fraudsters have been quick to capitalize on the assassination attempt on former president Donald Trump by luring victims and offering them “double” crypto deposits on YouTube.
Read more about Hijacked YouTube channels pushing crypto scams using Trump assassination narrative
Leaked data from oil rigs raises terrorism threat
More than a million files with sensitive data, from employee card templates to on-site operational assessments, have been left passwordless online, putting multiple energy companies at risk.
Read more about Leaked data from oil rigs raises terrorism threat
Cisco warns about critical vulnerability that allows user passwords to be changed
Cisco has released software updates to address a critical vulnerability with a maximum base score of 10, which allows an attacker to change any user's password, including those belonging to administrators, without authentication.
Read more about Cisco warns about critical vulnerability that allows user passwords to be changed
Threat group FIN7 adapts with new tactics and tools, researchers say
The elusive Russian threat group FIN7 appears to be injecting itself back into the 2024 ransomware game with upgraded tools and some never-before-seen tactics – that is, if it ever really left.
Read more about Threat group FIN7 adapts with new tactics and tools, researchers say
Unseen levels of cyberattacks: organizations targeted ten times an hour
The growing sophistication of cybercriminals and advanced technologies like AI and machine learning have pushed global cyberattack levels to unprecedented levels in the second quarter of 2024.
Read more about Unseen levels of cyberattacks: organizations targeted ten times an hour
Anime figurine maker exposes North American customer names, home addresses
Good Smile Company, a Japanese hobby products maker, may have inadvertently created hundreds of thousands of frowns after a misconfigured instance was discovered leaking sensitive details for months.
Read more about Anime figurine maker exposes North American customer names, home addresses
Hacker claims Trello, leaks millions of emails
The threat actor, going by the moniker “Emo,” has leaked 21GB of data, allegedly belonging to Trello and containing more than 15 million unique email addresses.
Read more about Hacker claims Trello, leaks millions of emails
Rabbit R1 hacked using old vulnerability: avoid second-hand devices
If you’re paying $199 for the Rabbit R1, you might as well use the whole device. Cybernews researchers have gained root access to the AI personal assistant by exploiting a vulnerability from five years ago. Beware if you’re considering a second-hand Rabbit R1.
Read more about Rabbit R1 hacked using old vulnerability: avoid second-hand devices
Kaspersky to shutter US offices, lay off workers after US ban
Kaspersky Lab is shutting down its US offices in response to the US Commerce Department banning the Russian cybersecurity firm from selling or providing its security and anti-virus software to US customers starting July 20th.
Read more about Kaspersky to shutter US offices, lay off workers after US ban
