Security

Beware: someone’s trying to log in to your Facebook account

2
Users report receiving emails from a legitimate Facebook address with password recovery codes they did not ask for.
Read more about Beware: someone’s trying to log in to your Facebook account

BMW dealer at risk of takeover by cybercriminals

By neglecting to set a password, a BMW dealer in India has jeopardized the entire network of car dealerships in the country and put its clients at risk.
Read more about BMW dealer at risk of takeover by cybercriminals

Info stealers and how to protect against them

Info stealers, the type of malware with its purpose in the name, can cripple businesses and everyday users alike. So, how do you protect against them?
Read more about Info stealers and how to protect against them

The latest malicious activity and how to deal with it

Malware developers never rest. To cut through the noise, the Cybernews research team has looked at some recent malicious activity examples and analyzed them.
Read more about The latest malicious activity and how to deal with it

Data of over a million crypto exchange users exposed

GokuMarket, a centralized crypto exchange owned by ByteX, left an open instance, revealing the details of virtually all of its users, the Cybernews research team has discovered.
Read more about Data of over a million crypto exchange users exposed

Millions of Amazon reviews fake, study finds

Product reviews can be a deal breaker when shopping online, but many are fake, an analysis of over 33 million reviews on Amazon has shown.
Read more about Millions of Amazon reviews fake, study finds

Major leak exposes users from Russian crypto exchanges

Customers at nine crypto exchanges in Russia have had their anonymity shattered, with private user data being exposed for more than two months now, the Cybernews Research team has discovered.
Read more about Major leak exposes users from Russian crypto exchanges

Attackers prey on leaked crypto leads

While crypto leads are essential for businesses, attackers may use leaked crypto-related data to perform a variety of attacks.
Read more about Attackers prey on leaked crypto leads

Dubai’s largest taxi app exposes 220K+ users

The Dubai Taxi Company (DTC) app, which provides taxi, limousine, and other transport services, left a database open to the public, exposing sensitive customer and driver data.
Read more about Dubai’s largest taxi app exposes 220K+ users

Leaked nudes emerging as top cyber risk of 2024

Dark web forums are abuzz with discussions centering around nude images and videos leaked from platforms like OnlyFans and Instagram.
Read more about Leaked nudes emerging as top cyber risk of 2024

Android barcode scanner app exposes user passwords

An Android app with over 100k Google Play downloads and a 4.5-star average rating has let an open instance go unchecked, leaving sensitive user data up for grabs.
Read more about Android barcode scanner app exposes user passwords

Green Card Lottery agency exposes applicants’ data

Thousands of applicants for the Diversity Immigrant Visa Program, widely known as Green Card Lottery, got their private data leaked by the US GREEN CARD OFFICE LIMITED (USGCO), a limited liability company registered in the UK that helps to prepare the documents, the Cybernews research team has found.
Read more about Green Card Lottery agency exposes applicants’ data

Adobe’s InDesign exploited in new wave of phishing attacks

Hackers are getting creative, literally, by utilizing Adobe’s popular graphic design program, InDesign, to target corporations in the latest surge of phishing attacks, new research shows.
Read more about Adobe’s InDesign exploited in new wave of phishing attacks

Beware: predatory Android loan apps spy, harass, and blackmail users

Deceptive loan apps charging excessive interest rates can also be malicious. SpyLoan apps circumvent Google Play requirements to track their users’ data and then use it to blackmail them.
Read more about Beware: predatory Android loan apps spy, harass, and blackmail users

GST Invoice Billing Inventory exposes sensitive data to threat actors

A business accounting app for small and medium businesses with over 1M downloads has left a database open, exposing sensitive personal and corporate data up for grabs.
Read more about GST Invoice Billing Inventory exposes sensitive data to threat actors

Russian state-sponsored hackers exploiting Outlook vulnerability, Microsoft warns

Microsoft is urging Outlook users to patch and update their systems to mitigate a new threat from Russia. Hackers associated with the Kremlin’s military intelligence agency GRU are exploiting the vulnerability to access victim’s emails.
Read more about Russian state-sponsored hackers exploiting Outlook vulnerability, Microsoft warns

The future of phone scams: bots that sound like your loved ones

Every fifth unknown call in the US is spam. Despite a meager success rate, millions fall victim to fraudsters due to the sheer volume of attempts. Now, scammers have a dangerous new innovation that will make them even more productive and convincing.
Read more about The future of phone scams: bots that sound like your loved ones

Bluetooth connections no longer private with new BLUFFS attacks

Bluetooth, a low-power wireless technology connecting our devices, has a new vulnerability to iron out. Attackers in the middle could easily snoop on your communications using a new BLUFFS attack.
Read more about Bluetooth connections no longer private with new BLUFFS attacks

Hacktivism and its impacts on mental health

I get it. Like me, you’re wired in. Maybe your vice is social media or gaming. Perhaps you’re an Infosec researcher, or a hacker, or OSINT investigator. Whatever your function is, what began as a romance with technology ultimately evolves into a bitter love/hate relationship, taking a toll on your emotions and your overall psychological well-being.
Read more about Hacktivism and its impacts on mental health

Fortune-telling website exposes 13M+ user records

WeMystic, a website on astrology, numerology, tarot, and spiritual orientation, left an open database exposing 34GB of sensitive data about the platforms' users.
Read more about Fortune-telling website exposes 13M+ user records