Security
US adopts cybersec program to protect schools and libraries from attacks
US government officials voted yes to a new cybersecurity pilot program intended to help America’s schools and library systems bolster their defenses against the rising number of cyberattacks targeting the education sector.
Read more about US adopts cybersec program to protect schools and libraries from attacks
Hope for LockBit Ransomware victims: FBI recovers 7,000 decryption keys
Following a successful operation against LockBit, exposing the ringleader and seizing its infrastructure, FBI Cyber Assistant Director Bryan Vorndran claims that many victims can expect to reclaim their data.
Read more about Hope for LockBit Ransomware victims: FBI recovers 7,000 decryption keys
Russian cyber operations are largest threat to Olympics, Google warns
Cyber espionage, disruptive operations, information operations, and financial scams – the Paris 2024 Olympics faces numerous cyber threats, and Russia poses the largest of them, Google’s Mandiant warns. Other state-sponsored actors and cybercrime rings are throwing their hats into the ring, too.
Read more about Russian cyber operations are largest threat to Olympics, Google warns
The kebab you ordered is leaking your data
Multiple popular Turkish food delivery services route their orders through a service provider that does not care much about privacy. Up until now, the company has been leaking sensitive customer information with each incoming order. Attackers can target both restaurants and their clients.
Read more about The kebab you ordered is leaking your data
Millions of Cox WiFi routers were sitting ducks for hackers, researcher demonstrates
Do you trust the WiFi router that you’re renting from your internet service provider? Maybe you should think twice. After some tinkering, a security researcher found a way to hack into millions of routers used by Cox customers.
Read more about Millions of Cox WiFi routers were sitting ducks for hackers, researcher demonstrates
Kickstarter star leaks over half a million records with clients' data
Over half a million records with clients' data and a decade's worth of support tickets have been publicly exposed and likely accessed by threat actors after a US accessories maker forgot to set a password.
Read more about Kickstarter star leaks over half a million records with clients' data
Photo firm exposes 43K American uni students
A US-based graduation photo maker exposed the personal details of thousands of students from hundreds of American universities, the Cybernews research team has discovered.
Read more about Photo firm exposes 43K American uni students
Russia hacks Polish media, posts fake news about troops to Ukraine
A false news story posted on Polish state media claiming that its Prime Minister would spin up 200,000 soldiers to join Ukraine’s fight against Russia, is being blamed on Russian hackers.
Read more about Russia hacks Polish media, posts fake news about troops to Ukraine
Massacre of WiFi routers leaves 600,000 American families offline
An unprecedented wiperware campaign was carried out in the US last year, turning 600,000 WiFi routers into e-waste. In just 72 hours, a sizeable portion of a certain service provider’s (ISP’s) customers, mostly in rural communities, were left without access to emergency services.
Read more about Massacre of WiFi routers leaves 600,000 American families offline
Tentacles of notorious spyware tool LightSpy ensnare macOS
A malicious surveillance framework dubbed LightSpy has been expanded to target macOS systems, according to research by Threat Fabric. Ten plugins were designed to access a camera and sound recording and exfiltrate other private information from older affected systems.
Read more about Tentacles of notorious spyware tool LightSpy ensnare macOS
Muslim Tinder exposes secrets, risks user privacy
Salams, a Muslim-oriented dating app, skimped on protection for its users, with the Cybernews research team discovering that the platform was wide open for user-impacting attacks for 18 months.
Read more about Muslim Tinder exposes secrets, risks user privacy
FBI urging deletion of MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN
Check your devices for the traces of 911 S5, “likely the world’s largest botnet ever” dismantled by the Federal Bureau of Investigation (FBI), and delete the free VPNs used as cybercrime infrastructure. Here’s how to do it.
Read more about FBI urging deletion of MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN
Church app developer exposes data of nearly a million Brazilians
inChurch, a Brazilian software company providing services to 5000 churches across Brazil and 45,000 worldwide, has leaked a tremendous amount of sensitive user data.
Read more about Church app developer exposes data of nearly a million Brazilians
Websites exposing over a million secrets, leaving visitors at risk
Thousands of websites are leaving their most sensitive keys in the doors, creating a perfect environment for thieves. The Cybernews research team has discovered 58,364 unique websites from around the globe that are vulnerable to data breaches and even complete takeovers. For visitors, it’s a security disaster.
Read more about Websites exposing over a million secrets, leaving visitors at risk
Millions of Alibaba-owned marketplace users exposed
Millions of users’ phone numbers, home addresses, and other personal information have been revealed on Taobao, an online shopping platform owned by Chinese tech giant Alibaba.
Read more about Millions of Alibaba-owned marketplace users exposed
Online video downloader exposes user data, including explicit content
A misconfiguration of Dirpy’s systems exposed users' IP addresses and revealed what they downloaded, which included explicit content.
Read more about Online video downloader exposes user data, including explicit content
Over 200K likely vulnerable Confluence Data Center instances exposed
Hundreds of thousands of likely vulnerable Atlassian Confluence Data Center and Confluence Server instances are exposed, mostly in the US, to attackers running code on them remotely.
Read more about Over 200K likely vulnerable Confluence Data Center instances exposed
Welsh Rugby Union member addresses, names exposed
Wales’ rugby overseers, the Welsh Rugby Union (WRU), have exposed a dataset containing the personal details of nearly 70,000 of its members.
Read more about Welsh Rugby Union member addresses, names exposed
German police warn of cyberattacks via Office 365
A new wave of cyberattacks is threatening companies in Germany. The State Criminal Police Office of North Rhine-Westphalia has warned that cybercriminals are exploiting Microsoft 365, especially email and document management, as an initial attack vector.
Read more about German police warn of cyberattacks via Office 365
Aston Villa’s gates have security gaps: fans exposed
Aston Villa Football Club (AVFC) left a publicly leaking Amazon Web Services (AWS) S3 bucket containing the personally identifiable information of 135,770 individuals. The affected fans are vulnerable to spear phishing, social engineering attacks, and identity theft attempts.
Read more about Aston Villa’s gates have security gaps: fans exposed
