Security
Many-faced Iranian hackers stir destruction in Albania and Israel
Destructive wiping attacks, coupled with influence operations targeting Israel, Albania, and other countries, were conducted by an Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS). Check Point Research shed light on some of its tactics.
Read more about Many-faced Iranian hackers stir destruction in Albania and Israel
Andrew Tate’s The Real World exposes 22M user messages
The Real World, a learning platform from the controversial social media personality Andrew Tate, has leaked nearly a million users and over 22 million messages.
Read more about Andrew Tate’s The Real World exposes 22M user messages
IMF believes global financial stability at risk due to cyberattacks
The International Monetary Fund (IMF) has warned that global financial stability is under threat from the increasing frequency and sophistication of cyberattacks. The risk of extreme losses is also increasing.
Read more about IMF believes global financial stability at risk due to cyberattacks
I crafted malicious Chrome extension: overhaul doesn’t mean you’re safe
Chrome will make huge changes to how the extensions work in June, hoping to improve performance and security. However, it may result in some useful extensions, such as adblockers, being impaired, leaving users vulnerable to trackers online. Extensions will remain largely unsafe overall, with large language models spitting out malware in seconds.
Read more about I crafted malicious Chrome extension: overhaul doesn’t mean you’re safe
Red Cross in Berlin leaks passwords and private messages
A German Red Cross unit potentially targeted by cybercriminals has leaked passwords and private messages, some of which disclosed sensitive data about the location of office keys and the responsibilities of employees.
Read more about Red Cross in Berlin leaks passwords and private messages
Following Ascension hospitals breach, FBI raises Black Basta alert
Black Basta Ransomware affiliates have impacted over 500 private industry and critical infrastructure entities worldwide, including healthcare. After Ascension Health Systems was breached, the US Cyber authorities issued some recommended actions and mitigations to fight the menace.
Read more about Following Ascension hospitals breach, FBI raises Black Basta alert
Mysterious actor spills over 1.2B records on Chinese users
An unknown actor is building a COMB – a compilation of many breaches – targeting Chinese individuals and already has over 1.2 billion records. Each one contains at least a phone number but often includes other sensitive data such as address or ID card number – and it’s leaking online.
Read more about Mysterious actor spills over 1.2B records on Chinese users
Claimed by hackers, Zscaler says there’s no impact or compromise
Cloud security company Zscaler is continuing an investigation into an alleged breach after a threat actor started selling “access to one of the largest cyber security companies.” Zscaler released a statement on Friday reiterating: “There is no impact or compromise to our customer, production and corporate environments.” However, the saga continues.
Read more about Claimed by hackers, Zscaler says there’s no impact or compromise
Chilean mobile network operator WOM exposes customer contracts
WOM failed to set a password on its cloud storage, leaking more than a million contracts containing highly sensitive customer data.
Read more about Chilean mobile network operator WOM exposes customer contracts
MediExcel exposes 500K patient documents
MediExcel, a US-based healthcare provider, left an open instance exposing over half a million patient documents, including diagnoses and claim forms.
Read more about MediExcel exposes 500K patient documents
New spyware targets Macs pretending to be “Spotify Music Converter”
Arm and Intel-based Macs are being targeted by a new dangerous malware, dubbed Cuckoo. It comes as a trojan, disguising itself as legitimate software such as music converter apps. Then, it spreads its infostealer wings and lays spyware.
Read more about New spyware targets Macs pretending to be “Spotify Music Converter”
Tech support scams top list of elder fraud, new FBI report
Cyber scams targeting seniors are on the rise, costing those over the age of 60 more than $3.4 billion in total losses for 2023 – an increase of 11% over 2022, according to a new FBI intel report.
Read more about Tech support scams top list of elder fraud, new FBI report
One-fifth of Docker Hub repositories are malicious, researchers find
Nearly three million repositories on Docker Hub, a platform for web developers to collaborate on their code for web applications, contain malicious content, security researchers at JFrog have found.
Read more about One-fifth of Docker Hub repositories are malicious, researchers find
Android apps with 4B installs leave open doors to code execution attacks
If your Android device has Xiaomi’s File Manager or WPS Office, update them immediately. Several Android apps with more than four billion total installs have been found to be vulnerable, allowing attackers to run arbitrary code or steal credentials.
Read more about Android apps with 4B installs leave open doors to code execution attacks
Thousands of Airsoft players under threat after data breach
Malicious actors took advantage of 75,000 Airsoft players’ personal data after the community site forgot to put a password on its database backups.
Read more about Thousands of Airsoft players under threat after data breach
Britain bans simple passwords for smart devices
Internet-connected smart devices will soon be required to meet minimum security standards by law in the UK.
Read more about Britain bans simple passwords for smart devices
Software supply chain risks for AI and ML models
As organizations become more dependent on third-party libraries, frameworks, and services to develop and deploy their AI applications, software supply chain risks are increasing exponentially. These risks can emerge in various forms, potentially leading to data breaches and other security vulnerabilities in affected systems.
Read more about Software supply chain risks for AI and ML models
Breaking 2FA authentication: demystifying your security
So, you thought using 2-factor authentication (2FA) and multifactor authentication (MFA) was your one-stop solution to keep hackers out of your accounts. Let’s adopt a rule of thumb – if there’s a will, there’s a way.
Read more about Breaking 2FA authentication: demystifying your security
Romance scammers offer fake protection from sex offenders, FBI warns
Fraudsters have found a new way to trick their victims into paying for non-existent services. The Federal Bureau of Investigation (FBI) has warned of a new “verification scheme” targeting online dating platform users.
Read more about Romance scammers offer fake protection from sex offenders, FBI warns
New banking malware gives hackers complete control of Android phones
A new Android mobile malware family, dubbed Brokewell, has appeared on cybersecurity researchers’ radars. It includes a powerful feature set, allowing attackers to take over user devices and steal data.
Read more about New banking malware gives hackers complete control of Android phones
