Security
Healthcare app exposes sensitive patient data
Health Genie, a healthcare IT solutions provider, left an open instance, exposing patients’ personal details as well as sensitive clinical data.
Read more about Healthcare app exposes sensitive patient data
Label working with Snoop Dogg and Iggy Azalea faces cyberthreat
Independent record label Empire Distribution, a big name in the hip-hop music scene, has been left vulnerable to cyberattacks.
Read more about Label working with Snoop Dogg and Iggy Azalea faces cyberthreat
Scammers bypassing Google ad checks to impersonate real brands
Google seems to have a problem with brand impersonation. For example, some ads on top of the search results bar appear to be the real Facebook but lead to scams, users have found. Malicious actors have found a way to trick Google’s bots.
Read more about Scammers bypassing Google ad checks to impersonate real brands
MFA under siege: keep your protections up-to-date
Compromised multi-factor authentication (MFA) was behind some of last year’s biggest cyberattacks, including breaches at casino giants MGM and Caesars. Yet some companies are just adding it as an extra layer of security.
Read more about MFA under siege: keep your protections up-to-date
Microsoft: Russian APT 28 exploits Windows bug with GooseEgg tool
Microsoft has released a fix to a known vulnerability that the Russian threat group APT 28 – also known as Forrest Blizzard and Fancy Bear – has been exploiting for years with the use of a newly identified, customized malware tool dubbed GooseEgg.
Read more about Microsoft: Russian APT 28 exploits Windows bug with GooseEgg tool
Four Iranian nationals charged in cyber campaign against US firms
The US Department of Justice (DoJ) Tuesday charged four Iranian nationals for their involvement in a multi-year cyber campaign that, allegedly, targeted US companies with access to military defense information. Now, they're offering a $10 million reward to anyone who can help find them.
Read more about Four Iranian nationals charged in cyber campaign against US firms
HelloKitty ransomware rebranded and back in business, looking for employees
Threat actors previously known as HelloKitty ransomware have announced that they’re rebranding into “HelloGookie.” Instead of balloons, they released some decryption keys from older attacks and leaked more of the stolen code from CD Project Red and Cisco network information. Now, they are looking for an employee who will make voice calls to victims directly.
Read more about HelloKitty ransomware rebranded and back in business, looking for employees
Phishers use Nespresso links, exploiting redirect vulnerability
Security researchers at Perception Point discovered that phishers are exploiting an open redirect vulnerability, which affects the Nespresso website, a popular coffee machine and coffee capsule manufacturer.
Read more about Phishers use Nespresso links, exploiting redirect vulnerability
Wave of ransomware on the cheap: junk guns still okay for small targets
Researchers observe a flood of crude and amateurish ransomware. But it’s cheap, difficult to trace, and comes in many flavors. This spells trouble for small business owners and other individuals.
Read more about Wave of ransomware on the cheap: junk guns still okay for small targets
Suspicious domains targeting Trump and Biden on the rise – interview
At least 11,974 suspicious domains targeting former President Donald Trump or President Joe Biden have been created since the beginning of last year, followed by hundreds of imposters on social media, cybersecurity firm BrandShield shared with Cybernews.
Read more about Suspicious domains targeting Trump and Biden on the rise – interview
Akira Ransomware rampage: $42 million looted from 250+ organizations
In less than a year of operations, the Akira Ransomware gang, known for multi-extortion tactics, has claimed approximately $42 million in ransomware proceeds from more than 250 affected organizations, according to the Federal Bureau of Investigation (FBI) and other authorities.
Read more about Akira Ransomware rampage: $42 million looted from 250+ organizations
United Nations Development Programme hit by cyberattack
The United Nations Development Programme (UNDP), the UN’s lead agency on international development, announced that it’s investigating a “cybersecurity incident” in Copenhagen, Denmark. Hackers managed to steal human resources and procurement information.
Read more about United Nations Development Programme hit by cyberattack
FBI says Chinese hackers preparing to attack US infrastructure
Chinese government-linked hackers have burrowed into US critical infrastructure and are waiting "for just the right moment to deal a devastating blow," FBI Director Christopher Wray said on Thursday.
Read more about FBI says Chinese hackers preparing to attack US infrastructure
Chinese manufacturer exposes data from surveillance devices
Raysharp, a Chinese manufacturer of video cameras, recorders, and other surveillance products, has suffered a data leak that exposed its devices. Cybernews researchers have discovered three billion records in a leaking database from the company’s analytics platform.
Read more about Chinese manufacturer exposes data from surveillance devices
Over 17 billion personal accounts leaked worldwide since 2004
Data breaches increased five times globally in the first quarter of 2024, bringing the number of personal accounts exposed over the past two decades to over 17 billion, according to cybersecurity researchers.
Read more about Over 17 billion personal accounts leaked worldwide since 2004
Millions of Magic Rampage players at risk
Asantee Games, a game development company, has exposed data from more than 14 million players due to its failure to set up a password.
Read more about Millions of Magic Rampage players at risk
Brute force attacks targeting VPNs on the rise, intel warning
A new threat advisory released Tuesday by Cisco Talos warns of an uptick in brute force attacks targeting VPNs, SSH services, and web application authentication interfaces.
Read more about Brute force attacks targeting VPNs on the rise, intel warning
Russian-state hackers escalate Microsoft email breach, CISA warns
On Thursday, the US Cybersecurity and Infrastructure Security Agency (CISA) publicly expanded an emergency mitigation directive, first issued for US government agencies, after the Russian-backed hacker group Midnight Blizzard was found escalating its previous Microsoft email hack.
Read more about Russian-state hackers escalate Microsoft email breach, CISA warns
Number of cyberattacks jumps to new record
The first quarter of 2024 marked a significant increase in cyberattacks, and the most heavily targeted industries were research, government, military, and healthcare, according to Check Point report.
Read more about Number of cyberattacks jumps to new record
Macrosoft exposes private data of license buyers
Cybersecurity neglect has resulted in a massive data leak affecting nearly 100,000 users in Italy who purchased software licenses.
Read more about Macrosoft exposes private data of license buyers
