Security
China biotech firms amass Americans' genetic data, lawmakers warn
US Senators on Capital Hill are pushing a vote to restrict US business dealings with Chinese biotech companies over fears that the sensitive health data of Americans will be used for nefarious purposes by Beijing.
Read more about China biotech firms amass Americans' genetic data, lawmakers warn
Researcher found millions 2FA codes spilling online for tech giants
Millions of two-factor authentication (2FA) codes, sent as SMS messages by tech giants, were being leaked online to anyone without any authentication, a security researcher Anurag Sen found.
Read more about Researcher found millions 2FA codes spilling online for tech giants
Large online dictionary leaks nearly 7M records
Glosbe, the biggest online dictionary, left a server exposed to the public, revealing personal data, encrypted passwords, social media identifiers, and other details of nearly seven million users.
Read more about Large online dictionary leaks nearly 7M records
Chinese-made cars may pose national security risk, US launches probe
A new White House investigation will determine if Chinese vehicle imports and connected car technologies pose a threat to national security and need to be restricted.
Read more about Chinese-made cars may pose national security risk, US launches probe
Biden bans brokers selling Americans' private data for espionage
A new executive order, signed by US President Joe Biden on Wednesday, aims to prevent Americans’ private data from being sold to countries considered a threat to national security.
Read more about Biden bans brokers selling Americans' private data for espionage
Cybercriminals obtain data of 2M customers leaked by delivery company
The delivery company has leaked information about deliveries and the home addresses of millions of its customers.
Read more about Cybercriminals obtain data of 2M customers leaked by delivery company
Iranian hackers impersonate Boeing and DJI, post fake job offers
Iranian cyberespionage hackers, posing as recruiters from Boeing or drone manufacturer DJI among other phishing efforts, are targeting the aerospace, aviation, and defense industries, the latest Mandiant report warns.
Read more about Iranian hackers impersonate Boeing and DJI, post fake job offers
Russian cyber espionage gang adapts to target cloud systems
One of the most notorious and highly capable cyber espionage gangs, attributed to Russian intelligence services, has now evolved its tactics beyond traditional means to target cloud infrastructure, CISA, and other cyber defense, agencies warn.
Read more about Russian cyber espionage gang adapts to target cloud systems
The true cost of ransomware: 78% saw attackers coming back for more
There are many considerations to have in mind when choosing whether to pay or not pay a ransom to cyberattackers. The latest report by Cybereason reveals that only one in two victims who paid up got their data back uncorrupted, and four out of five were then breached again.
Read more about The true cost of ransomware: 78% saw attackers coming back for more
LinkedIn scams and how to avoid them
A new report finds that three in ten job board users have fallen victim to fake job ads on popular sites such as Indeed, LinkedIn, and Craigslist.
Read more about LinkedIn scams and how to avoid them
New WiFi vulnerabilities allow attackers to fake and overtake networks
Billions of Android users worldwide could be affected by a new WiFi vulnerability, which hackers may exploit to create clones of WiFi hotspots and intercept data, researchers have found. Another new vulnerability enables unauthorized access to protected home Wi-Fi networks, exposing devices and data.
Read more about New WiFi vulnerabilities allow attackers to fake and overtake networks
Mr. Cooper leak exposes over two million customers
Mr. Cooper, a major US mortgage company, left an open Google Cloud instance exposing details of millions of its customers only two months after the company suffered a severe data breach.
Read more about Mr. Cooper leak exposes over two million customers
Even adult toys want your personal information: don’t plug them into a USB
Hackers are always trying new methods to deliver information stealers that extract information about crypto wallets and credentials. One user found that a newly bought sex toy was infected with malware after trying to charge it from a computer.
Read more about Even adult toys want your personal information: don’t plug them into a USB
ConnectWise critical exploit, already in wild, is about to 'erupt'
A recently discovered ConnectWise level 10 CVSS vulnerability, affecting its ScreenConnect remote desktop and access software, is being exploited in the wild – and is expected to escalate in magnitude, according to researchers at Huntress Labs.
Read more about ConnectWise critical exploit, already in wild, is about to 'erupt'
LockBit crackdown heats up as US offers reward for info on hackers
The US offered a reward of up to $15 million for information on the leaders of the notorious cybercrime group LockBit on Wednesday, as Ukrainian police arrest a father-son duo in connection to the gang.
Read more about LockBit crackdown heats up as US offers reward for info on hackers
Russian Web hosting provider exposes data of more than 54M users
A website builder owned by a top Russian hosting provider has leaked millions of records with private user data.
Read more about Russian Web hosting provider exposes data of more than 54M users
Website builder leaks data of 200K users
Website builder Ucraft leaked the data of hundreds of thousands of users, which malicious actors have accessed and distributed.
Read more about Website builder leaks data of 200K users
Burglars using jammers to disable wireless smart home security
Wireless smart sensors and cameras may be “screaming” about broken glass, open doors, and burglars moving inside the house, but those radio signals may never reach the homeowner’s phone.
Read more about Burglars using jammers to disable wireless smart home security
New Russian cyber-espionage campaign targeting Europe’s webmail servers
Researchers are warning about a new cyber-espionage campaign against Roundcube webmail servers in Europe conducted by a Russian-linked threat actor with a “long-term strategic interest in gathering intelligence.” The main targets are government, military, and national infrastructure-related entities.
Read more about New Russian cyber-espionage campaign targeting Europe’s webmail servers
Volt Typhoon takes the stage: what we know about “defining threat of our generation”
Some Americans may have been unaware that their Wi-Fi router is a battlefield between Chinese hackers and the FBI and other agencies. After the latest intrusions, security researchers from Unit 42, a security arm of Palo Alto Networks, categorized Volt Typhoon as a top-tier cybergang. What do we know about it?
Read more about Volt Typhoon takes the stage: what we know about “defining threat of our generation”
