Security
Over a million exposed as Slovenian retailer leaks data
Slovenian retailer DFVU, known for brands like S-mania, Layoners, Mazzaci, and RedLynx, left its customers' private data open, exposing 1.1 million individuals and company administrators.
Read more about Over a million exposed as Slovenian retailer leaks data
Russian threat group ColdRiver launches new malware campaign, say researchers
The Russian threat group ColdRiver – backed by the Kremlin and known for targeting high-ranking Western officials – has added malware to its arsenal of hacking tools.
Read more about Russian threat group ColdRiver launches new malware campaign, say researchers
Erasmus leaves exchange students at risk
A misconfiguration in one of the largest student network systems exposed exchange students in Poland to the risk of fraud and phishing attacks.
Read more about Erasmus leaves exchange students at risk
Cyber spies launch PDF campaign
After nine months, a cyber espionage group has returned to the scene, targeting organizations across North America with infected files.
Read more about Cyber spies launch PDF campaign
Indian trade association exposes sensitive data
The Federation of Indian Chamber of Commerce and Industry (FICCI) exposed an important file, risking indirect financial loss and reputational damage, as well as legal and compliance problems.
Read more about Indian trade association exposes sensitive data
Facebook users targeted with “I’ll miss him so much” scam
The Facebook-oriented scam abuses users’ sense of grief and incorporates BBC branding to attract victims.
Read more about Facebook users targeted with “I’ll miss him so much” scam
Ransomware landscape overview 2023
In 2023, the ransomware groups that we tracked claimed that they successfully targeted a total of 4191 victims, signifying an exceptional year of cyber threats.
Read more about Ransomware landscape overview 2023
Leaked COVID tests expose sensitive patient data
The COVID-19 testing platform, Coronalab.eu, has exposed a database containing 11.8 million patient records, including COVID-19 certificates, test records, passport numbers, and other sensitive details.
Read more about Leaked COVID tests expose sensitive patient data
Facebook jobs scams and how to avoid them
Threat actors are posing as Qualys recruiters, advertising remote job opportunities via Facebook to obtain sensitive information and funds while compromising users and their direct connections.
Read more about Facebook jobs scams and how to avoid them
Team Liquid’s wiki leak exposes 118K users
Liquipedia, an online e-sports platform run by Team Liquid, exposed a database revealing its users’ email addresses and other details.
Read more about Team Liquid’s wiki leak exposes 118K users
India’s Cherrinet ISP leaks user data, exposes accounts to abuse attempts
Some Indian internet users should worry about their data being in the wrong hands. The Cybernews research team discovered an open 1.8TB data trove belonging to internet service provider Cherrinet.
Read more about India’s Cherrinet ISP leaks user data, exposes accounts to abuse attempts
Entire population of Brazil possibly exposed in massive data leak
The private data of hundreds of millions of Brazilians were publicly accessible to threat actors, putting individuals at risk.
Read more about Entire population of Brazil possibly exposed in massive data leak
Saudi Ministry exposed sensitive data for 15 months
Saudi Arabia’s Ministry of Industry and Mineral Resources (MIM) had an environment file exposed, opening up sensitive details for anybody willing to take them. The Cybernews research team believes that the sensitive data was accessible for 15 months.
Read more about Saudi Ministry exposed sensitive data for 15 months
Iranian crypto exchange leaks user passports and IDs
Bit24.cash has inadvertently exposed sensitive data belonging to nearly 230,000 users.
Read more about Iranian crypto exchange leaks user passports and IDs
Threat actors can “fairly easily” alter AI systems, NIST warns
The National Institute of Standards and Technology (NIST) has identified four major cyberattacks that can alter the behavior of AI systems.
Read more about Threat actors can “fairly easily” alter AI systems, NIST warns
Dark web sees “surge” of X gold accounts on sale
There’s a “gold rush” on the dark web as threat actors target verified accounts on X, formerly Twitter, for large-scale attacks, cybersecurity experts at CloudSEK warn.
Read more about Dark web sees “surge” of X gold accounts on sale
Don’t trust links with known domains: BMW affected by redirect vulnerability
Sometimes, you can’t even trust links with your own domain. As the Cybernews research team has discovered, some BMW subdomains were vulnerable to redirect vulnerability, enabling attackers to forge links leading to malicious sites through them.
Read more about Don’t trust links with known domains: BMW affected by redirect vulnerability
Accounts in danger: Google recommends enhanced safe browsing and extra care
After reports of a new malware strain stealing and maintaining Google sessions, the tech giant is encouraging users to enable enhanced safe browsing and recommends extra security against malware.
Read more about Accounts in danger: Google recommends enhanced safe browsing and extra care
Experiment: the ultimate filter for ads, malvertisers, spies and scammers
Those who worry about their phone spying, tracking, listening, and sending information to advertisers or an intelligence agency can finally relax a little. God bless private DNS.
Read more about Experiment: the ultimate filter for ads, malvertisers, spies and scammers
Clash of Clans gamers at risk while using third-party app
An exposed database and secrets on a third-party app puts Clash of Clans players at risk of attacks from threat actors.
Read more about Clash of Clans gamers at risk while using third-party app
