Security

Attackers leverage SMB shares for targeted intrusion

Server Message Block (SMB) shares are ubiquitous enough for persistent attackers to abuse at scale. So much so that ransomware operators love it.
Read more about Attackers leverage SMB shares for targeted intrusion

Dozens of high-profile Israeli firms hacked by Iran-sponsored gang

A recently emerged Iranian cyber gang, calling itself “Cyber Toufan,” has allegedly leaked data from 49 Israeli firms, as reported by the threat Intelligence platform FalconFeedsio. Researchers believe that a breach in a single hosting company caused many incidents.
Read more about Dozens of high-profile Israeli firms hacked by Iran-sponsored gang

Europol warns 443 shops of digital card skimming

Online vendors are frequently unaware that cybercriminals can abuse their systems to defraud shoppers.
Read more about Europol warns 443 shops of digital card skimming

ByteRAT: the dark sorcerer of cyberspace

“The Dark Sorcerer of Cyberspace” – that’s how ByteRAT is introduced by RAT developers: a sophisticated trojan that operates as a Remote Administration Tool (RAT) targeting both Windows and MacOS users.
Read more about ByteRAT: the dark sorcerer of cyberspace

Real estate agency exposes details of 690k customers

An exposed instance contained information for a customer relationship management (CRM) system that likely belongs to Goyzer, a real estate property management software maker, the Cybernews research team has discovered.
Read more about Real estate agency exposes details of 690k customers

New Terrapin attack weakens SSH, and everyone is vulnerable

Network defenders have one more thing to worry about. Secure Shell or SSH, a network protocol for secure communication and data transfers, is vulnerable to a new type of attack named Terrapin, which breaks the integrity of a secure channel.
Read more about New Terrapin attack weakens SSH, and everyone is vulnerable

Data leak exposes users of car-sharing service Blink Mobility

More than 22,000 users of Blink Mobility should take the necessary steps to protect themselves against the risk of identity theft. The Cybernews research team has discovered that their personal data was exposed in a leak.
Read more about Data leak exposes users of car-sharing service Blink Mobility

Beware: someone’s trying to log in to your Facebook account

2
Users report receiving emails from a legitimate Facebook address with password recovery codes they did not ask for.
Read more about Beware: someone’s trying to log in to your Facebook account

BMW dealer at risk of takeover by cybercriminals

By neglecting to set a password, a BMW dealer in India has jeopardized the entire network of car dealerships in the country and put its clients at risk.
Read more about BMW dealer at risk of takeover by cybercriminals

Info stealers and how to protect against them

Info stealers, the type of malware with its purpose in the name, can cripple businesses and everyday users alike. So, how do you protect against them?
Read more about Info stealers and how to protect against them

The latest malicious activity and how to deal with it

Malware developers never rest. To cut through the noise, the Cybernews research team has looked at some recent malicious activity examples and analyzed them.
Read more about The latest malicious activity and how to deal with it

Data of over a million crypto exchange users exposed

GokuMarket, a centralized crypto exchange owned by ByteX, left an open instance, revealing the details of virtually all of its users, the Cybernews research team has discovered.
Read more about Data of over a million crypto exchange users exposed

Millions of Amazon reviews fake, study finds

Product reviews can be a deal breaker when shopping online, but many are fake, an analysis of over 33 million reviews on Amazon has shown.
Read more about Millions of Amazon reviews fake, study finds

Major leak exposes users from Russian crypto exchanges

Customers at nine crypto exchanges in Russia have had their anonymity shattered, with private user data being exposed for more than two months now, the Cybernews Research team has discovered.
Read more about Major leak exposes users from Russian crypto exchanges

Attackers prey on leaked crypto leads

While crypto leads are essential for businesses, attackers may use leaked crypto-related data to perform a variety of attacks.
Read more about Attackers prey on leaked crypto leads

Dubai’s largest taxi app exposes 220K+ users

The Dubai Taxi Company (DTC) app, which provides taxi, limousine, and other transport services, left a database open to the public, exposing sensitive customer and driver data.
Read more about Dubai’s largest taxi app exposes 220K+ users

Leaked nudes emerging as top cyber risk of 2024

Dark web forums are abuzz with discussions centering around nude images and videos leaked from platforms like OnlyFans and Instagram.
Read more about Leaked nudes emerging as top cyber risk of 2024

Android barcode scanner app exposes user passwords

An Android app with over 100k Google Play downloads and a 4.5-star average rating has let an open instance go unchecked, leaving sensitive user data up for grabs.
Read more about Android barcode scanner app exposes user passwords

Green Card Lottery agency exposes applicants’ data

Thousands of applicants for the Diversity Immigrant Visa Program, widely known as Green Card Lottery, got their private data leaked by the US GREEN CARD OFFICE LIMITED (USGCO), a limited liability company registered in the UK that helps to prepare the documents, the Cybernews research team has found.
Read more about Green Card Lottery agency exposes applicants’ data

Adobe’s InDesign exploited in new wave of phishing attacks

Hackers are getting creative, literally, by utilizing Adobe’s popular graphic design program, InDesign, to target corporations in the latest surge of phishing attacks, new research shows.
Read more about Adobe’s InDesign exploited in new wave of phishing attacks