Security
US Health Department warns healthcare industry of new Royal ransomware
The US Department of Health and Human Services (HHS) warned the healthcare community about human-operated Royal ransomware that has been used to attack the sector since 2022.
Read more about US Health Department warns healthcare industry of new Royal ransomware
Retail giant Vevor leaked user location and payment data for almost five months
An online retailer specializing in tools and equipment for DIYers and professionals left a database with sensitive user information, including payment details, open to the public.
Read more about Retail giant Vevor leaked user location and payment data for almost five months
Android app with over 5m downloads leaked user browsing history
The Android app Web Explorer – Fast Internet left an open instance, exposing a trove of sensitive data that malicious actors could use to check specific users’ browsing history.
Read more about Android app with over 5m downloads leaked user browsing history
Russian hackers use western networks to attack Ukraine
A Fortune 500 company, dam monitoring system, and organizations in the UK and France had their networks to launch cyberattacks on Ukraine.
Read more about Russian hackers use western networks to attack Ukraine
Sony and Lexar-trusted encryption provider leaked sensitive data for over a year
ENC Security, a Netherlands software company, had been leaking critical business data since May 2021.
Read more about Sony and Lexar-trusted encryption provider leaked sensitive data for over a year
Attack of drones: airborne cybersecurity nightmare
Once a niche technology, drones are about to explode in terms of market growth and enterprise adoption. Naturally, threat actors follow the trend and exploit the technology for surveillance, payload delivery, kinetic operations, and even diversion.
Read more about Attack of drones: airborne cybersecurity nightmare
Rise of deepfakes: who can you trust in the metaverse?
In this new virtual world of the metaverse, people may not always be who they seem.
Read more about Rise of deepfakes: who can you trust in the metaverse?
Conversation hijacking: when trusted person becomes your worst enemy
Given the tremendous growth in phishing attacks in recent years, many of us have become wary of suspicious-looking emails that contain links designed to encourage us to share passwords and allow criminals to deliver malware or steal money.
Read more about Conversation hijacking: when trusted person becomes your worst enemy
Weakest passwords of 2022
Despite all the warnings, shockingly high numbers of people are still using easily guessable passwords such as swear words, celebrity names, cities, animals, or keyboard sequences, with half of those observed consisting of just one word.
Read more about Weakest passwords of 2022
How to fight back if your government shuts internet down
In a digital world where the lines between online and offline are disappearing, life without internet access is unimaginable. But the rise of internet shutdowns and online censorship during political instability is a trend that nobody can afford to ignore.
Read more about How to fight back if your government shuts internet down
Ransom gangs function just like McDonald's, researchers find
As more organizations fall victim to ransomware, we dive into the anatomy of modern ransomware gangs, dissecting their operations.
Read more about Ransom gangs function just like McDonald's, researchers find
Magecart attacks: how your credit card data gets stolen from e-commerce sites
Threat actors continue to conduct Magecart attacks to steal financial data and personal information from e-commerce platforms. Let’s look at the attack chain and taxonomy for this illegal practice and countermeasures to mitigate them.
Read more about Magecart attacks: how your credit card data gets stolen from e-commerce sites
Thomson Reuters collected and leaked at least 3TB of sensitive data
Thomson Reuters left an open database with sensitive customer and corporate data, including third-party server passwords in plaintext format.
Read more about Thomson Reuters collected and leaked at least 3TB of sensitive data
Playing with fire: millions of .git folders exposed to public
Nearly two million .git folders containing vital project information are exposed to the public, the Cybernews research team found.
Read more about Playing with fire: millions of .git folders exposed to public
TikTok's top hacker enjoys account takeovers
Yusuf, a 23-year-old bug bounty hunter from Kurdistan, Iraq, is one of TikTok's top contributors. Hacking big tech companies started as a hobby, Yusuf told Cybernews.
Read more about TikTok's top hacker enjoys account takeovers
Curb your access privileges, Microsoft tells system admins
Microsoft’s recent security update might be good news for the computer industry, but some system administrators might be reluctant to enable it – as it entails curtailing their unlimited access privileges.
Read more about Curb your access privileges, Microsoft tells system admins
Retailer hit with ransomware after leaving customer data exposed
Online retailer Esquimal leaked the data of thousands of users via an open server. Threat actors apparently noticed this and hit the company with ransomware.
Read more about Retailer hit with ransomware after leaving customer data exposed
Hackable factory robots could injure workers, warns cyber expert
A low-skilled hacker could be just five easy steps away from remotely controlling heavy industry machines, putting workers at risk of injury or worse – that’s the verdict from one cybersecurity firm.
Read more about Hackable factory robots could injure workers, warns cyber expert
Harvard Business Publishing licensee hit by ransomware
Threat actors got to a database with over 152,000 customer records before its owner, the Turkish branch of Harvard Business Review, closed it. Crooks left a ransom note, threatening to leak the data and inform authorities of the EU’s General Data Protection Regulation (GDPR) violations.
Read more about Harvard Business Publishing licensee hit by ransomware
Protecting infrastructure: it’s impossible to stay alert all the time – interview
Unlike computers, humans grow tired of being “always alerted” – even in the face of the gravest of dangers.
Read more about Protecting infrastructure: it’s impossible to stay alert all the time – interview
