Security

Multiple vulnerabilities in Mozilla products could put governments and businesses at risk

Mozilla has patched multiple vulnerabilities that could have enabled attackers to hijack user devices.
Read more about Multiple vulnerabilities in Mozilla products could put governments and businesses at risk

Jaguar Land Rover’s source code, tracking data leaked, attackers claim

Britain’s luxury car maker Jaguar Land Rover (JLR) allegedly has had its tracking data, source code, and employee details stolen and leaked.
Read more about Jaguar Land Rover’s source code, tracking data leaked, attackers claim

Critical Apple vulnerability enables “extremely sophisticated” attacks

Apple has urgently patched a zero-day vulnerability in WebKit, the engine powering the Safari web browser and many other apps.
Read more about Critical Apple vulnerability enables “extremely sophisticated” attacks

Russian YouTubers blackmailed into spreading crypto miner

“A massive malware campaign” has been uncovered, with Russian YouTubers being forced to spread crypto-mining malware.
Read more about Russian YouTubers blackmailed into spreading crypto miner

Google coughed up $12M in bug bounties in 2024

Google’s Vulnerability Reward Program paid $11.8 million to the security research community last year to make the company and its products safer.
Read more about Google coughed up $12M in bug bounties in 2024

“Script kiddie” hackers behind Dark Storm cyberattack on Musk's X, security researcher says

A French security researcher on Tuesday claims to have uncovered the identity of the Dark Storm hacker behind the hours-long DDoS cyberattack on Elon Musk’s X social media platform – and it looks as if an Egyptian college student was behind the entire operation.
Read more about “Script kiddie” hackers behind Dark Storm cyberattack on Musk's X, security researcher says

Government leaks nearly two million citizens’ documents

India’s Ministry of Housing and Urban Affairs left an open AWS bucket revealing nearly two million IDs, bank statements, and other files with sensitive citizens’ data.
Read more about Government leaks nearly two million citizens’ documents

Rackspace files allegedly published by Cl0p ransom gang

The Cl0p ransomware gang on Monday claims to have published a slew of files belonging to US-based cloud storage company Rackspace Technology.
Read more about Rackspace files allegedly published by Cl0p ransom gang

Fraudulent DocuSign email seeks to steal credentials

Nearly unstoppable phishing sites are tricking victims into giving access to their corporate networks.
Read more about Fraudulent DocuSign email seeks to steal credentials

Web cameras behind latest ransomware, DDoS incidents serving hackers a launchpad

A series of recent reports have highlighted web and IP cameras as key enablers of devastating cyberattacks, acting as springboards for hackers to deploy malware.
Read more about Web cameras behind latest ransomware, DDoS incidents serving hackers a launchpad

Switzerland mandates 24-hour cyberattack reporting for critical sector

In view of the “increasing threat of cyber incidents,” Switzerland is aiming to bolster cybersecurity defenses by introducing a reporting obligation for cyberattacks on critical infrastructure, effective April 1st.
Read more about Switzerland mandates 24-hour cyberattack reporting for critical sector

A hacker’s ideology on censorship, political social engineering, and Anonymous

Since hackers saw their first dawn in the digital age, we have always fought in various ways to secure and preserve freedom of speech and the free flow of information.
Read more about A hacker’s ideology on censorship, political social engineering, and Anonymous

Hack your way into a paycheck with OSINT skills

Cybersecurity and IT roles within the industry are largely regulated through training and certification courses. Getting certified not only proves you've trained but also that you possess enough knowledge to pass the required exam.
Read more about Hack your way into a paycheck with OSINT skills

Critical bug turns Kibana into potential malware host

Software giant Elastic rolled out security updates, warning users of a critical vulnerability in Kibana’s data visualization dashboard.
Read more about Critical bug turns Kibana into potential malware host

“Free” movie streams expose a million pirates to malware and data theft

Illegal streaming site users risk being infected with dangerous malware and losing all their data, crypto, and accounts, the Microsoft Threat Intelligence team warns. While pirates watch videos, a chain of events unfolds behind the scenes, leading to info stealers being downloaded from GitHub, Discord, or Dropbox.
Read more about “Free” movie streams expose a million pirates to malware and data theft

BianLian ransomware wanna-bes are targeting business execs using the actual mail, FBI says

In a ransomware first, threat actors claiming to be from the BianLian ransomware gang have been found using the regular US postal service to try and extort money from corporate executives, the FBI warned on Thursday.
Read more about BianLian ransomware wanna-bes are targeting business execs using the actual mail, FBI says

Telegram Android flaw enables hackers to disguise malware as videos

Attackers on Telegram are disguising malicious scripts as videos and tricking users into running them. Accidental clicking will leak some user data and may lead to forced malicious app installations.
Read more about Telegram Android flaw enables hackers to disguise malware as videos

Shipping labels reveal addresses in major fashion leak

Apparel Group, a fashion and lifestyle titan distributing Adidas, Asics, Levi‘s, and other world-renowned brands, has leaked several million shipping labels.
Read more about Shipping labels reveal addresses in major fashion leak

Shape-shifting Chrome extensions target wallets, no fix in sight

Malicious browser extensions have the ability to change into legitimate-looking password managers and digital wallets, stealing valuable user information.
Read more about Shape-shifting Chrome extensions target wallets, no fix in sight

Mass federal layoffs will have a "devastating" impact on cybersecurity, former top US security official says

The mass culling of workers from federal payrolls will have a "devastating" impact on cybersecurity and national security, a top former National Security Agency official said on Wednesday.
Read more about Mass federal layoffs will have a "devastating" impact on cybersecurity, former top US security official says