Security
iPhone security settings: finding the sweet spot between safe and sane
When you buy a door, it ships unlocked by default. An iPhone is no different. It's up to the user to decide how much protection they actually want. Complete security is impossible, even if you ditch smartphones for curl commands on Kali Linux virtual machines. Here's what I do to harden my device without losing my sanity – at least, not all of it.
Read more about iPhone security settings: finding the sweet spot between safe and sane
App built to report Kirk’s critics outs its own users
The app built to “expose” Charlie Kirk’s critics ended up exposing its own users instead.
Read more about App built to report Kirk’s critics outs its own users
US Secret Service dismantles “imminent” nation-state threat targeting NYC telecom infrastructure
The US Secret Service on Tuesday said it has dismantled a massive nation-state threat campaign targeting senior US officials with more than 100,000 hidden networking devices aimed at disrupting New York City’s telecommunications infrastructure.
Read more about US Secret Service dismantles “imminent” nation-state threat targeting NYC telecom infrastructure
Pay to live: scammers spamming fake death threats in Switzerland
Spammers are actively disseminating fake emails with faux death threats. The Swiss National Cyber Security Center (NCSC) urges you to ignore them.
Read more about Pay to live: scammers spamming fake death threats in Switzerland
SonicWall under attack: CISA issues warning after cloud backup breach
SonicWall, a major provider of VPNs, firewalls, and other network security solutions, has alerted users about a data compromise affecting cloud backups for “fewer than 5%” of its firewall install base. Security researchers from Arctic Wolf are warning of a targeted ransomware campaign targeting SonicWall devices.
Read more about SonicWall under attack: CISA issues warning after cloud backup breach
DARPA, NASA software partner claimed by ransomware gang
The company, allegedly under attack, frequently works with US government bodies such as DARPA, the Department of War (DoW), and other key institutions.
Read more about DARPA, NASA software partner claimed by ransomware gang
Mac users targeted by large-scale attacks delivering infostealer malware
Mac users are being targeted by unknown threat actors offering malicious versions of well-known software, including LastPass, 1Password, and Thunderbird, via the developer platform GitHub.
Read more about Mac users targeted by large-scale attacks delivering infostealer malware
Hackers say they nabbed Brazil’s police medical files in massive breach
Hackers claim to have stolen two terabytes of Brazilian Military Police medical records in a breach that could expose officers and their families.
Read more about Hackers say they nabbed Brazil’s police medical files in massive breach
Attackers claim 150K users via data breach of insurance firm AIL
American Income Life (AIL), a major American supplemental insurance company, has allegedly had hundreds of thousands of customer records stolen, exposing personal details and insurance data.
Read more about Attackers claim 150K users via data breach of insurance firm AIL
Criminals plant fake CAPTCHAs on vibe-coding platforms, luring users to phishing pages
AI-powered development platforms are being used to host fake CAPTCHA pages that evade detection and deceive users, leading them to phishing websites, researchers have found.
Read more about Criminals plant fake CAPTCHAs on vibe-coding platforms, luring users to phishing pages
European airports struggle to fix check-in glitch after cyberattack
Some of Europe's biggest airports battled to restore normal operations on Sunday after hackers disrupted automatic check-in systems, with Brussels asking airlines to cancel half of Monday's flight departures due to persistent problems.
Read more about European airports struggle to fix check-in glitch after cyberattack
“Make it a quadruple no:” Why you might not want to connect your Oakley Meta Vanguard to Strava
It’s time we got smarter about using smart glasses.
Read more about “Make it a quadruple no:” Why you might not want to connect your Oakley Meta Vanguard to Strava
New kid on the block Warlock ransomware gang makes moves as attacks surge
The Warlock ransomware group, already linked to an outbreak of Microsoft SharePoint attacks this July, has been stepping up its attacks in recent weeks – and with a twist of ingenuity, Sophos researchers say.
Read more about New kid on the block Warlock ransomware gang makes moves as attacks surge
A lesson from NPM hacks: It’s time to remove the human factor from authentication factors
As the JavaScript ecosystem is still recovering from the massive supply chain attacks targeting NPM software packages, one thing is clear—you need phishing-resistant authentication now, urges Johannes B. Ullrich, Ph.D., dean of research at SANS.edu.
Read more about A lesson from NPM hacks: It’s time to remove the human factor from authentication factors
FBI warns bad actors are spoofing the IC3 cybercrime reporting website
The FBI has warned that cybercriminals are creating fake versions of its Internet Crime Complaint Center (IC3) website, a site used by the public to report online cyber scams.
Read more about FBI warns bad actors are spoofing the IC3 cybercrime reporting website
Amateur porn website users’ data leaked online, hackers claim
Attackers claim they’ve obtained a trove of personal details from MyHomemadePorn, an amateur adult content platform. However, the Cybernews research team believes the data could be fake.
Read more about Amateur porn website users’ data leaked online, hackers claim
Hackers say they’ve jacked SK Telecom’s source code
Hackers claim to have infiltrated SK Telecom’s systems, allegedly stealing source code and exposing sensitive internal projects. It could be the company’s second cyber blow this year.
Read more about Hackers say they’ve jacked SK Telecom’s source code
Hackers claim attack on the US's biggest sushi supplier – again?
A church-run sushi supplier, the biggest in the US, may be facing its second major cyberattack in a year, with new leaked data raising questions about another breach.
Read more about Hackers claim attack on the US's biggest sushi supplier – again?
Hackers claim breach of Italian post, researchers disagree
The Cybernews research team says the supposed leak looks a lot like old data with made-up details.
Read more about Hackers claim breach of Italian post, researchers disagree
iOS malicious deepfakes put Apple users and banks at risk
Security researchers have found a malicious new tool that can inject deepfake videos straight into iOS devices. The tool presents a major risk for identity theft, so Apple users should be wary.
Read more about iOS malicious deepfakes put Apple users and banks at risk
