Security
Latrodectus malware detected on over 44,000 IP addresses
Over 44,000 IP addresses were infected with dangerous Latrodectus malware, which is used to deploy banking trojans, before a law enforcement takedown during this month's Operation Endgame, new data reveals.
Read more about Latrodectus malware detected on over 44,000 IP addresses
Privacy nightmare: Microsoft OneDrive gives AI chatbot full read access to user content
Users discover that letting an AI chatbot or other app access a single file on OneDrive also grants it access to their entire OneDrive content.
Read more about Privacy nightmare: Microsoft OneDrive gives AI chatbot full read access to user content
This security specialist earns $700k annually. Would you want their job?
Quite a few people in charge of cybersecurity at big companies earn close to a million dollars per year. However, with the dream salary comes nightmare responsibilities.
Read more about This security specialist earns $700k annually. Would you want their job?
Major data leak hits Unimed, 14M patient-doctor messages exposed
The world’s largest healthcare cooperative, Unimed, left an exposed instance that leaked millions of patient-doctor messages.
Read more about Major data leak hits Unimed, 14M patient-doctor messages exposed
Unheard of: Chinese hackers use Google Calendar to control malware and steal data
Chinese state-sponsored cyber espionage group APT41, also known as HOODOO, abused Google Calendar as a command and control tool. The specialized malware stored encrypted commands and exfiltrated data as calendar events.
Read more about Unheard of: Chinese hackers use Google Calendar to control malware and steal data
Microsoft to unify Windows app updates under a centralized system
Microsoft wants to unify future app updates on Windows under a single update system – the Windows Update orchestration platform. The preview is currently available for developers and product teams.
Read more about Microsoft to unify Windows app updates under a centralized system
Red teaming – why cybersecurity’s coolest job is basically Top Gun for hackers
Red teaming is cybersecurity’s top defense – ethical hackers simulate attacks to find weaknesses before real hackers do, helping organizations stay secure.
Read more about Red teaming – why cybersecurity’s coolest job is basically Top Gun for hackers
Thousands of Asus routers infected with backdoor that survives firmware updates
A new botnet is compromising modern Asus WiFi 6 routers and leaving backdoors that allow attackers to remotely control them even after firmware updates. Researchers warn that 9,000 Asus routers are already infected.
Read more about Thousands of Asus routers infected with backdoor that survives firmware updates
Victoria’s Secret temporarily takes website offline due to security issue
Clothing and lingerie retailer Victoria’s Secret suspended most of the functionality of its website and some in-store services to “address a security incident,” according to a statement posted to the company’s website on Wednesday.
Read more about Victoria’s Secret temporarily takes website offline due to security issue
Everest ransomware gang has a new cash cow – the Middle East, and we’ll tell you why
Move over United States and Europe, the Middle East region of the world is experiencing an uptick in ransomware attacks, including the latest breach of Coca-Cola by the Everest gang just this past week. So, what's the reasoning behind the dramatic increase? Cybernews has the inside story.
Read more about Everest ransomware gang has a new cash cow – the Middle East, and we’ll tell you why
Massive security blunder: Russian nuclear site blueprints exposed in public procurement database
Russia is modernizing its nuclear weapon sites, including underground missile silos and support infrastructure. Data, including building plans, diagrams, equipment, and other schematics, is accessible to anyone in the public procurement database.
Read more about Massive security blunder: Russian nuclear site blueprints exposed in public procurement database
Stay cautious: these fake AI video generators are stealing passwords
Cybercriminals have entered the AI gold rush to spread malware. Fake AI video generators are tempting users and stealing their data.
Read more about Stay cautious: these fake AI video generators are stealing passwords
Hackers say they’ve snatched data from the Salvation Army
One of the largest providers of social services globally, the Christian organization Salvation Army, has been allegedly hit by a ransomware attack.
Read more about Hackers say they’ve snatched data from the Salvation Army
Major data leak exposes 1.6M Etsy, TikTok Shop customer emails
Hundreds of thousands of customer files have been discovered leaking from an unprotected instance. Researchers believe the data exposed mostly American customers of Etsy, Poshmark, and TikTok shops.
Read more about Major data leak exposes 1.6M Etsy, TikTok Shop customer emails
RE/MAX deals with alleged 150GB data theft: Medusa ransomware demands $200K
RE/MAX, an international real estate network with over 9000 offices worldwide, has been allegedly breached by Medusa ransomware, a major threat actor targeting large organizations. Medusa released samples of files and demanded a $200,000 ransom for the erasure of the remaining 150GB.
Read more about RE/MAX deals with alleged 150GB data theft: Medusa ransomware demands $200K
Over 200K fraudulent developers were kicked out of the Apple App Store last year
Apple said it interrupted over $2 billion in potentially fraudulent App Store transactions and stopped cybercriminals from creating a staggering 711 million malicious customer accounts last year alone.
Read more about Over 200K fraudulent developers were kicked out of the Apple App Store last year
Jordan’s major bank data stolen, claim hackers
A major bank in Jordan has allegedly been hit by a ransomware attack. Hackers are threatening to release confidential data if the ransom is not paid.
Read more about Jordan’s major bank data stolen, claim hackers
Germany raises alarm over Windows Server 2025 flaw rated 9.9/10
Germany’s Federal Office for Information Security (BSI) is sounding the alarm about a critical unpatched vulnerability in Active Directory on Windows Server 2025. Microsoft initially estimated “moderate” severity, but the BSI has now raised it to 9.9 out of 10.
Read more about Germany raises alarm over Windows Server 2025 flaw rated 9.9/10
Russian hackers behind attacks on police, NATO, Dutch intelligence says
A previously unknown Russian cyber threat actor hacked the Dutch police and several other Western government organizations while remaining under the radar.
Read more about Russian hackers behind attacks on police, NATO, Dutch intelligence says
Coca-Cola ignores ransom demand, hackers dump employee data
After an alleged ransomware attack, hackers have publicly released Coca-Cola’s internal data.
Read more about Coca-Cola ignores ransom demand, hackers dump employee data
