Cybersecurity discourse heavily emphasizes prevention, yet often neglects post-breach strategies. While we invest significant effort in establishing protocols to avert attacks, breaches remain an unavoidable reality. The “IBM Cyber Security Intelligence Index” report highlights human error as a leading…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Cybercriminals Are Becoming More Proficient at Exploiting Vulnerabilities
According to Fortinet, cybercriminals have their sights on the increasing number of new vulnerabilities triggered by the expansion of online services and applications, as well as the rapid rise in the number and variety of connected devices. It’s only…
Europol Confirms Web Portal Breach: No Operational Data Stolen
In a recent incident, Europol’s Europol Platform for Experts (EPE) portal experienced a security breach. The breach occurred within a closed user group, raising concerns about data security and operational integrity. In this blog post, we delve into the details…
Understanding Vishing and Quishing: Protecting Yourself Against Telephone and QR Code Scams
In our digitally interconnected world, cybercriminals continuously devise new methods to exploit technology for their malicious intents. Two prevalent schemes gaining traction are vishing and quishing scams. These fraudulent activities capitalize on telephone calls and QR codes to deceive…
Dell API Abused to Steal 49 Million Customer Records in Data Breach
The threat actor responsible for the recent Dell data breach stated that he scraped information from 49 million customer records via a partner portal API that he accessed as a phony organization. Dell had begun sending alerts to customers informing…
Understanding the Complexities of VPNs: Balancing Privacy and Security in the Digital Age
Virtual private networks (VPNs) are crafted to safeguard online privacy through the encryption of internet traffic and concealment of IP addresses, thereby preventing the determination of user locations. This functionality becomes apparent when users attempt to access websites or…
WordPress Vulnerabilities, Exploiting LiteSpeed Cache and Email Subscribers Plugins
In recent cybersecurity developments, hackers have been leveraging a critical vulnerability within the LiteSpeed Cache plugin for WordPress to exploit websites running outdated versions. LiteSpeed Cache, a popular caching plugin utilized by over five million WordPress sites, is designed…
Cyber Crime Wave: Chinese Scammers Target Europe with Fake Designer Brands
In the last couple of weeks, there has been an increase in the number of people who have been duped into sharing their card details and other personal information with a network of fake online designer shops that are…
Invoke AI Introduces Refined Control Features for Image Generation
Invoke AI has added two novel features to its AI-based image generation platform. According to the company, two new features—the Model Trainer and Control Layers—provide some of the most refined controls in image generation. Both apps provide users granular…
Dell Data Breach Exposes Personal Information Of 49 Million
Dell, the renowned computer manufacturer, has issued a cautionary notice to its customers regarding a disconcerting data breach. The breach, which affects an estimated 49 million customers, involves unauthorised access to an online portal containing sensitive customer information. Dell…
Ascension Cyber Attack Heightens Focus on Healthcare Cybersecurity Measures
The healthcare sector is increasingly targeted by cybercriminals, as evidenced by recent high-profile attacks that disrupt services and highlight vulnerabilities in this critical industry. The recent cyber attack on Ascension, in particular, has raised concerns due to its significant…
Microsoft Introduces Innovative AI Model for Intelligence Analysis
Microsoft has introduced a cutting-edge artificial intelligence (AI) model tailored specifically for the US intelligence community, marking a leap forward in secure intelligence analysis. This state-of-the-art AI model operates entirely offline, mitigating the risks associated with internet connectivity and…
New Cuckoo Malware Targeting macOS Users to Steal Sensitive Data
Cybersecurity experts have identified a new information stealer targeting Apple macOS computers that is intended to establish persistence on compromised hosts and function as spyware. Kandji’s malware, dubbed Cuckoo, is a universal Mach-O binary that can execute on both…
The Mask: A Resilient Espionage Group Returns After a Decade
An APT group that has been missing for over a decade has reappeared in a cyber-espionage campaign aimed at organizations in Latin America and Central Africa. The Mask’s history Origins: The Mask first appeared in 2007, operating with stealth and…
Unpatchable VPN Vulnerability Exposes Data to Attackers: What You Need to Know
In a recent revelation that has sent shockwaves through the cybersecurity community, researchers have unearthed a significant vulnerability in virtual private networks (VPNs) dubbed TunnelVision. This flaw, described as deep and unpatchable, poses a substantial threat to data security,…
Health Care Network in Crisis: Cyberattack Shuts Down Operations Across US
After a cyberattack this week, the largest healthcare system in the United States is diverting ambulances to “several” of its hospitals, the company said Thursday. In a statement released Thursday evening by Ascension Hospital, a nonprofit network based in…
Why Active Directory Is A Big Deal?
In a cutting-edge study by XM Cyber and the Cyentia Institute, a comprehensive analysis has unveiled a startling reality: a staggering 80% of cybersecurity vulnerabilities within organisations stem from issues related to Active Directory. This might sound like tech…
Malware Lurking in Minecraft Source Packs
In the world of gaming, customization is king. Players love tweaking their favourite games to make them even more exciting. But while mods and customizations can enhance your gaming experience, they can also hide dangerous threats. A new version of…
The 2023 USG Data Breach: 800 Accounts Compromised, A Closer Look
The Breach: Scope and impact The University System of Georgia (USG) notified 800,000 people about data breaches during the 2023 Clop MOVEit attacks. USG is a state government body that oversees 26 public colleges and universities in Georgia, serving approximately…
Akamai Expands into API Security with $450 Million Noname Deal
It was founded in 2020 and is currently one of the top API security vendors in the world. After emerging from stealth in a year, Noname has reached unicorn status, as of 2021. As a result of the $220…