The U.S. messaging giant Twilio has been accused of stealing 33 million phone numbers over the past week as a result of a hacker’s exploit. Authy, a popular two-factor authentication app owned by Twilio that uses the phone numbers…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Ministry of Justice Workers’ Online Comments Highlight Workplace Communication Risks
Ministry of Justice employees referred to a woman as a “bitch” in an online conversation, which she later received a copy of, serving as a reminder of the importance of careful workplace communication, says an employment lawyer. Academic and…
Hackers Attack HFS Servers to Install Malware and Mine Monero
Cybersecurity researchers have identified a wave of attacks targeting outdated versions of the HTTP File Server (HFS) software from Rejetto, aiming to distribute malware and cryptocurrency mining tools. These attacks exploit a critical security flaw known as CVE-2024-23692, which…
Behind the Scenes: How Patelco Responded to the Ransomware Threat
Patelco Credit Union, a prominent financial institution based in Dublin, has been thrust into the spotlight due to a crippling ransomware attack. With over half a million members affected, the situation underscores the critical importance of robust cybersecurity measures for…
Ransomware Extortion Demands Increase to $5.2 Million Per Attack
Ransomware demands are skyrocketing in 2024, with the average extortion demand per ransomware attack exceeding $5.2 million per incident in the first half of the year. Following an attack on India’s Regional Cancer Centre (RCC) on April 20, a…
Fintech Frenzy as Affirm and Others Emerge as Victims in Evolve Breach
The recent attack on one of the largest financial services providers has led to a problem for many companies that work with the provider, two of which have already alluded to possible negative implications for customer data due to…
Indonesia’s Worst Cyber Attack Exposes Critical IT Policy Failures
Indonesia recently faced its worst cyber attack in years, exposing critical weaknesses in the country’s IT policy. The ransomware attack, which occurred on June 20, targeted Indonesia’s Temporary National Data Center (PDNS) and used the LockBit 3.0 variant, Brain…
YouTube: A Prime Target for Cybercriminals
As one of today’s most popular social media platforms, YouTube frequently attracts cybercriminals who exploit it to run scams and distribute malware. These schemes often involve videos masquerading as tutorials for popular software or ads for cryptocurrency giveaways. In other…
Cisco Patches NX-OS Zero-Day Exploited by Chinese Attackers
Cisco patched a NX-OS zero-day, identified as CVE-2024-20399 (CVSS score of 6.0), which the China-linked group Velvet Ant used to deploy previously unidentified malware as root on vulnerable switches. The bug exists in the CLI of Cisco NX-OS Software;…
Gen Z’s Payment Preferences are Transforming Retail and Dining
The future of payment technologies and consumer trends are exploding; GenZ’s are more tuned to flexible, and reliable payment sources. The market is evolving with the needs of this generation and adapting new business models and technologies to meet…
Wise and Evolve Data Breach Highlights Risks of Third-Party Partnerships
Wise, a prominent financial technology company, recently disclosed a data breach impacting some customer accounts due to a ransomware attack on their former partner, Evolve Bank & Trust. The breach has raised significant concerns about the security of third-party…
Inside the Ticketmaster Hack: 440,000 Taylor Swift Fans at Risk
In May, the hacking group ShinyHunters claimed to have gotten personal information from more than 500 million Ticketmaster users and was selling the data on the dark web, and the business has now admitted that consumer data may have been…
This New Ransomware Group Uses Phone Calls to Pressure Victims
Researchers have identified a new ransomware group called Volcano Demon, responsible for at least two successful attacks in the past two weeks. Tim West, an analyst at cybersecurity firm Halcyon, revealed that the group targeted companies in the manufacturing…
HubSpot Investigates Limited Security Breach Affecting Customer Accounts
Cambridge, Massachusetts-based enterprise software provider HubSpot is handling a security compromise that has affected many customer accounts. Less than fifty accounts have been compromised, the business said in an online post. Although the investigation is still ongoing, HubSpot stressed…
RBI Issues Advisory to Support Cybersecurity in Banks
Amid escalating cyber threats, the Reserve Bank of India (RBI) has released a comprehensive advisory to all scheduled commercial banks. This advisory, disseminated by the Department of Banking Supervision in Mumbai, stresses upon the paramount importance of robust cybersecurity…
Maintaining Sanity Amidst Unnecessary CVE Reports
Developers strive to maintain robust codebases, but occasionally, they encounter dubious or exaggerated reports that can disrupt their work. A recent incident involving the popular open-source project “ip” sheds light on the challenges faced by developers when dealing with Common…
New Intel CPU Vulnerability ‘Indirector’ Found
Researchers from the University of California, San Diego, have discovered a new vulnerability in modern Intel processors, specifically the Raptor Lake and Alder Lake generations. This vulnerability, named ‘Indirector,’ can be used to steal sensitive information from the CPU. The…
A World of Novel Risks: Stress-Testing Security Assumptions
The most severe security failures are generally those that we cannot anticipate – until they occur. Prior to 9/11, national security and law enforcement planners expected that airline hijackers would land their planes and reach a settlement — until…
Comparitech Report Reveals Average Ransom Demands of Over $5.2 Million in Early 2024
In the first half of 2024, the average ransom demand per ransomware attack reached over $5.2 million (£4.1 million), according to a new analysis by Comparitech. This figure is derived from 56 known ransom demands issued by cybercriminals from…
SEBI Circular Forces Stock Gaming Apps to Shut Down and Reevaluate
As of May 24, a circular was issued by SEBI prohibiting stock exchanges and intermediaries in India from sharing time-sensitive share price information with fantasy trading platforms that gamify stock trading in real-time. In the week after the Securities…