In a developing story that has captured public attention, General Motors (GM) finds itself embroiled in controversy amidst accusations of clandestine surveillance and unauthorised data sharing with insurance companies. The unfolding narrative, spearheaded by investigative journalist Kashmir Hill of…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Is Your VPN Safe? Or Can It be Hacked?
A virtual private network is one of the simplest ways for consumers to secure their internet activity. VPNs utilize tunneling technology to encrypt a user’s online traffic and make it unreadable to prying eyes. This additional layer of security has…
ToddyCat APT Is Siphoning Data on ‘Industrial Scale’
ToddyCat, an advanced persistent threat (APT) gang that targets the government and defence industries, has been seen collecting stolen data “on an industrial scale” from victim organisations in Asia-Pacific. Kaspersky researchers first disclosed details regarding the elusive gang’s actions…
Discord Users’ Privacy at Risk as Billions of Messages Sold Online
In a concerning breach of privacy, an internet-scraping company, Spy.pet, has been exposed for selling private data from millions of Discord users on a clear web website. The company has been gathering data from Discord since November 2023, with…
Cyberattack Fallout: UnitedHealth Reveals Personal Data Breach Impact
As part of its ongoing data breach response, UnitedHealth Group has informed its subsidiaries, Change Healthcare, that they have recently experienced a data breach. Following the February cyberattack on its subsidiary Change Healthcare, UnitedHealth Group revealed on Monday that…
Unveiling Vulnerabilities in Microsoft PlayReady DRM: Impact on Streaming Platforms
In a meticulous research endeavor, Security Explorations, a division of AG Security Research, embarked on an exhaustive analysis of Microsoft’s Warbird and Protected Media Path (PMP) technologies. The culmination of this investigation has unearthed critical deficiencies within the security…
HelloKitty Ransomware Renames to ‘HelloGookie,’ Unveils CD Projekt and Cisco Data
The operator behind the HelloKitty ransomware has rebranded it as ‘HelloGookie,’ with passwords for previously leaked CD Projekt source code, Cisco network data, and decryption keys from earlier attacks being released. Identified as ‘Gookee/kapuchin0,’ the threat actor claims to…
Here’s How to Remove Unnecessary Files from Your Android Phone’s Web Browser
The web browser on your Android phone collects a significant amount of data from the websites you visit, much of which is unnecessary to keep on your device. Regardless of whether you use Google Chrome, Mozilla Firefox, or Samsung…
Where Hackers Find Your Weak Spots: A Closer Look
Social engineering is one of the most common attack vectors used by cyber criminals to enter companies. These manipulative attacks often occur in four stages: Info stealing from targets Building relationships with target and earning trust Exploitation: Convincing the target…
Malware Author Lures Child Abusers Into Honeytrap to Extort Them
You rarely root for online criminals, but a new malware campaign targeting child exploiters does not make you feel awful about the victims. Since 2012, threat actors have developed a range of malware and ransomware that impersonate government agencies…
Stock Market Scam in Bengaluru: Businessman Loses Rs 5.2 Crore
In a recent cybercrime incident, a 52-year-old businessman from Bengaluru fell victim to a stock market scam, losing a staggering Rs 5.2 crore. The victim, referred to as Sharath for anonymity, reported the incident to the cybercrime police on April…
Dark Web Nightmare: Scots NHS Patient Data Breach Exposes Medical Files
Following a major data breach at NHS Dumfries and Galloway, patients can access their private medical records online with just a few clicks. It has been reported that an extremely large amount of data has been stolen from the…
Cyber Attack Hits UK’s Carpetright, Affecting Customer Orders
Carpetright, an eminent flooring retailer in the UK, has fallen victim to a cyber attack, causing disruption to its operations and affecting hundreds of customer orders. Last week, hackers targeted the flooring specialist’s head office in Purfleet, Essex, by…
Wells Fargo Data Breach: Safeguarding Customer Information in a Digital Age
In a digital age where data breaches have become all too common, the recent disclosure of a data breach at Wells Fargo, a prominent multinational financial services corporation, has once again brought cybersecurity concerns to the forefront. The breach,…
MITRE Breach: State Hackers Exploit Ivanti Zero-Days
A state-backed hacking group successfully breached MITRE Corporation’s systems in January 2024 by exploiting two Ivanti VPN zero-day vulnerabilities. The incident was detected after suspicious activity was observed on MITRE’s Networked Experimentation, Research, and Virtualization Environment (NERVE), an unclassified collaborative…
Indian Banks Mull New Move for Faster Freezing of Scammers’ Accounts
Indian banks have proposed integrating their systems with the National Cybercrime Reporting Portal (NCRP), a division of the ministry of home affairs, which could enable a quicker freeze on fraudulent accounts in the wake of a cyberattack. This is…
Survey Finds Two-Thirds of Leading Pharmas Restrict ChatGPT Usage, While Many in Life Sciences Industry Deem AI ‘Overrated’
In the ongoing debate over the integration of artificial intelligence (AI) into various industries, the biopharmaceutical sector is taking a cautious approach. According to a recent survey conducted by ZoomRx among over 200 professionals in life sciences, more than…
Data Breach at Real America’s Voice: User Information Compromised
In the past few weeks, a group of homosexual, furry hackers called SiegedSec has hacked the far-right media outlet Real America’s Voice, and they have taken it down. As well as hosting far-right commentators such as Steve Bannon and…
Drop in ransomware payment, 2024 Q1 sees a record low of 28%
Ransomware actors have encountered a rocky start in 2024, as indicated by statistics from cybersecurity firm Coveware. Companies are increasingly refusing to acquiesce to extortion demands, resulting in a record low of only 28% of companies paying ransom in…
Rise In Cybercrime: Dark Web Fueling Credential Attacks
In an unsettling situation, cybercriminals are increasingly turning to credential theft as a lucrative business, aided by the rise of infostealer malware attacks. Over the past three years, these threat actors have capitalised on the opportunity, compromising millions of…