Lenovo webcam flaws, dubbed BadCam, let attackers turn them into BadUSB devices to inject keystrokes and launch OS-independent attacks. Eclypsium researchers found vulnerabilities in some Lenovo webcams, collectively dubbed BadCam, that could let attackers turn them into BadUSB devices to…
Category: EN
APT Sidewinder Mimics Government and Military Agencies to Steal Login Credentials
Cybersecurity researchers have uncovered an extensive phishing campaign orchestrated by APT Sidewinder, a persistent threat actor believed to originate from South Asia, targeting government and military institutions across Bangladesh, Nepal, and Turkey through sophisticated credential harvesting operations that exploit trusted…
Google Confirms Data Breach – Notifying Users Affected By the Cyberattack
Tech giant Google has officially acknowledged a significant data breach affecting its corporate Salesforce database, with the company completing email notifications to affected users as of August 8, 2025. Google revealed on August 5 that one of its corporate Salesforce…
German Mobile Insurance Giant Falls After Devastating Ransomware Attack
A cyberattack has brought down one of Germany’s largest phone insurance and repair networks, forcing the once-thriving Einhaus Group into insolvency. The company, which at its peak generated around €70 million in annual revenue and partnered with big names…
Security Affairs newsletter Round 536 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Embargo…
OMEN Improvements
“If I had an hour to solve a problem, I would spend 55 minutes thinking about the problem and five minutes finding the solution.” – Albert Einstein Introduction: I’m a big fan of graphing password cracking sessions. It’s a good way…
The inside story of the Telemessage saga, and how you can view the data
It turns out no one was clean on OPSEC DEF CON On Saturday at DEF CON, security boffin Micah Lee explained just how he hacked into TeleMessage, the supposedly secure messaging app used by White House officials, which in turn…
Why Be Optimistic About Future Cybersecurity?
Is there a Silver Lining to the Cloud of Cyberthreats? The rise in cyberattacks can paint a bleak picture of the future of cybersecurity. However, such an outlook does not take into account the enormous strides being made within the…
Maximizing Machine Identity Protection Efforts
Why Should Machine Identity Management be a Part of Your Cybersecurity Strategy? The paradigm has shifted in cybersecurity. More and more, organizations are coming to the realization that focusing solely on human identities is not enough to stave off the…
How Secure Are Your Non-Human Identities in the Cloud?
Are Your Cloud-Based Non-Human Identities Adequately Secured? With industries across the globe increasingly migrate their operations to cloud-based platforms, a critical question arises: “How secure are your Non-Human Identities (NHIs) in these digital spaces?” This concern extends across a range…
Pushing Boundaries With Claude Code
Claude Code stormed onto the programming scene when Anthropic launched it in February of this year. It moved, what Andrej Karpathy has called “The Autonomy Slider” from around a three to a solid eight. What this means is that you…
Darknet Market Escrow Systems is Vulnerable to Administrator Exit Scams
Darknet markets, operating beyond the reach of traditional payment processors and legal systems, rely on escrow systems to secure cryptocurrency transactions between buyers and vendors. These systems, using multisignature wallets and automated release mechanisms, aim to ensure transaction security and…
A Special Diamond Is the Key to a Fully Open Source Quantum Sensor
Quantum sensors can be used in medical technologies, navigation systems, and more, but they’re too expensive for most people. That’s where the Uncut Gem open source project comes in. This article has been indexed from Security Latest Read the original…
Embargo Ransomware nets $34.2M in crypto since April 2024
Embargo ransomware, likely a BlackCat/Alphv successor, has netted $34.2M in crypto since mid-2024, researchers say. The Embargo ransomware group has processed $34.2M in crypto since emerging in April 2024, researchers from Blockchain intelligence company TRM Labs report. “TRM Labs has…
Linux-Based Lenovo Webcams’ Flaw Can Be Remotely Exploited for BadUSB Attacks
Cybersecurity researchers have disclosed vulnerabilities in select model webcams from Lenovo that could turn them into BadUSB attack devices. “This allows remote attackers to inject keystrokes covertly and launch attacks independent of the host operating system,” Eclypsium researchers Paul Asadoorian,…
Tips to Protect Yourself on LinkedIn from Fraud, Social Engineering, and Espionage
LinkedIn is a great communication tool for business professionals that informs, provides opportunities, and fosters collaboration — which is exactly why it is attractive to sophisticated cyber adversaries, including aggressive nation state actors, who use LinkedIn for nefarious activities such as…
Nigerian man extradited from France to US over hacking and fraud allegations
A Nigerian man has been extradited from France to face hacking, identity theft, and fraud charges in the… This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto Read the original article: Nigerian man…
FBI Alert: Avoid Scanning This QR Code on Your Phone
The FBI has issued a warning about a new scam in which cybercriminals send unsolicited packages containing a QR code to people’s homes, aiming to steal personal and financial information or install malware on their devices. These packages often…
Russia launches messenger app “Max” that could replace WhatsApp
Russia is planning to make a “national messenger” as an alternative to social media apps like WhatsApp and Telegram. Max, a messenger app released earlier this year by the tech giant VK and supported by state media campaigns, seems to…
Pi-hole Data Breach Exposes Donor Names and Emails via GiveWP Plugin Vulnerability
Pi-hole, a well-known network-level ad-blocker, has confirmed that a security flaw in the GiveWP WordPress donation plugin exposed donor names and email addresses. Pi-hole functions as a DNS sinkhole, blocking unwanted content before it reaches users’ devices. Originally built…