The Verizon 2023 Data Breach Investigations Report (DBIR) presents a comprehensive analysis of global data breaches, offering valuable insights into the contemporary state of cybersecurity threats. In this analysis, we will delve into key findings from the report, including the…
Category: Information Security Buzz
British Airways and Boots Battling Data Breaches, Millions of Customers Affected
Summary: Both British Airways and Boots have recently fallen victim to data breaches, resulting in millions of customers’ personal information being compromised. Hackers accessed the personal information of 380,000 British Airways customers and 90,000 Boots customers, including sensitive data such…
Phishin’ Impossible: Reinventing Cybersecurity Awareness Training
Inspired e-Learning’s new cybersecurity awareness training game, Phishin’ Impossible, takes a novel approach in teaching employees about cyber threats. Players assume the role of a white hat hacker tasked with crafting convincing scam emails to fool unsuspecting staff. Players learn…
How Does Android Stack Up vs iOS?
Our recent Threat Report showed that while, on the whole, overall threat detections fell by 13.2%, there was one category that thrived: Android. The category registered a remarkable growth of 57% in detections, driven by a 163% increase in Adware…
Recap Of The Week: Exploring Key News And Events
Meta Faces Hefty €1.2bn Fine For GDPR Breach In EU-US Data Transfers Meta was fined €1.2bn for transmitting consumer data to the US. Ireland’s Data Protection Commission (DPC) punished Facebook for EU data protection violations on Monday. It said Dublin-based…
Augusta Cyberattack Claimed By BlackByte Ransomware Group
After days of doubt, and despite official claims of a “cyber incident,” the BlackByte ransomware gang has claimed credit for the computer attack on the City of Augusta. BlackByte, notorious for attacking the US government and financial institutions as well…
CosmicEnergy, Russian New Strain Of Malware Attacking Electric Grids
Security specialists have detected a new type of malware, named “CosmicEnergy,” that possesses the potential to wreak havoc on key infrastructure systems and electricity networks. The researchers from Mandiant discovered the malware, which they claim has capabilities similar to the…
Data Breach At Apria Healthcare Affects 2 Million People Now Notified
Apria Healthcare, a manufacturer of medical equipment for the home, is sending out breach notifications to roughly two million people whose information may have been stolen in data breaches in 2019 and 2021. Close to two million people in the…
Invisible Chinese Hackers Penetrate American Bases And Guam
According to Microsoft and the “Five Eyes” governments, an invisible Chinese hackers infiltrated and remained undetected in critical infrastructure organizations in the United States and Guam for years. Under the codename Volt Typhoon, the tech giant’s threat intelligence team is…
Buhti Ransomware Adopts Stolen Encryptors For Windows & Linux
The perpetrators behind the budding Buhti ransomware have abandoned their own payload in favor of exploiting vulnerabilities in Windows and Linux using the exposed LockBit and Babuk ransomware families. The cybersecurity firm knows them as Blacktail and is following them.…
Barracuda Alerts Of Breaches In Email Gateways From Zero-Day Flaws
Barracuda, a provider of email and network security solutions, issued a warning to its customers today that a zero-day vulnerability had been exploited to compromise some of their Email Security Gateway (ESG) equipment last week. The email attachment scanning module…
Iranian Hackers Set Sights On Israeli Shipping & Logistics Firms
Based on a research by Tel Aviv-based cybersecurity firm ClearSky, several Israeli shipping and logistics websites were hacked to collect customer data. The business has “low confidence” that the Iranian hackers outfit Tortoiseshell (also known as TA456 and Imperial Kitten)…
What’s Russia Planning?
Back in March, Microsoft released data suggesting that Russian hacker groups were appearing to be preparing for a renewed wave of cyber-attacks against Ukraine, including a ransomware-style threat to organisations serving Ukraine’s supply lines. At the time, Clint Watts, General…
GoldenJackal: Threat Risk For Organizations In Middle East & South Asia
GoldenJackal is a new advanced persistent threat actor that targets government and diplomatic organizations in the Middle East and South Asia. Kaspersky Labs, a Russian cybersecurity company, has been monitoring the group’s actions since the middle of 2020 and has…
12 Ways To Protect Small Businesses From Cyberattacks
Many small businesses believe they are immune to cyberattacks because of their presumed lack of valuable information (such as customer data or computing resources), but this is far from the truth. The allure of a small business to cybercriminals lies…
5 Ways Hackers Will Use ChatGPT For Cyberattacks
Picture this: you are a developer working tirelessly to streamline your workflows and keep up with the ever-increasing demands of your organization. But what if the AI and automation tools you rely on to make your job easier could be…
An Exploding Pentagon In A Fake Photo Sends Twitter Into Frenzy
Earlier yesterday, the stock market took a small fall due to highly realistic AI-generated visuals going popular on Twitter suggesting an explosion near the Pentagon. Many verified Twitter accounts, including a Russian state media account with millions of followers and…
Micron: China Issues Ban On US Chipmaker
The Chinese government has ordered infrastructure operators to stop buying Micron Technology chips. The action follows a US prohibition on using the social video app TikTok on government phones and US limitations on exporting some advanced computer components to China.…
Meta Faces Hefty €1.2bn Fine For GDPR Breach In EU-US Data Transfers
Facebook’s owner Meta has been fined €1.2bn ($1.3m) by EU regulators for violating the General Data Protection Regulation (GDPR), the Irish Data Protection Commission (DPC) announced on May 22, 2023. The Irish watchdog claimed that Meta’s transfers of personal data…
Investigating Risks Through Threat Hunting Capability Guide
Threat hunting is the means of exploring and searching for malicious software or unauthorized users on your network. Since a security information and event management (SIEM) system gives insight into network, endpoint, and application behavior that may indicate an attack,…
Catch Up On This Week’s News and Events
Toyota: Tragic Data Breach, 2 Million Vehicles Affected For Ten Years Toyota revealed a data breach from ten years ago that impacted over 2 million cars. The breach affected their cloud-based Connected service, which is limited to Japanese cars between…
Apple Deploys Emergency Patches To Thwart 3 Zero-Day Threats
VulnerabilitiesApple released security patches for iOS, iPadOS, macOS, tvOS, watchOS, and Safari on Thursday to address three new zero-day issues that are being actively exploited. The three security issues are. 1. WebKit bug CVE-2023-32409 could allow a hostile actor to…
Lemon Group Exploits 8.9 Million Pre-Infected Android Phones
Significant supply chain concerns are posed by the cybercrime organization Lemon Group, which is exploiting millions of pre-infected Android handsets around the world to carry out malicious operations. Cybersecurity firm Trend Micro stated that infected smartphones became “mobile proxies,” or…
18-Year-Old Hacker Charged Over Theft Of 60,000 DraftKings Accounts
According to today’s DOJ announcement, a Wisconsin man named Joseph Garrison, 18, has been accused of breaking into the accounts of about 60,000 customers of the DraftKings accounts for the sports betting website in November 2022. The complaint states that…
Avoiding Reputational Damage by Conquering Insider Threats
Can you buy reputation? Sure you can—who hasn’t clicked on a 5-star item on Amazon with hundreds of (questionably real) reviews? But in times of crisis, that’s a much harder sell. How will you handle a crippling cyber attack? Have…
Unveiling The Power Of Cybersecurity Monitoring Capability Guide
In today’s digital age, where cyber threats continue to evolve, organizations must remain vigilant in protecting their sensitive information and digital assets. Cybersecurity monitoring plays a vital role in this endeavor, acting as a proactive defense mechanism against malicious activities…
DevSecOps Capability Guide
Cybersecurity’s increased influence in this digital ecosystem can be traced to the rise of DevSecOps. Organizations are becoming more aware of the necessity of giving security top priority in their software development procedures as a result of the frequency and…
Key Metrics In Evaluating DevOps Threat Matrix
Another is the codecov breach, where the attack was made on their docker images and credentials, and the private data of thousands of customers were stolen. This shows that the consequences of successful attacks can be severe, as evidenced by these…
Lacroix Shuts Down Facilities After Ransomware Attack
According to reports, international electronics firm Lacroix thwarted a cyberattack on its French (Beaupréau), German (Willich), and Tunisian (Zriba) activity sites. The company claims it has temporarily disabled a number of its online services in order to analyze the damage…
Warning Issued About BianLian Ransomware Attacks By CISA & FBI
CISA & FBI has released a joint Cybersecurity Advisory from government agencies in the United States and Australia to warn businesses about the most recent tactics, methods, and procedures (TTPs) utilized by the BianLian ransomware group. Since June 2022, BianLian,…
US Offers $10 Million For Russian Ransomware Operator’s Capture
Russian hacker Mikhail Matveev was indicted and sanctioned by the United States on Tuesday for allegedly leading the Babuk cybercrime group and serving as a “major actor in the Russian ransomware ecosystem.” Matveev was charged by federal prosecutors in New…
Chinese Hackers Mustang Panda Attacks TP-Link Routers
The Chinese state-sponsored hacking outfit “Camaro Dragon” attacks household TP-Link routers with bespoke “Horse Shell” malware to attack European foreign affairs organizations. Hackers use backdoor virus in custom firmware for TP-Link routers to launch assaults from home networks. According to…
RA Group Hacks Businesses Using Stolen Babuk Source-Code
The ransomware attacks of the recently identified RA Group, the latest threat actor to use the stolen Babuk code, have increased in frequency and severity. Their specialized technique sets them apart from the rest of the Babuk tribe. This week,…
Damage Cyberattack Halts Publication At The Philadelphia Inquirer
Based on reports from The Philadelphia Inquirer, the paper’s operations were severely disrupted over the weekend due to a hack, making it impossible to print the paper’s Sunday issue. The attack was discovered on Saturday morning when staff noticed the…
Merdoor Backdoor Exploits Agencies By The Lancefly APT
South and Southeast Asian government, airline, and telecom institutions have been targeted by a new APT hacking outfit called Lancefly, which employs a variant of the ‘Merdoor’ backdoor malware. Symantec Threat Labs announced today that Lancefly has been using the…
5.8 Million People Affected by Data Breach at PharMerica
On April 8 that the Money Message ransomware organization attacked the national pharmacy network PharMerica and its parent company. The home and community healthcare business BrightSpring Health. Threat actors exposed evidence data, a statement was obtained from BrightSpring, and additional…
Toyota: Tragic Data Breach, 2 Million Vehicles Affected For Ten Years
Recently, Toyota admitted to having one of the worst data breaches in the automotive sector. Approximately 2 million automobiles sold in the business’s home market have had their information put at danger, the company said. Unlikely as it may sound,…
Review Of News and Events That Happened This Week
A rundown of the headlines of news and events from the past week pertaining to ransomware, data breaches, quick response security, and other related topics. Malware Attacks From SmokeLoader And RoarBAT, CERT-UA Warns CERT-UA has reported the spread of SmokeLoader…
How To Avoid Mother’s Day Scams By Protecting Your Purse And Heart
Mother’s Day is a special day celebrated across many countries, including the United States. To commemorate the love and contributions of mothers and mother figures to their families. It most times falls on the second Sunday in May and is…
9 Ransomware Forms Against VMware ESXi Built From Babuk Source Code
As many as nine distinct ransomware families that are able to target VMware ESXi systems have been developed thanks to the disclosure of Babuk (also Babak or Babyk) ransomware code in September 2021. Alex Delamotte, a security researcher at SentinelOne,…
Tech Provider ABB Struck By Black Basta Ransomware Attacks
The Black Basta ransomware assault apparently hampered business activities at the Swiss multinational corporation ABB, a renowned electrification and automation technology provider. ABB has its headquarters in Zurich, Switzerland, and in 2022 expects to bring in $29.4 billion in sales…
10 Web Development Skillset And Key Abilities You Can’t Ignore
Web development involves building and programming websites and apps. It’s different from web design, which focuses on how websites look. Web developers make sure websites work well and are easy to use. They write code using different programming languages depending…
Google Broadens Dark Web Monitoring To Track All Gmail Users
Gmail users now have access to Google’s free dark web monitoring service, which can detect if their email is being shared on hacking forums. Google One, the search giant’s paid subscription service in the United States, already has a dark…
North Korean Hackers Stole 830K Data From Seoul’s Top Hospital
The Seoul National University Hospital (SNUH) was hacked by North Koreans, according to the Korean National Police Agency (KNPA), who were after patients’ personal information and medical records. The crime occurred between May and June of 2021, and the police…
Hacker Pleads Guilty To Twitter’s 2020 Outage, Could Get 70 Years
A citizen of the United Kingdom has entered a guilty plea in connection with the July 2020 Twitter attack that compromised a large number of high-profile accounts and scammed other users. Joseph James O’Connor, whose online alias was PlugwalkJoe, was…
Phishing Ring Busted, Spanish Police Have Arrested 40 People
The National Police of Spain detained 25 persons in Madrid and Seville for alleged bank scams, including 2 hackers, 15 members of a criminal organization, and another 12 people involved in unlawful financial operations. Over 300,000 people may have been…
FBI Disables ‘Sophisticated’ Russian Snake Cyberspying Tool
U.S. officials announced on Tuesday that they had destroyed a worldwide network of compromised computers that Russian intelligence personnel had used to spy on the U.S. and its allies for over 20 years. It has been reported that a branch…
Phishing Ring Bust, Spanish Police Have Arrested 40 People
The National Police of Spain detained 25 persons in Madrid and Seville for alleged bank scams, including 2 hackers, 15 members of a criminal organization, and another 12 people involved in unlawful financial operations. Over 300,000 people may have been…
Severe Ruckus RCE Flaws Utilized By Fresh DDoS Botnet Malware
“AndoryuBot’ is a new malware botnet that infects unpatched Wi-Fi access points for DDoS assaults using a key Ruckus Wireless Admin panel weakness. CVE-2023-25717 allows remote attackers to execute code on susceptible Ruckus Wireless Admin panels version 10.4 and older…
Scanning Plans On Europe’s CSAM May Violate International Law
According to reports, legal experts for the EU have warned that plans to force tech companies to scan customers’ private chats for child abuse (CSEA) content are likely to be struck down by the courts. A contentious clause of the…
LinkedIn Displaces 716 Positions, Pulls Out Its China App
LinkedIn is eliminating 716 jobs and will begin winding down its local jobs app in China as part of the company’s restructuring. In a letter that was sent out today, LinkedIn CEO Ryan Roslanky explained the decision to discontinue the…
Intel BootGuard Secret Keys Compromised During An MSI Breach
Intel is looking into claims that private OEM BootGuard keys are out there after MSI reported a ransomware assault last month. Micro-Star International (MSI), a Taiwanese computer hardware manufacturer, said the previous month in a filing with the Taiwan Stock…
13 Additional Domains Linked To DDoS-for-hire Firms Seized By FBI
13 more domains connected to DDoS-for-hire platforms, sometimes referred to as “booter” or “stressor” services, have been seized, according to a recent announcement from the US Justice Department. The seizures this week are a part of Operation PowerOFF, an international…
NextGen Healthcare Hit By Data Breach, Over 1M+ Details Exposed
Hackers broke into the computers of NextGen Healthcare, an American provider of electronic health record software, and stole the personal information of over a million patients. NextGen Healthcare reported that hackers accessed the personal information of 1.05 million patients, including…
FinServ Ahead Of The Pack In API Transformation
The Financial Services industry (FinServ) has left its mark on the API landscape and continues to provide new reasons for innovation. From the first UK bank that pioneered Open Banking to the booming mobile payment industry, FinServ has prompted –…
Protecting DevOps Workflow From The Threat Of Malicious Packages
The compound word, DevOps, defines an extensive procedure and culture that comprises the process and technology of software planning/development (Dev) and IT operations (Ops). DevOps has helped shorten the time for organizational system development, improving the running of software while attaining…
Malware Attacks From SmokeLoader And RoarBAT, CERT-UA Warns
Based on the Computer Emergency Response Team of Ukraine (CERT-UA), the SmokeLoader malware is now being spread via a phishing campaign using lures centered around invoices. A ZIP folder containing a fake document and a JavaScript file is attached to…
Summary Of News and Events That Happened This week
A summary of news and events that happened this week with ransomware, data breaches, rapid response security, etc. Chatgpt Triumphantly Returns To Italy After …… Tech businesses and regulatory authorities must communicate and cooperate to resolve ChatGPT’s prohibition in Italy…
Constellation Struck By Ransomware Attack, ALPHV Lays Claim
On Thursday, Canadian software firm Constellation Software reported that threat actors had broken into some of its networks and stolen personal information and corporate data. A small number of systems used for internal financial reporting and related data storage by…
8 Top Authenticator App For iOS and Andriod In 2023
Recent data breaches have demonstrated that relying solely on passwords may be insufficient. Hence, the need for online security. A single password is frequently insufficient to protect sensitive data, such as what’s in your bank account or social media accounts. This…
Cisco Issues Urgent Security Warning For End-of-Life Phone Adapters
Cisco has warned that SPA112 2-Port Phone Adapters have a serious security flaw that could be used by a remote attacker to run any code on vulnerable devices. The problem, which is known as CVE-2023-20126, it also has a CVSS…
The Importance Of Endpoint Security When Implementing Zero Trust
Increasing numbers of organisations are moving to a Zero Trust security model. The growing frequency and sophistication of cyber threats is driving the popularity of this model which takes a robust ‘never trust, always verify’ approach to security. The National…
Google Implements Passkeys For Secured Sign-in To Google Accounts
Nearly five months after integrating passkey support into its Chrome browser, the tech giant has started implementing the password-free option for all Google Accounts across all platforms. This enables users to sign into their Google accounts without having to input…
Meta Unravels Social Media Cyber Espionage Operations In South Asia
Hundreds of well-developed fake profiles on Facebook and Instagram were used by three separate threat actors to launch separate assaults on users in Southern Asia. To spread their malware and steal sensitive information, each of these APTs leaned significantly on…
US Government Disengages Try2check Platform On The Dark Web
Denis Gennadievich Kulkov, a Russian national, was indicted by the U.S. government today on charges of running a stolen credit card checking business that made them gather in tens of millions of dollars. Kulkov allegedly made at least $18 million…
Dallas City Hit By Ransomware Assault Affects 2.6 Million People
Locking down some of its IT systems, the city of Dallas, Texas, was able to block the spread of the ransomware onslaught. Dallas City, Texas, is home to over 2.6 million people, which makes it the tenth most populous city…
Level Finance Crypto Exchange Hacked, After Two Security Audits
Over $1 million worth of digital assets were stolen from Level Finance, one of the leading cryptocurrency exchanges in the world. The incident happened on April 29, 2023, despite the exchange having gone through two security assessments and audits in…
FBI Uncovers 9 Crypto Exchanges In Ransomware Laundering
Nine cryptocurrency exchange websites that enabled money laundering for scammers and hackers, including ransomware operators, have been taken down by the FBI and Ukrainian police. According to a press release from the FBI, the ‘crypto exchanges’ operation was supported by…
PornHub Blocked In Utah State Due To SB287 Age Verification Law
In reaction to a new rule requiring websites to verify that a visitor from the state is 18 or older, adult film production company MindGeek has barred entrance to its websites platform in Utah (including PornHub, Brazzers, RedTube, YouPorn, and…
Hackers Take Advantage Of TBK DVR Camera System’s Severe Flaws
The alert notes that the fact that there are tens of thousands of TBK DVRs available under several brands, publicly accessible PoC code, and an easy-to-exploit make this issue an attractive target for attackers. The recent increase in IPS detections…
Optimising Cyber Security Costs In A Recession
Businesses today are facing two acute challenges – the economy and cybercrime. This is forcing CISOs to make some tough decisions about spending. The UK government’s Cyber Security Breaches Survey 2022 found that in the last 12 months, 39% of UK…
Apple Puts First Rapid Security Response Patch On iPhones
As of now, the release of Apple’s initial Rapid Security Response update to the public, which includes security fixes for iOS 16.4.1 and macOS 13.3.1, hasn’t been entirely smooth. According to a support document recently published by the company, RSR…
T-Mobile Data Breach, The Second Since The Year 2023
Although this breach only affected 1,000 customers as opposed to the 37 million affected by the previous one, T-Mobile US Inc. disclosed another data breach, its second disclosed breach in 2023. This is the eighth data breach since 2018. 836…
Ukrainian Government Targeted with Fake Windows Update
Various government entities in the nation have been the target of cyberattacks by Russian nation-state hackers, all based on the Computer Emergency Response Team of Ukraine (CERT-UA). APT28, also known as Fancy Bear, Forest Blizzard, FROZENLAKE, Iron Twilight, Sednit, and…
Chatgpt Triumphantly Returns To Italy After Ban Is Lifted
In a surprising turn of events, the Italian government has now made a decision to lift the ban on OpenAI’s popular chatbot, ChatGPT, less than a month after its initial prohibition. The ban had been enacted over privacy concerns relating…
Weekly Summary Of News And Events This Week
A summary of news and events that happened this week with ransomware, data breaches, the banning of developers’ accounts, etc. Yellow Pages Canada Alerts of Cyberattack The Black Basta cyber attack on Yellow Pages Canada shows the continued threat of…
A Comprehensive Look At Email-Based Threats In 2023
It follows that vectors with greater internet exposure will also attract more attention from threat actors. Because of this, malicious actors frequently exploit public email servers, and a wide variety of cyber dangers can spread through them. We found some…
Severe Flaws In Illumina DNA Sequencing Technology, CISA Warns
The DNA sequencing machines used by genomics major Illumina have been found to include a critical software flaw that might be used by hackers to change or steal sensitive patient medical data. The U.S. Food and Drug Administration and cybersecurity…
50 Crypto Wallets Targeted by Atomic MacOS Malware
Security professionals have issued alerts regarding a new type of malware that targets MacOS devices in an effort to steal sensitive data, including credit card details, credit card expiration dates, and information from over 50 Bitcoin browser extensions. The threat,…
Google Bans And Deletes 173K Bad Developers Accounts In 2022
According to an update released yesterday, Google is making it more difficult for unscrupulous developers to publish their software on its Play Store while also deleting a significant number of bad accounts. The tech leader claimed that in 2022, it…
35M Downloads Of Android Minecraft Clones Spreads Adware
A group of 38 Minecraft-like games on Google Play attacked devices with the Android adware “HiddenAds,” which loaded ads in the background without the user’s knowledge. This made money for the games’ creators. Minecraft is a successful sandbox game with…
Good, Better And Best Security
What does a “good” cyber-security programme look like? How can we, in our role as Chief Information Security Officer (CISO), work to improve the effectiveness of the policies and practices implemented in our organisations? Measuring activity does not necessarily have…
CommScope Workers Left In The Dark After A Ransomware Attack
Employees at CommScope claim they haven’t heard from officials about the company’s response to a ransomware assault that allowed hackers to steal vast amounts of corporate and employee data from its networks in more than a week. The IT firm…
Microsoft Admits PaperCut Servers Used In LockBit and Cl0p Ransomware
Businesses and organizations of all kinds are increasingly concerned about ransomware attacks, and recent information from Microsoft reveals that even well-liked software applications can be exposed to attack. Microsoft recently acknowledged that the PaperCut servers were utilized to distribute the…
Google Goes After CryptBot Distributors Stealing Sensitive Data
Google has filed a lawsuit against individuals who use Cryptbot to infect Google Chrome users and steal their data. As part of its efforts to combat this malicious activity, Google is taking down the malware infrastructure associated with Cryptbot. In…
RCE Attacks Against Thousands Of Apache Superset Servers
At its default settings, Apache Superset is vulnerable to authentication bypass and remote code execution, allowing attackers to read and alter data, gather passwords, and issue commands. Apache Superset is a top-level project of the Apache Software Foundation since 2021.…
Saas Security: The Need For Continuous Sustenance
Data has emerged as a company’s most essential asset in the modern world. Every security team prioritizes protecting sensitive data, but changes to the perimeter have forced teams to adapt how they approach enterprise security. SaaS adoption has skyrocketed in…
VMware Resolves Crucial Pwn2Own Zero-Day Exploit Chain
To address zero-day vulnerabilities that might be used to achieve code execution on computers using unpatched versions of VMware’s Workstation and Fusion software hypervisors, the company has provided security upgrades. On the second day of the Pwn2Own Vancouver 2023 hacking…
Large 2,200x DDoS Amplification Assault Due To New SLP Flaw
Threat actors can conduct enormous denial-of-service attacks with 2,200X amplification thanks to a new reflected Denial-of-Service (DoS) increasing its vulnerability in the Service Location Protocol (SLP). Researchers at BitSight and Curesec identified this weakness as CVE-2023-29552. They claim that around…
Exposed Artifacts Seen In Misconfigured Cloud Software Registries
Thousands of exposed artifacts in cloud software repositories and registries with more than 250 million artifacts and over 65,000 container images have been found by cloud security company Aqua Security. Aqua found that even huge firms unintentionally exposed secrets, used…
OTP Codes Synchronized Across Devices With Google Authenticator
The upgrade matches a feature that rival authenticator apps and password-manager services have long provided. Thanks to Google’s Authenticator app, you no longer need to keep your one-time codes in a single location to secure your accounts. They can instead…
KuCoin Twitter Account Hacked, Losses $22.6K In Crypto Scam
A fake giveaway fraud that resulted in the theft of more than $22.6K in cryptocurrency was promoted by attackers after their access to KuCoin’s Twitter account was compromised. The bitcoin trading and exchange platform has pledged to fully compensate victims…
Yellow Pages Canada Alerts of Cyberattack As Black Basta Leaks Data
Yellow Pages Canada, an online and print directory service provider, has stated that it was the victim of a cyber attack that resulted in losing its customers’ data. The hacking organization Black Basta claimed to have collected personal information from approximately…
Tails Operating System: The Means To Privacy and Security On Internet
When it comes to cybersecurity and privacy, people are always on the lookout for solutions that will ensure their safety online. This solution that has been gaining popularity in recent times is the Tails operating system. Tails is a Linux-based…
Summary Of News And Events That Happened This Week
Here is a rundown of news and events that happened over the week. Chinese App Uses Android Flaw To Spy On Users, CISA Warns A top US security firm has given the government until May 4 to patch a zero-day…
GhostToken GCP Bug Gives Entry To Attackers Into Google Accounts
Security experts have revealed information about a Google Cloud Platform (GCP) zero-day vulnerability that has since been patched that may have allowed threat actors to hide an irremovable, malicious application inside a victim’s Google account. The flaw, dubbed GhostToken by…
Cisco and VMware Issues Security Updates For Critical Flaws
Cisco Systems has taken steps to enhance the security of its products by releasing a series of updates that fix critical vulnerabilities in its system. These vulnerabilities were identified as being capable of being exploited by attackers, who could then…
New Ransomware Attack Hits Health Insurer Point32Health
A ransomware attack affecting several of its systems is being dealt with this week by a New England health insurance company that provides services to over two million people. According to Point32Health, created through the merger of Harvard Pilgrim Health…
Daggerfly Cyberattack Campaign Strikes African Telecom Providers
African Telecom Service Providers Targeted by Daggerfly Cyberattack Campaign. Recently, the Daggerfly cyberattack campaign, aimed at numerous institutions worldwide, shocked the cybersecurity community. Experts describe this sophisticated attack effort as one of the most sophisticated and hazardous cyberattacks since it has caused…
Raspberry Robin Adopts Initiates Evasion Techniques
Security researchers at Check Point Research (CPR) have released an advisory that details the unique evasion techniques employed by threat actors who rely on the Raspberry Robin malware to avoid detection. In the advisory published on Tuesday, CPR experts explain the novel malware…