The dark web, often shrouded in mystery and fear, is portrayed as a breeding ground for illicit activities and cybercrime. While this image is not entirely unfounded, the dark web’s origins and uses are more nuanced, with surprising ties…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Cloud Security Report Highlights Misconfiguration and IAM as Top Threats
Traditional cloud security issues once associated with service providers are declining in significance, as per the Cloud Security Alliance’s 2024 Top Threats report, However, new challenges persist. Misconfigurations, weak identity and access management (IAM), and insecure application programming interfaces (APIs)…
2.7 Billion Data Records Leaked Including Social Security Numbers
There has been news about a prominent hacking group that claimed a large amount of sensitive personal information was allegedly stolen from a major data broker about four months ago, but a member of that group has reportedly released…
Ewon Cosy+ Industrial Devices Vulnerable to Serious Security Exploits
Recently, severe security flaws were identified in the Ewon Cosy+ industrial remote access devices, which could allow attackers to gain complete control over the systems. This vulnerability presents a serious risk, as it could lead to unauthorised access, allowing…
Rhysida Ransomware Takes Responsibility for Bayhealth Hospital Breach
The Rhysida Ransomware outfit claims to have infiltrated Bayhealth Hospital in Delaware and is offering the allegedly stolen data for 25 BTC. Bayhealth Hospital is a technologically equipped not-for-profit healthcare facility with around 4,000 employees and a medical team…
Massive Data Breach in Columbus Over 3TB Files Leaked by Rhysida Ransomware Group
Columbus is grappling with the fallout from a significant data breach, as the Rhysida ransomware group has begun leaking over three terabytes of stolen data on the dark web. The breach, which targeted the city’s employees, comes after two…
Urgent Call for EPA Cyber Strategy to Safeguard Water Infrastructure
A new watchdog report published by the US government’s Environmental Protection Agency says the EPA must develop a comprehensive plan of action to counter the increasing number and sophistication of cybersecurity threats facing the utilities. In the last few…
Italy Demands Cybersecurity Safeguards from Dongfeng for New Auto Plant Investment
Italy is demanding that Dongfeng Motor Group Co., a prominent Chinese automaker, agree to stringent cybersecurity and data protection measures as a condition for supporting the establishment of a new plant in the country. According to sources familiar with…
The UK Erupts in Riots as Big Tech Stays Silent
For the past week, England and parts of Northern Ireland have been gripped by unrest, with communities experiencing heightened tensions and an extensive police presence. Social media platforms have played an unjust role in spreading information, some of it…
India’s Largest Crypto Theft: INR 2,000 Crore Stolen from WazirX Exchange Wallet
In a shocking incident that marks India’s largest crypto theft to date, nearly ₹2,000 crore (approximately $230 million) worth of cryptocurrencies were stolen from a wallet associated with the WazirX exchange last month. This massive theft has resulted in…
18-Year-Old Vulnerability in Firefox and Chrome Actively Exploited in Cyber Attacks
A security vulnerability, identified 18 years ago and known as “0.0.0.0 Day,” has been discovered to allow malicious websites to bypass security measures in Google Chrome, Mozilla Firefox, and Apple Safari. This vulnerability enables these websites to interact with…
Researchers Demonstrate How Attackers Can Exploit Microsoft Copilot
Security researcher Michael Bargury revealed serious flaws in Microsoft Copilot during the recent Black Hat USA conference, demonstrating how hackers might be able to use this AI-powered tool for malicious purposes. This revelation highlights the urgent need for organisations…
Researcher Saves Six Companies from Ransomware by Exploiting Security Flaws in Ransomware Gangs’ Infrastructure
A security researcher has revealed that six companies were saved from potentially paying significant ransom demands due to security flaws found in the web infrastructure of the ransomware gangs targeting them. In a rare win for the victim organizations,…
AI and the Legal Framework: A Critical Turning Point
It is no secret that the rapid advancement of generative artificial intelligence (AI) is transforming several industries – including the legal sector. Using AI, lawyers and legal departments can be able to handle all sorts of tasks from standard…
Experts Find Sinkclose Bug in Millions of AMD Processors, Hard to Patch
A recently found major security flaw called ‘Sinkclose’ impacts virtually all of the AMD’s processors released since 2006. The vulnerability allows threat actors to deeply infiltrate into a system, making it difficult to identify and eliminate the malicious software. According…
DevSecOps Teams Face Regular Outages, Cyberattacks, and Data Breaches
The past year has seen a sharp rise in cyber attacks targeting popular DevOps platforms like GitHub, Bitbucket, GitLab, and Jira. These platforms, which are crucial for developers and IT operations teams, have faced growing threats that disrupt their services…
‘0.0.0.0 Day’ Vulnerability Puts Chrome, Firefox, Mozilla Browsers at Risk
A critical security bug known as “0.0.0.0 Day” has shook the cybersecurity world, leaving millions of users of popular browsers such as Chrome, Firefox, and Safari vulnerable to future assaults. This vulnerability allows malicious actors to possibly gain access…
CrowdStrike Explains Root Cause of Globat IT Outage
In July 2023, we witnessed a large-scale global breakdown impacting over 8.5 million Microsoft users. The reason? A software update that turned into chaos. Leading cybersecurity company CrowdStrike recently published its root cause analysis, providing insights on the incident. Let’s…
BlackSuit Ransomware: A New Threat on the Rise
The FBI and CISA have alerted organizations about a new ransomware strain known as BlackSuit. This malware is an advanced version of the Royal ransomware, which caused significant disruptions between September 2022 and June 2023. Since becoming active in…
National Public Data Hacked: Personal Information of Millions at Risk
National Public Data, a company specializing in background checks and fraud prevention, has experienced a significant data breach. The data collected by the company has reportedly fallen into the hands of a hacking group known as “USDoD,” which began…