Tag: CySecurity News – Latest Information Security and Hacking Incidents

Mass Data Scraping Lawsuit Filed by Meta

  As part of a lawsuit filed against the digital surveillance firm Voyager Labs, Meta claims that the company created 38,000 fake, unauthorized accounts to collect 600,000 Facebook users’ personal information.  A federal lawsuit filed by Microsoft has asked a…

5 Updates to Secure Data as Workers Return to Work

According to an Adastra survey, more than 77% of IT decision-makers in the U.S. and Canada estimate their organizations will likely experience a data breach over the next three years. Employees should be aware of data security practices since the…

CircleCI Breach: Encryption Keys & User Data Seized

  A software company CircleCi has acknowledged that a data breach that occurred last month resulted in the theft of customers’ personal information.  After an engineer contracted data-stealing malware that made use of CircleCi’s 2FA-backed SSO session cookies to get…

To Get Around Security, Hackers Use This Old Trick

  An old vulnerability in Intel drivers is being exploited by cybercriminals in an attempt to gain access to networks. This is in the form of a security flaw that enables them to get around cybersecurity measures and bypass security…

Norton LifeLock Issues a Warning for Password Manager Account Breach

  Customers of Norton LifeLock have been the victims of a credential-stuffing attack. In accordance with the company, cyberattackers utilised a third-party list of stolen username and password combinations to attempt to hack into Norton accounts and possibly password managers. …

Ransomware Gangs are Starting to Forego Encryption

  Criminal organisations are now employing a new strategy to ensure ransomware payouts: they skip the step of encrypting target companies’ systems and instead go straight to demanding the ransom payment for the company’s valuable data. Malicious hackers are constantly…

CircleCI Breach : Encryption Keys & User Data Seized

  A software company CircleCi has acknowledged that a data breach that occurred last month resulted in the theft of such customers’ personal information.  After an engineer contracted data-stealing malware that took use of CircleCi’s 2FA-backed SSO session cookies to…

Cisco Fixes a Major Issue in Small Business Routers

Several end-of-life (EoL) VPN routers are affected by a critical authentication bypass flaw that Cisco alerted customers. The issue has publicly available attack code. Hou Liuyang of Qihoo 360 Netlab discovered the security hole (CVE-2023-20025) in the internet management interface…

What’s 6G & its Way Forward?

  Mobile connectivity has come a long way since 1979 when NTT initiated the first generation of cellular networks in Tokyo. 2G and 3G quickly followed 1G. These were voice and text communication networks. The more recent 4G and 5G…

Report: Crypto Crime Hits Record $20 Billion in 2022

  The unlawful use of cryptocurrencies reached a new high of $20.1 billion last year, as transactions involving companies sanctioned by the United States skyrocketed, as per data from blockchain analytics firm Chainalysis released on Thursday. In 2022, the cryptocurrency…

Goodbye, Passwords; Here is What Will Happen Next

  We all have way too many passwords, and they probably are not nearly as secure as we believe. Passkeys are the next step in the evolution of passwords and aim to make passwords obsolete in favour of a more…

Is AI Transforming the Cybersecurity Sector?

Artificial intelligence and machine learning (AI/ML) systems have proven to be effective in improving the sophistication of phishing lures, creating fake profiles, and developing basic malware. Security experts have demonstrated that a complete attack chain may be established, and malicious…

The Treasury of the United Kingdom Considers the Digital Pound Plan

  Several proposals are being considered by the government, including the introduction of a “digital pound,” according to the Treasury’s economic secretary.  According to Andrew Griffith, the UK intends to become a world leader in the cryptocurrency industry.  There was…

PyPl Hosting Malware and AWS Keys

  The Python package repository PyPI was discovered to be hosting malware and AWS keys. Tom Forbes, a software developer, created a Rust-based application that searched all new PyPI packages for AWS API keys. The tool returned 57 successful results,…

Italian Users Warned of New Info-Stealer Malware Campaign

The Uptycs Threat research team has revealed a new malware campaign, targeting Italy with phishing attacks in order to deploy information-stealing malware on victims’ compromised Windows systems.  According to Uptycs security researcher Karthickkumar Kathiresan, the malware campaign is designed to…

Prototype Pollution-like Bug Variant Found in Python

Prototype Pollution Prototype pollution is a severe vulnerability class associated with prototype-based languages, the most popular among them being JavaScript.  However, a researcher has discovered Python-specific variants of prototype pollution, and other class-based programming languages may also be exposed to…

The PoweRAT Malware Attacks PyPI Users

  The software supply chain security company Phylum has discovered a malicious assault using the PoweRAT backdoor and an information thief that targets users of the Python Package Index (PyPI). The campaign was initially discovered on December 22, 2022, when…

JsonWebToken Library Security Flaw: Used in 20,000+ Projects

In the widely-used open-source project, JavaScript library JsonWebToken researchers from Palo Alto Networks unit 42 found a new high-severity vulnerability –  CVE-2022-23529.  Palo Alto Networks released a security advisory on Monday highlighting how the weakness could be used by an attacker to execute…

What Exactly is DNS-over-HTTPS and Do you Need to Use it?

  Traditional Domain Name System (DNS) traffic, such as user requests to visit specific websites, has been largely unencrypted throughout the history of the internet. This means that every party involved in the DNS value chain that your request goes…

Is Data Safeguarded by an Encrypted Email Service?

Email is the primary form of communication in both our personal and professional lives. Users might be surprised to hear that email was never intended to be secure due to our dependency on it. Email communication carries some risks, but…

Customer Engagement Rethinks After Apple’s Data Privacy Rules

  The changes to Apple’s privacy policy last year were one of those events where the worried predictions turned out to be precisely the opposite of what happened – specifically, marketers will have a significant reduction in their ability to target…

Russian Turla Leveraged Other Hackers’ USB-Delivered Malware

  Russian state-sponsored cyber threat actor Turla victimized a Ukrainian organization in a recent attack. The hackers leveraged legacy Andromeda malware that was executed by other hackers via an infected USB drive, Mandiant reports.  Turla is active since at least…

LastPass Data Leak: Data of 30 Million Users at Risk

What is LastPass Breach? On 22nd December 2022, online password management service LastPass revealed that threat actors can steal sensitive information from user accounts like billing, end-user names, email IDs, IP address info, and telephone numbers.  The leak also includes…

To Avoid Detection, Vidar Stealth Operators Use SM Platforms

  Several days ago, the commercially available off-the-shelf malware BitRat was observed with a newly discovered distribution method for how it was spread. Now, a new information theft malware called Vidar Stealer has been discovered. This malware uses advanced techniques…

Hackers Target Chick-fil-A Customers Credentials

Chick-fil-A- is investigating concerns of suspicious transactions on its mobile app after multiple users claimed that hackers gained their personal data, including bank account details. Customers at Chick-fil-A, a well-known chicken restaurant business, may be the latest targets of hackers.…

Top Cybersecurity News Stories of the Week

  Data breaches have been a worry ever since Elon Musk invested $44 billion in Twitter and fired a sizable portion of the workforce. Now it appears that a security incident from before Musk’s takeover is giving people trouble. This…

From BMW to Ferrari, Automotive Industry Flooded with Vulnerabilties

Automakers struggling with vulnerabilities A range of automakers from Toyota to Acura is affected by vulnerabilities within their vehicles that can let hackers steal personally identifiable information (PII), lock owners out of their vehicles, and even control functions like starting…

Crypto Withdrawals of $8bn Hit Silvergate, a US bank

  Silvergate, the US bank that offers cryptocurrency services, has reported that its clients have withdrawn over $8 billion (£6.7 billion) of their cryptocurrency-linked deposits over the past several weeks.  In the final three months of 2022, roughly one-third of…

Hackers with ChatGPT, Build Malware and Plot Fake Girl Bots

On Friday, a report from Israeli security company Check Point warned companies against the threat actors who have started using OpenAI’s artificially intelligent chatbot ChatGPT to quickly build hacking tools.  Hackers are also working to build other chatbots which will…

FCC Wants Telecom Companies to Notify Data Breaches More Quickly

  The Federal Communications Commission of the United States intends to improve federal law enforcement and modernise breach notification needs for telecommunications firms so that customers are notified of security breaches as soon as possible. The FCC’s proposals (first made…

Hackers Expose Credentials of 200 million Twitter Users

Researchers suggest that a widespread cache of email addresses related to roughly 200 million users is probably a revised version of the larger cache with duplicate entries deleted from the end of 2022 when hackers are selling stolen data from…

How Hackers Can Exploit ChatGPT, a Viral AI Chatbot

Cybernews researchers have discovered ChatGPT, a platform that provides hackers step-by-step instructions on hacking a website. An AI-based chatbot, ChatGPT was launched recently and has caught the attention of the online community.  The team at Cybernews has warned that AI…

Warning: Ransomware Attacks Spreading via Fortinet Kit

  The eSentire’s Threat Research Unit (TRU) confirmed in its recent research that the threat actors are exploiting Fortinet Virtual Private Network (VPN) devices that remain vulnerable to critical authentication bypass vulnerability.  The VPNs were being controlled by third-party providers;…

Search Results Contain Imposter Ads, FBI Warns

  Bogus advertising: a tightrope walk  Since the early days of the Internet, rogue ads have been a particular plague on the Internet. As a user, you never quite know what’s waiting in the browser, such as an irritating pop-up…

WhatsApp Allows Communication Amid Internet Outages

On January 5, WhatsApp revealed a new feature that enables users to connect via proxy servers so they may continue using the service even when the internet is restricted or disrupted by shutdowns. Concept of Whatsapp proxy  When selecting a…

Report States Many Phones To Soon Get Satellite Connectivity

  A new partnership between satellite phone company Iridium and chip giant Qualcomm will bring satellite connectivity to premium Android smartphones later this year. It implies that handsets can communicate with passing satellites to send and receive messages even in…

Police Hacked Thousands of Phones. Was it Legal?

In October 2020, Christian Lödden’s potential clients sought to discuss just one thing, which carried on for a week. Every individual whom the German criminal defense lawyer has contacted had apparently been utilizing the encrypted phone network EncroChat. This information…

Rackspace: Ransomware Bypasses ProxyNotShell Mitigations

  According to Rackspace Technology, a cloud hosting company that provides managed cloud services, the massive December 2 attacks have caused the company to take action. As part of the attack, thousands of small and midsized businesses suffered disruption in…

Ransomware Attacks on U.S. Hospitals Causing Deaths

Every day we are witnessing ransomware attacks, and companies worldwide are investing millions to protect their network and systems from digital attacks, however, it is getting increasingly challenging to fight against cyber threats because cyber attackers do not only use…

Microsoft Announced the End of Support for Windows 7 & 8

Microsoft has published a warning over the imminent end of support for Windows 8.1, which would not receive any updates or patches after January 10th, 2023. According to the research, over 100 million computers were still running Windows 7 as…

Hybrid Cybersecurity: A Need of the Hour

  Training artificial intelligence (AI) and machine learning (ML) models to provide enterprises with hybrid cybersecurity at scale requires human intelligence and intuition. When human intelligence and intuition are combined with AI and ML models, subtleties in attack patterns that…

Why 2023 Could be the Worst Year Ever for Businesses due to Malware?

  2022 was a challenging year for cyberspace businesses. Companies faced ransomware, the continued effects of the SolarWinds and Log4j exploits, and rising cyber insurance premiums. Unfortunately, the consequences of malware have gotten worse year after year.  The costs of…

Train Platform RailYatri Again Suffered a Breach

On Wednesday, Train ticketing platform RailYatri released its statement in which it confirmed that the platform suffered a data breach in December 2022. The confirmation is coming after the Railway Ministry denied such an attack and also remarked that no…

Everything You Need to Know About Crowdsource Security

Crowdsourced Security  Organizations of all sizes conventionally use penetration testing to secure their systems. Pen testing simulates a cyberattack with the goal of exposing security flaws, much like any real attack would. These vulnerabilities are patched up once they are…

WordPress Sites Hit by New Linux Malware

According to an analysis by cybersecurity company Dr. Web, WordPress-based websites are being targeted by an unidentified Linux malware variant. Recognized as LinuxBackDoor.WordPressExploit.1, while it can also operate on 64-bit Linux versions, the Trojan favors 32-bit versions. 30 vulnerabilities in…

How to Shield Businesses from State-Sponsored AI Attacks

  In cybersecurity, artificial intelligence is becoming more and more significant, both for good and bad. The most recent AI-based tools can help organizations better identify threats and safeguard their systems and data resources. However, hackers can also employ the…

SpyNote Strikes: Android Spyware Targets Financial Establishments

  Since at least October 2022, financial institutions have been targeted by a new version of Android malware called SpyNote, which combines spyware and banking trojan characteristics.  “The reason behind this increase is that the developer of the spyware, who…

Pig Butchering Scam: Here’s Everything you Need to Know

  Criminals make billions of dollars via digital tricks including romance scams and business email hacks. And they always begin with a small amount of “social engineering” to deceive a victim into taking an unfavourable action, like transferring money into…

Overreliance on Detection Solutions in Security Stacks

  The typical approach to detection used by organizations is to employ a variety of methods, such as antivirus software, sandbox engines, extensive data analysis, and anomaly detection, among others. This depends on the organization. Through monitoring and spotting, these…

Mysterious Threats of ‘Dark Data’ in Organizations

  Data security is becoming costlier for organizations worldwide and the threats of cyber attacks added pressure on organizations from customers to protect their sensitive information. As a result, several organizations have already invested in new processes to safeguard their…

California’s Consumer Privacy Act has Been Updated

  California’s unique consumer privacy law was strengthened on January 1 as a result of a ballot initiative that 2020 voters endorsed. A new privacy law that puts new requirements on companies to make sure that employees have more authority…

Can you escape Cybersecurity? Maybe No

Suppose you are part of an organization that has any form of an online presence. In that case, you will ultimately have to take initiative to look after the security of the systems, devices, and data. And if driven criminals,…

How Can AI Understand Your Business Needs and Stop Threats?

AI in threat detection In the current complicated cybersecurity scenario, threat detection is just a needle in the haystack.  We have seen malicious actors exploiting everything they can get their hands on, from AI tools, to open-source code to multi-factor…

UAE’s Sincere Efforts to Combat Cybercrime

  The Abu Dhabi Judicial Department (ADJD) held an awareness-raising lecture on “Cybercrime and its Dangers to Society” in conjunction with “Majalis” Abu Dhabi at the Citizens and Community Affairs Office of the Presidential Court as part of its initiatives…

Best Cybersecurity Practices to Instill in Your End-Users

Recently a study has been done on password reuse threats and it was discovered that password reuse is a big security threat to companies worldwide since 64% of people continue to use passwords that have been exposed in a breach. …

Mass Exploits 2022: A Report Covering Most Dangerous Threats

What is the “Year of Mass Exploits?’ Experts at GreyNoise Intelligence have added more than 230 tags since January 1, 2022. It includes detections for more than 160 CVEs. In its annual report titled GreyNoise Intelligence 2022 “Year of Mass…

RedZei Group Targets Chinese Students in U.K.

  Chinese students studying in the UK have been one of the most common targets of scammers. RedZei (aka RedThief) Group, a Chinese-speaking scammer group that operates online and is becoming more common these days, bypasses all the precautions that…

Cybercriminals Stole Data by Spoofing Victim’s Webpage

The BlackCat ransomware group is experimenting with a new method of threatening victims into paying extortion building a fake website on the open internet that displays the personal information that was stolen from the victim.  ALPHV, commonly known as BlackCat ransomware, is…

$3.7B Stolen in Crypto Hacks Targeting DeFi in 2022

  It has been revealed by TRM Labs that a record $3.7 billion worth of crypto funds have been stolen the past year. Of this, 80% have been traced back to attacks against DeFi, as per the research report published…

Snatch Ransomware Targets Volvo Cars

  Volvo revealed in a press release that some of its research and development assets were the target of a cyberattack. The ransomware organization Snatch reportedly released pictures of stolen Volvo papers into the darknet on November 30, according to…

Hackers Trick Victims into Downloading BitRAT Malware

  A brand new malware campaign has been discovered which is using important data stolen from a Colombian bank as a lure in phishing emails to drop a remote access trojan called BitRAT.  As of now, it is being reported…

What Choices Ought to Influence the Supply Chain in 2023?

  Due to the increase in cybercrime, many businesses are infected by viruses and malware that are distributed to them by vendors and business partners.  There has not been a definite plan of action that addresses this as of yet.…

The 5 Most Common Types of Trojans You Should Know About

  Cybercriminals create more complicated and diverse methods of obtaining sensitive data as we become more dependent on technology and entrust it with more of our personal information. There are many different types of harmful malware, including Trojan Horses. But…

This New Encryption Can Make Gmail Safer

  There’s a new way to keep your Gmail safe from prying eyes, and experts say it’s well worth using. Google announced the addition of end-to-end encryption (E2EE) to Gmail on the web, which will allow enrolled Google Workspace users…

POS Malware: Your Business Might Be at Risk

POS malware- Your business might be at risk If you are a business owner that uses a POS system for receiving payments, you should be cautious about the dangers of point-of-sale malware and various threats associated with it.  Malware is…

Crypto Platform 3Commas Attacked

  Cryptocurrency trading platform 3Commas reported that they suffered a data breach in which API data were stolen. Following the incident, an FBI investigation has been called in.  However, the investigation comes after weeks of criticism from users of the…

How to Migrate to the Cloud Securely

  Increasingly, organizations and business units are migrating mission-critical data and systems to the cloud.  Migration to and between all kinds of cloud services is indeed associated with security challenges; however, migration between public cloud services is the most challenging…

Scammers Target Indian Users Posting Complaints on Social Media

  The latest report from Cyble Research and Intelligence Labs (CRIL) revealed that scammers are targeting Indian residents who submit complaints on social media accounts belonging to various local firms. Fraudsters keep an eye out on Twitter and other social…

Ryushi Demanding Ransom Worth $200,00 For Breached Data

In a recent case of a Twitter data breach, the hacker named “Ryushi” demanded a ransom worth $200,000 to hand over the stolen data of 400 million users.  In regard to this, a probe has been launched by Ireland’s watchdog.…