HACKRead
New HP report reveals cybercriminals are increasingly leveraging "cat-phishing" techniques, exploiting open redirects in legitimate websites to deceive users and deliver malware.
CSO
Official telegram channels operated by BreachForums members confirm law enforcement seizures and arrest.
The Cyber Express
GhostSec, a threat actor group previously involved in financially motivated cybercrimes, announced a significant shift in their focus to depart
The Hacker News
Android 15 introduces new features to prevent malicious apps from capturing your sensitive data. Find out more about these crucial updates:
Ars Technica
Ebury backdoors SSH servers in hosting providers, giving the malware extraordinary reach.
SecurityWeek
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
The Cyber Express
The notorious DragonForce ransomware group has expanded its list of victims, adding two new names to their dark web portal
DarkReading
While the protocol has made passwordless authentication a reality, token-binding is key to prevent against token theft and reuse, security vendor says.
Bleeping Computer
A malware botnet known as 'Ebury' has infected almost 400,000 Linux servers since 2009, with roughly 100,000 still compromised as of late 2023.
HACKRead
A new Android malware poses as popular applications like WhatsApp, Instagram, and Snapchat to steal user data, including login credentials.
Infosecurity News
Recorded Future details a novel campaign that abuses legitimate internet services to deploy multiple malware variants for credential theft
.webp)
Cyber Security News
The botnet, operated by the threat group behind the Ebury malware, has been active since at least 2009 but has evolved over the past decade.
The Record
In a blog post, the FTC gave special attention to the sale of geolocation data and what the agency called the “surreptitious disclosure of sensitive information" by automakers.
Security Affairs
A group of hackers that defines itself as 'first-class Russian hackers' claims the defacement of hundreds of British newspaper websites
CyberNews
A Russia-linked group is automating fake news fabrication and publishing with AI.
The Hacker News
Are your browser extensions safe? 33% in most orgs aren't! Learn to protect your data with insights from the 2024 Browser Security Report.
.jpg?height=635&t=1713982088&width=1200)
Security Magazine
The Federal Trade Commission (FTC) has ordered Cerebral, Inc. to restrict how the company can use and/or disclose sensitive consumer data.
The Cyber Express
An unidentified threat actor known as "pwns3c" has offered access to a database purported to contain sensitive data and documents
The Record
An infiltrator posted a breaking news story titled "PERVOKLASSNIY RUSSIAN HACKERS ATTACK" on websites owned by Newsquest Media Group.
The Record
CEO Guillaume Cerutti confirmed that the auction house was dealing with a “technology security incident” after the organization’s website went down before the weekend.
Security Affairs
Pro-Russia hackers targeted government websites in Kosovo in retaliation for the government's support to Ukraine with military equipment.
.png)
Cyber Security News
Staying informed is the key in this dynamic battle of cybersecurity, and due to this, the weekly news recap provides you with the newest trends, weaknesses, infringements found, and some possible defense mechanisms.
The Hacker News
The notorious FIN7 hacking group is at it again! This time, they're using malicious Google ads to trick users into downloading malware disguised as le
The Cyber Express
A state or state-sponsored actor orchestrated the "sophisticated" cyberattacks against the British Columbia government networks, revealed the head of B.C.’s
Security Affairs
CERT Polska warns of a large-scale malware campaign against Polish government institutions conducted by Russia-linked APT28.
.webp)
Cyber Security News
A sophisticated malware campaign has been identified, specifically targeting Windows and Microsoft Office users through cracked software.
Cyber Security News
Hackers take advantage of sponsored Google Ads as they provide an excellent chance to quickly reach a large audience.
The Record
Kosovo Foreign Minister Donika Gervalla-Schwarz said that Russia is targeting the country after it agreed to provide military equipment to Ukraine “in its justified defense against Russian genocidal aggression.”
The Record
The Kremlin’s "hybrid war" on Moldova — featuring disinformation, cyberattacks and influence operations — aims to manipulate three consequential votes in Moldova this year and next.
The Record
The hackers replaced broadcasts on 15 Ukrainian channels to show a parade in Moscow commemorating the defeat of Nazi Germany in World War II.
Bleeping Computer
Poland says a state-backed threat group linked to Russia's military intelligence service (GRU) has been targeting Polish government institutions throughout the week.
The Hacker News
Russia-Linked APT28 Strikes Poland with Malware Campaign Polish government bodies were hit by a sophisticated malware attack orchestrated by the infam
Infosecurity News
Researchers discover 75,000+ domains hosting fraudulent e-commerce sites, in a campaign dubbed BogusBazaar
Latest Hacking News
Microsoft has expanded the availability of its passkey authentication support to more users. So now, consumer with personal Microsoft accounts can also use passkeys to ensure secure logins for their accounts. Microsoft Rolled Out Passkey Authentication
SC Magazine
A panel of experts unpack the art of cyber insurance here at RSA Conference and share what's new in coverage and claims.
Bleeping Computer
OpenAI and Stack Overflow recently teamed up to improve AI models. OpenAI will have access to Stack Overflow's API and feedback from developers. In return, OpenAI will link to Stack Overflow's content in ChatGPT.
HACKRead
WordPress websites are under attack with a surge of malicious JavaScript being injected using vulnerable versions of the LiteSpeed Cache plugin.
.webp)
Cyber Security News
A new group known as MorLock ransomware has intensified its attacks on Russian businesses, causing disruptions and financial losses.
Security Affairs
Threat actors are exploiting a high-severity vulnerability in the LiteSpeed Cache plugin for WordPress to take over web sites
The Hacker News
A critical flaw in the hugely popular LiteSpeed Cache plugin for WordPress is being exploited in the wild to create rogue admin accounts, granting att
CSO
A Russian national alleged to have been the administrator of the notorious and prolific LockBit ransomware provider faces international charges. A $10-million reward for the suspect’s arrest has been offered.
Bleeping Computer
Hackers have been targeting WordPress sites with an outdated version of the LiteSpeed Cache plugin to create administrator users and gain control of the websites.
Bleeping Computer
We need to stay connected in our lives, but that shouldn't require taking risks with our privacy. Guard your data with three years of the Windscribe VPN Pro Plan for $69.97, $137 off the $207 MSRP now through May 12th.
Bleeping Computer
BetterHelp has agreed to pay $7.8 million in a settlement agreement with the U.S. Federal Trade Commission (FTC) over allegations of misusing and sharing consumer health data for advertising purposes.
CyberNews
The leadership identity of the LockBit ransomware group is unveiled by the US Department of Justice (DoJ), UK’s National Crime Agency (NCA), and Europol.
%20(1).webp)
Cyber Security News
A critical XSS vulnerability has discovered in the popular Yoast SEO WordPress plugin, potentially putting over 5m websites at risk.
Krebs on Security
The United States joined the United Kingdom and Australia today in sanctioning 31-year-old Russian national Dmitry Yuryevich Khoroshev as the alleged leader of the infamous ransomware group LockBit. The U.S. Department of Justice also indicted Khoroshev as the gang's leader…
SC Magazine
Security pros say the move by law enforcement puts a significant dent into LockBit.
HACKRead
Cybersecurity researchers from Mac security provider, Kandji, have discovered a new malware dubbed "Cuckoo" targeting macOS users.
Bleeping Computer
Google is adding a new feature to Google Chrome that allows publishers to add video chapters to videos embedded on websites, similar to how chapters work on YouTube.
.webp)
Cyber Security News
Cybersecurity researchers have uncovered a new malware strain dubbed "Cuckoo., exhibits characteristics of both spyware and an infostealer
HACKRead
The Paris 2024 Olympics, expected to attract over 1 billion viewers, are a prime target for cyber criminality due to rising online traffic.
CyberNews
Arm and Intel-based Macs are being targeted by a new dangerous malware, dubbed Cuckoo.
The Cyber Express
Anonymous Arabia, a ransomware group notorious for its clandestine operations, has allegedly targeted two significant entities in the UAE: Dubai.ae,
The Cyber Express
Recent law enforcement action saw several LockBit sites resurrected, with the stated announcement that more details would be revealed about
The Hacker News
A new malware called "Cuckoo" is on the loose, targeting both Intel and ARM-based Macs.
CyberSecurity Dive
The rapid unregulated growth in the field of artificial Intelligence has given rise to Large Language Models (LLM’s) such as GPT-4 and Gemini which has contributed to major technical advancements but has also been coupled with legal and ethical issues.
The Cyber Express
By Eyal Arazi, senior security solutions lead for Radware The cybersecurity landscape evolved rapidly in 2023. In particular, there was
Krebs on Security
Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers…
.png)
Cyber Security News
The weekly news summary keeps you up to date with what’s happening in cybersecurity, including developments, vulnerabilities, breaches, threats, and defensive strategies. Knowing about new cyber risks and attack vectors helps you put up safeguards and preventive measures as soon as possible to protect your systems. Remaining constantly aware gives you a holistic view of […]
Cyber Security News
Android's operating system has identified a critical vulnerability that allows DNS traffic to leak during VPN server switches, potentially exposing users' internet activity to cybercriminals.
The Cyber Express
The digital world continues to spin at breakneck speed, and this week's TCE Cyberwatch brings you the latest updates on
HACKRead
A new botnet called Goldoon targets D-Link routers and NAS devices putting them at risk of DDoS attacks and more. Learn how weak credentials leave you vulnerable and how to secure your network. pen_spark
CyberNews
Cyber scams targeting seniors have risen 11% since 2022, costing those over 60 more than $3.4 billion in losses, a new FBI Elderly Fraud report states.
Bleeping Computer
Microsoft announced that Windows users can now log into their Microsoft consumer accounts using a passkey, allowing users to authenticate using password-less methods such as Windows Hello, FIDO2 security keys, biometric data (facial scans or fingerprints), or device PINs.
CyberNews
Nearly three million repositories on Docker Hub, a platform for web developers to collaborate on their code for web applications, contain malicious content.
Infosecurity News
Amnesty International found in Indonesia a murky ecosystem of surveillance suppliers, brokers and resellers
CyberNews
Microsoft has launched passkeys enabling users to drop passwords to access the company’s accounts.
The Cyber Express
The LockBit ransomware group, known for its disruptive cyberattacks, is back in the spotlight by claiming a cyberattack on Hooker
The Hacker News
Are you confident your vulnerability scanner isn't leaving blind spots in your attack surface? Uncover the limitations of relying on a single scanner
The Cyber Express
The CL0P ransomware group has listed 3 additional victims on its leak site. The mentioned victims include: McKinley Packing, Pilot
CSO
Mandiant observed several malicious campaigns with threat actors impersonating journalists and harvesting the victim’s cloud environment credentials.
The Cyber Express
Anonymous Arabia, a notorious group of hacktivists, has allegedly launched a cyberattack on Columbia University in response to the recent
Trend Micro
Cheap and easy access to AI makes it harder to detect state-sponsored and homegrown campaigns during this election year
The Record
Researchers at Bitsight asked whether organizations remediate software and hardware vulnerabilities faster if they're on the federal government's list. The resulting data added up to a resounding "yes."
SecurityWeek
Chinese cybersecurity firm QAX XLab uncovered an Android trojan that hides its command-and-control server behind compromised WordPress sites.
The Hacker News
ZLoader modular malware trojan has resurfaced with anti-analysis feature that prevents execution on machines different from the original infection.
Infosecurity News
According to JFrog, approximately 25% of all repositories lack useful functionality and serve as vehicles for spam and malware
The Hacker News
Millions of malicious "imageless" containers have been planted on Docker Hub over the past 5 years in multiple cybercriminal campaigns.
Cyber Security News
Hackers exploit DNS vulnerabilities to redirect users to malicious websites, launch distributed denial-of-service (DDoS) attacks by
.webp)
Cyber Security News
This sophisticated backdoor Trojan to infiltrate Android systems & execute a malicious commands, posing a threat to unsuspecting users.
The Hacker News
The U.S. government has unveiled new security guidelines to fortify critical infrastructure against AI-related risks.
Cyber Security News
A joint effort between the Dresden Public Prosecutor’s Office and the Cybercrime Competence Center of the Saxony State Criminal Police
Cyber Security News
A significant security flaw has been identified in Apple's Safari browser that could potentially expose iPhone users in the European Union to unauthorized tracking.
The Record
The pair was allegedly receiving orders from Russian intelligence services. If found guilty, they could face up to seven years in prison.
DarkReading
Tracking code used for keeping tabs on how members navigated through the healthcare giant's online and mobile sites was oversharing a concerning amount of information.
Infosecurity News
The top malicious domains attracted over 100,000 hits each, according to Akamai Security
SecurityWeek
Healthcare giant Kaiser Permanente says the information of 13.4 million individuals was exposed to third-party trackers.
Bleeping Computer
Identity-based attacks have become one of the most significant threats facing organizations today. Learn more from Specops Software on tactics used in these types of attacks and how to defend against them.
The Hacker News
The "Muddling Meerkat" threat actor is abusing DNS open resolvers to evade detection and conduct reconnaissance across the globe.
CyberNews
How AI and ML models can increase software supply chain risks and lead to cybersecurity incidents
Security Magazine
LabHost, a notable phishing-as-a-service platform, was disrupted by international investigations. Security leaders respond.
The Cyber Express
Okta reported an "unprecedented scale" of credential stuffing attacks targeting its identity and access management solutions, resulting in the breach
The Cyber Express
A threat actor purports to be selling the database of the Central Bank of Argentina on a hackers' forum. The
CyberNews
Criminals are now offering “free” online verification service schemes to users on dating websites and apps.
CyberSecurity Dive
The largest data breach reported to the HHS’ Office for Civil Rights so far this year comes as regulators reconsider healthcare’s use of tracking technologies.
The Cyber Express
The notorious Hunters group has allegedly added two new victims to their dark web portal: Rocky Mountain Sales in the
The Cyber Express
The notorious NoName ransomware group this time has allegedly set its sights on Moldova, targeting key government websites in what
The Record
Ukraine's GUR said it carried out an unspecified attack on the United Russia party's digital infrastructure. The party did take the rare step of acknowledging a DDoS incident.
SC Magazine
Security pros say these connection issues will recede over time as enterprises adjust and more quantum-resistant encryption is released.
Loading more articles....