Items tagged with security
by
Nathan Wasson - Mon, Oct 03, 2022
On September 5, Los Angeles Unified School District (LAUSD), the second largest school district in the United States, published a news release disclosing a ransomware attack on its internal systems. While LAUSD is far from the only school...
Read more...
by
Nathan Ord - Sat, Oct 01, 2022
Earlier this week, Microsoft confirmed a “new” 0-Day remote code execution vulnerability within Exchange Servers. While it isn’t necessarily new in the family of Proxy-Exploits, critical infrastructure is still being attacked now, and...
Read more...
by
Nathan Wasson - Fri, Sep 30, 2022
Last year, Cloudflare, a company that provides DDoS mitigation, content delivery network (CDN) services, and many others, published a blog post declaring its intention to kill CAPTCHAs. Now about a year and a half later, the company is...
Read more...
by
Nathan Wasson - Fri, Sep 30, 2022
Last Thursday, one of Australia’s biggest telecommunications and broadband providers, Optus, disclosed a cyberattack that compromised customer data. While the data breach took place a week ago, the story continues to develop. As it...
Read more...
by
Nathan Wasson - Wed, Sep 28, 2022
Yesterday evening, iPhone users may have been surprised to see multiple push notifications from Apple News containing a racist slur and other obscene language. The notifications were triggered by Fast Company’s Apple News account...
Read more...
by
Nathan Wasson - Tue, Sep 27, 2022
Edward Snowden has gained Russian citizenship nine years after fleeing the United States and landing in Russia. On Monday, Russian president Vladimir Putin signed a decree granting citizenship to 75 foreigners residing in the country, with...
Read more...
by
Nathan Wasson - Mon, Sep 26, 2022
Threat analysis teams from two different cybersecurity firms, Cyderes and Stairwell, have published a joint report detailing a new ransomware technique that may be the next big evolution in ransomware. Rather than encrypting data on...
Read more...
by
Nathan Wasson - Fri, Sep 23, 2022
Researchers at the cybersecurity firm ReasonLabs have discovered a credit card scam campaign estimated to have extracted tens of millions of dollars from tens of thousands of credit card holders. This scheme utilizes fake dating websites...
Read more...
by
Lane Babuder - Thu, Sep 22, 2022
According to a threat analysis by Palo Alto Networks' Unit 42, a deceptive phishing technique called domain shadowing is on the rise. It may even be more prevalent than previously assumed by information security experts. Between April 25...
Read more...
by
Nathan Wasson - Thu, Sep 22, 2022
Among the many features and devices announced at the Google I/O event in May of this year was a new feature for the Google app giving users the option to request that their personal information be removed from Google search results. The...
Read more...
by
Nathan Wasson - Wed, Sep 21, 2022
2K, the publisher of numerous video game series, including Borderlands, Civilization, and Bioshock, has issued a notice to warn customers that an unknown actor recently gained unauthorized access to its help desk platform. The threat actor...
Read more...
by
Nathan Wasson - Tue, Sep 20, 2022
Last week, a massive security breach rocked Uber, with a teenage hacker claiming credit for the incident. Then, over the weekend, someone claiming to be this same hacker leaked Grand Theft Auto (GTA) 6 gameplay footage on the GTA forums...
Read more...
by
Nathan Wasson - Mon, Sep 19, 2022
Researchers at Aqua Security have discovered cyberattacks that appear to have been conducted by TeamTNT, a threat actor previously thought to be defunct. The researchers encountered three different attacks, each of which looks to be new...
Read more...
by
Nathan Wasson - Fri, Sep 16, 2022
The popular rideshare company Uber announced last evening that it was responding to a cybersecurity incident but didn’t provide any further details other than to say that the company was in contact with law enforcement. However, it didn’t...
Read more...
by
Ryan Whitwam - Fri, Sep 16, 2022
YouTube is being used to distribute a novel bundle of malware but probably not in the way you'd expect. The videos promote cracks and cheats for several popular games, but links in the video description expose viewers to malware downloads...
Read more...
by
Paul Lilly - Fri, Sep 16, 2022
What would you do if you checked your bank account and found it had been unexpectedly padded with a quarter of a million dollars? Seems like a farfetched scenario, except it actually happened to a white-hat hacker, courtesy of Google. The...
Read more...
by
Nathan Wasson - Thu, Sep 15, 2022
The Cyber Division of the US Federal Bureau of Investigation (FBI) has published a notice warning the healthcare industry of cyberattacks targeting healthcare payment processors. The attacks generally come in the form of phishing attacks...
Read more...
by
Nathan Wasson - Wed, Sep 14, 2022
Cybersecurity researchers at Proofpoint have been keeping tabs on an Advanced Persistent Threat (APT) known as TA453 and recently found the threat actor employing a phishing technique that makes use of sock puppet email accounts. Sock...
Read more...
by
Nathan Wasson - Tue, Sep 13, 2022
The cybersecurity firm Group-IB published research today detailing how various threat actors are stealing Steam login credentials using browser windows. Specialists from the computer emegency response team at Group-IB (CERT-GIB) discovered...
Read more...
by
Nathan Wasson - Mon, Sep 12, 2022
Research conducted by a team at the firmware security firm Binarly reveals that six vulnerabilities remain unpatched in various enterprise-grade HP laptops and desktops despite HP having developed patches for these vulnerabilities. Binarly...
Read more...
by
Lane Babuder - Mon, Sep 12, 2022
No matter how you pronounce it, GIFs are fun and entertaining for most people, and a mild annoyance for the rest. Unfortunately for users of Microsoft Teams, they are also a danger to their systems. A new malware known as GIFShell has...
Read more...
by
Nathan Wasson - Fri, Sep 09, 2022
After introducing video end-to-end encryption (E2EE) for a subset of its wired doorbell and camera devices over a year ago, Ring has announced that it is now extending this capability to its wireless devices. While the company doesn’t...
Read more...