Meta Faces Hefty €1.2bn Fine For GDPR Breach In EU-US Data Transfers Meta was fined €1.2bn for transmitting consumer data to the US. Ireland's Data Protection Commission (DPC) punished Faceboo...

After days of doubt, and despite official claims of a "cyber incident," the BlackByte ransomware gang has claimed credit for the computer attack on the City of Augusta. BlackByte, notorious for attac...

Security specialists have detected a new type of malware, named "CosmicEnergy," that possesses the potential to wreak havoc on key infrastructure systems and electricity networks. The researchers...

Apria Healthcare, a manufacturer of medical equipment for the home, is sending out breach notifications to roughly two million people whose information may have been stolen in data breaches in 2019 a...

According to Microsoft and the "Five Eyes" governments, an invisible Chinese hackers infiltrated and remained undetected in critical infrastructure organizations in the United States and Guam for yea...

Based on a research by Tel Aviv-based cybersecurity firm ClearSky, several Israeli shipping and logistics websites were hacked to collect customer data. The business has "low confidence" that the Ira...

Many small businesses believe they are immune to cyberattacks because of their presumed lack of valuable information (such as customer data or computing resources), but this is far from the truth. Th...

Earlier yesterday, the stock market took a small fall due to highly realistic AI-generated visuals going popular on Twitter suggesting an explosion near the Pentagon. Many verified Twitter accounts,...

Facebook’s owner Meta has been fined €1.2bn ($1.3m) by EU regulators for violating the General Data Protection Regulation (GDPR), the Irish Data Protection Commission (DPC) announced on May 22, 2...

Toyota: Tragic Data Breach, 2 Million Vehicles Affected For Ten Years Toyota revealed a data breach from ten years ago that impacted over 2 million cars. The breach affected their cloud-based Conn...

VulnerabilitiesApple released security patches for iOS, iPadOS, macOS, tvOS, watchOS, and Safari on Thursday to address three new zero-day issues that are being actively exploited. The three secur...

Significant supply chain concerns are posed by the cybercrime organization Lemon Group, which is exploiting millions of pre-infected Android handsets around the world to carry out malicious operation...

In today's digital age, where cyber threats continue to evolve, organizations must remain vigilant in protecting their sensitive information and digital assets. Cybersecurity monitoring plays a vital...

According to reports, international electronics firm Lacroix thwarted a cyberattack on its French (Beaupréau), German (Willich), and Tunisian (Zriba) activity sites. The company claims it has tempor...

Russian hacker Mikhail Matveev was indicted and sanctioned by the United States on Tuesday for allegedly leading the Babuk cybercrime group and serving as a "major actor in the Russian ransomware eco...

Based on reports from The Philadelphia Inquirer, the paper's operations were severely disrupted over the weekend due to a hack, making it impossible to print the paper's Sunday issue. The attack was...

Recently, Toyota admitted to having one of the worst data breaches in the automotive sector. Approximately 2 million automobiles sold in the business's home market have had their information put at d...

Mother's Day is a special day celebrated across many countries, including the United States. To commemorate the love and contributions of mothers and mother figures to their families. It most times f...

As many as nine distinct ransomware families that are able to target VMware ESXi systems have been developed thanks to the disclosure of Babuk (also Babak or Babyk) ransomware code in September 2021....

The Black Basta ransomware assault apparently hampered business activities at the Swiss multinational corporation ABB, a renowned electrification and automation technology provider. ABB has its headq...

The Seoul National University Hospital (SNUH) was hacked by North Koreans, according to the Korean National Police Agency (KNPA), who were after patients' personal information and medical records....

A citizen of the United Kingdom has entered a guilty plea in connection with the July 2020 Twitter attack that compromised a large number of high-profile accounts and scammed other users. Joseph J...

The National Police of Spain detained 25 persons in Madrid and Seville for alleged bank scams, including 2 hackers, 15 members of a criminal organization, and another 12 people involved in unlawful f...

Intel is looking into claims that private OEM BootGuard keys are out there after MSI reported a ransomware assault last month. Micro-Star International (MSI), a Taiwanese computer hardware manufactur...

13 more domains connected to DDoS-for-hire platforms, sometimes referred to as "booter" or "stressor" services, have been seized, according to a recent announcement from the US Justice Department....

Based on the Computer Emergency Response Team of Ukraine (CERT-UA), the SmokeLoader malware is now being spread via a phishing campaign using lures centered around invoices. A ZIP folder containing a...

Recent data breaches have demonstrated that relying solely on passwords may be insufficient. Hence, the need for online security. A single password is frequently insufficient to protect sensitive da...

Cisco has warned that SPA112 2-Port Phone Adapters have a serious security flaw that could be used by a remote attacker to run any code on vulnerable devices. The problem, which is known as CVE-2023-...

Hundreds of well-developed fake profiles on Facebook and Instagram were used by three separate threat actors to launch separate assaults on users in Southern Asia. To spread their malware and steal s...

Locking down some of its IT systems, the city of Dallas, Texas, was able to block the spread of the ransomware onslaught. Dallas City, Texas, is home to over 2.6 million people, which makes it the te...

Over $1 million worth of digital assets were stolen from Level Finance, one of the leading cryptocurrency exchanges in the world. The incident happened on April 29, 2023, despite the exchange having...

Nine cryptocurrency exchange websites that enabled money laundering for scammers and hackers, including ransomware operators, have been taken down by the FBI and Ukrainian police. According to a pres...

The alert notes that the fact that there are tens of thousands of TBK DVRs available under several brands, publicly accessible PoC code, and an easy-to-exploit make this issue an attractive target fo...

Although this breach only affected 1,000 customers as opposed to the 37 million affected by the previous one, T-Mobile US Inc. disclosed another data breach, its second disclosed breach in 2023. This...

In a surprising turn of events, the Italian government has now made a decision to lift the ban on OpenAI's popular chatbot, ChatGPT, less than a month after its initial prohibition. The ban had been...

A summary of news and events that happened this week with ransomware, data breaches, the banning of developers' accounts, etc. Yellow Pages Canada Alerts of Cyberattack  The Black Basta cyber...

The DNA sequencing machines used by genomics major Illumina have been found to include a critical software flaw that might be used by hackers to change or steal sensitive patient medical data. The U....

Employees at CommScope claim they haven't heard from officials about the company's response to a ransomware assault that allowed hackers to steal vast amounts of corporate and employee data from its...

At its default settings, Apache Superset is vulnerable to authentication bypass and remote code execution, allowing attackers to read and alter data, gather passwords, and issue commands. Apache Supe...

To address zero-day vulnerabilities that might be used to achieve code execution on computers using unpatched versions of VMware's Workstation and Fusion software hypervisors, the company has provide...

Thousands of exposed artifacts in cloud software repositories and registries with more than 250 million artifacts and over 65,000 container images have been found by cloud security company Aqua Secur...

A fake giveaway fraud that resulted in the theft of more than $22.6K in cryptocurrency was promoted by attackers after their access to KuCoin's Twitter account was compromised. The bitcoin trading an...

Yellow Pages Canada, an online and print directory service provider, has stated that it was the victim of a cyber attack that resulted in losing its customers' data. The hacking organization Bla...

Security experts have revealed information about a Google Cloud Platform (GCP) zero-day vulnerability that has since been patched that may have allowed threat actors to hide an irremovable, malicious...

African Telecom Service Providers Targeted by Daggerfly Cyberattack Campaign. Recently, the Daggerfly cyberattack campaign, aimed at numerous institutions worldwide, shocked the cybersecurity commun...

Yet another zero-day attack on widely used software from a major technology provider. To address a security flaw that has already been publicly exploited, Google released a significant upgrade to Chr...

The Rust programming language has been gaining popularity over the years due to its many advantages, including its high level of control, memory safety, and flexibility. However, while these features...

Goldoson malware, a new Android malware outbreak, has been found in over 60 genuine Google Play Store apps with over 100 million downloads. ONE shop, a popular South Korean third-party app marketplac...

In the latest ThreatLabz Phishing Report from zero trust security firm Zscaler, the number of phishing campaigns worldwide increased by about 50% in 2022 compared to 2021, partly because of new AI to...

Ransomware struck American payments company NCR datacenter, focusing on one of its data facilities in Aloha, Hawaii. A few days after beginning to look into a "problem" with its Aloha restaurant poin...

The data theft assaults against a Taiwanese media outlet and an Italian job search firm were carried out by the Chinese state-sponsored hacking organization APT41, which was discovered abusing the GC...

Have you ever heard of computer worms? These malicious programs can cause havoc on your computer system and compromise your data. In the world of cybersecurity, computer worms are a serious threat. T...

On Thursday, the cybersecurity firm Darktrace released a statement after being mentioned on the LockBit ransomware group's breach website. We learned of tweets from the cybercriminal LockBit earlier...

Many new security features for WhatsApp have been unveiled today, one of which is called "Device Verification" and is intended to offer improved defense against account takeover (ATO) assaults. Devic...

DeathNote's Lazarus Hacker Squad Evolves Its Strategies, Tools, and Targets as part of a long-running operation known as DeathNote. The Lazarus hacker Group, a North Korean threat actor, has been obs...

With the increase in online transactions and digital communication, the threat of phishing scams has become more prevalent than ever hence the need for phishing tools. Phishing scams have become incr...

Depending on the type of malicious behaviour that online criminals demand, malware producers have established a booming market. This is where they offer to add dangerous Android malware apps to Googl...

A notice of security breach to warn the public has been filled by a Yum! Brands, Inc., the parent company of KFC, Pizza Hut, Taco Bell, and The Habit Burger Grills. Based on a cybersecurity incident...

An Estonian national has been accused in the US of buying electronics and computer hacking tools developed in the US on behalf of the Russian military and government. Andrei Shevlyakov was detained o...

Online security is now a top worry for all internet users in the digital era. Using secure and distinctive passwords for each of your online accounts is one of the primary steps to protecting your on...

MSI (short for Micro-Star International), a Taiwanese PC vendor, revealed today that its network had been compromised in a cyberattack in response to claims of a ransomware attack. The Money Message...

Regulators announced Thursday that the company behind ChatGPT would submit ways to address the data protection issues that prompted a temporary Italian ban on the artificial intelligence chatbot. Thi...

The authentic [email protected] email address is being used in a new phishing scam that YouTube is investigating and alerting users to. The scam attempts to trick users into divulging their login...

In a new revelation, North Korean military-linked hackers posed as journalists to target North Korean policy experts. The research from Google's Threat Analysis Group (TAG) follows Mandiant's analysi...

The police in Spain have taken José Luis Huertas, 19, into custody. He goes by the aliases "Alcaseca," "Mango," and "Chimichurri." The creation of the Udyat (the eye of Horus) search engine, which i...

Since September 2022, Palestinian entities have been targeted by Arid Viper, a threat actor observed using updated versions of its malware toolkit. According to Symantec, which monitors the group und...

After allegations that the note-taking service is being increasingly misused for malware transmission, Microsoft has revealed steps to automatically remove embedded files with "dangerous extensions"...

On March 30, 2023, TMX Finance Corporate Services, Inc. (hereafter referred to as "TMX Finance" or "TMX") notified the Attorney General of Maine of a data breach. This is after realizing that a third...

Here is the rundown of news and events that happened this week in the world of cybersecurity. 14 Million Customer Details Breached In Latitude Financial Firm A significant security breach took...

Privacy and anonymity are increasingly becoming rare commodities in today's digitally-driven world. With governments and corporations tracking our online activities, protecting our identity and onlin...

Beginning on October 1, the Food and Drug Administration(FDA) will "refuse to accept" medical devices and associated systems due to cybersecurity concerns, according to a March 29 announcement from t...

The 3CX desktop app is being utilized with a digitally signed and trojanized version by an ongoing supply chain attack to target the customers of the business. 3CX is a software development company t...

When it comes to choosing a mobile operating system, the two giants that come to mind are iOS vs. Android. Both offer unique features and functionalities, but security is one of the most critical fac...

The North Korean APT43 cybercrime group, the threat intelligence firm Mandiant thinks is using cybercrime to finance espionage operations, was the subject of a report released by Mandiant.  T...

The next nation to take action to block TikTok and Other 'Fun Apps' on government-controlled devices is France. The announcement of the change and its justification was made in a statement by Stanisl...

The banking Trojan program IcedID, which has recently been used to spread ransomware, has two new variations that security experts have observed being utilized in attack campaigns. The two new variat...

Following the conclusion of Pwn2Own Vancouver 2023, competitors received $1,035,000 and a Tesla Model 3 for exploiting 27 zero-day vulnerabilities between March 22 and March 24. Security researchers...

A glitch in the open-source software of the widely-used language model, OpenAI's ChatGPT payment, has led to a significant data leak. As per OpenAI's confirmation, the bug resulted in ChatGPT payment...

The personal information of 14 million Australians and New Zealanders was stolen as a result of a serious security breach. Systems at consumer lending company Latitude Group revealed on Monday that t...

Here is the rundown of news and events that happened this week in the world of cybersecurity. FBI Detains Owner Of Notorious Cybercrime Forum, BreachForums BreachForums founder Conor Brian Fit...

After unintentionally publishing its private SSH key, GitHub.com rotated it. The software development and version control provider took action out of "an excess of caution" after the private RSA key...

Developers of the popular WooCommerce payments plugin recently identified a critical security flaw that could have affected over 500,000 WordPress sites. The plugin, developed by Automattic...

The City of Toronto has acknowledged today that a third-party vendor did provide unlawful access to Municipal data in the City of Toronto. Access is only permitted for files that cannot be transferre...

The Senate Homeland Security Committee cleared legislation on March 30, 2022, aimed at enhancing the cyber readiness of the U.S. healthcare sector. The proposed "Healthcare Cybersecurity Act," or S....

German and South Korean intelligence agencies have issued a joint warning against the increasing cyber-attack tactics of a North Korean hacker group called Kimsuky. The group, believed to be backed b...

Around 9,000 people have downloaded a trojanized version of the genuine ChatGPT plugin for Chrome from the Chrome Web Store, hijacking Facebook accounts in the process. The extension is a clone of th...

The Windows Snipping Tool has also been discovered to be vulnerable to a serious privacy problem known as "acropalypse," which enables users to partially recover content that has been cut out of an i...

In response to worries about the security of user data, Google has revealed that it has removed the Chinese social e-commerce app Pinduoduo from its Play Store. This action coincides with US tech fir...

An important update came up where BreachForums has been officially taken down. Still, Baphomet, the current BreachForums administrator, stressed that "it's not the end" in an abrupt change of events...

A notice has been issued by the National Basketball Association (NBA) to inform its fans about a data breach incident that resulted in the theft of certain personal information. An email titled "Noti...

Ferrari, a luxury automaker, admitted a data leak after hackers demanded a ransom. The event occurred last month, and the company is cooperating with law police to investigate. The Italian automaker...

This report shares key findings from the Mandiant zero-day exploitation investigation of 2022. A zero-day vulnerability, according to Mandiant, is one that was used in the real world before a fix was...

The Play ransomware group's campaign, the most recent in a succession of strikes on the shipping sector, was proven to have affected the Dutch marine transport company Royal Dirkzwager. The company's...

Conor Brian Fitzpatrick, a 26-year-old native of New York, has been detained by the Federal Bureau of Investigation (FBI) for running BreachForums. Hackers sell their stolen data and confidential inf...

We rely primarily on technology to protect our sensitive data, including financial information, personal information, and corporate secrets, in the extremely digital world we live in today. Our perso...

A data breach at Independent Living Systems (ILS), a Miami-based supplier of healthcare administration and managed care solutions, exposed 4,226,508 people's data. This year's largest revealed health...

In response to international cybersecurity concerns, New Zealand has banned the video-sharing app Tiktok on any before the end of this month, gadgets with access to its parliament until. This makes N...

The European and U.S. authorities recently revealed that ChipMixer, a darknet cryptocurrency "mixing" service, had been taken down in a coordinated international operation. Between 2017 and till dat...

On Tuesday, Microsoft released a sizable number of software security updates and published advisories for two zero-day vulnerabilities that still threaten Windows OS users. The software giant from Re...

The potential total financial damages as a result of cybercrime in 2022 increased from $6.9 billion in 2021 to roughly $10.2 billion, with a little reduction in the number of complaints made to the F...

Cybercriminals are constantly improving their phishing attacks by implementing new strategies and techniques. In an effort to deceive victims, get around security controls, and stay undetected. Phish...

Prosecutors accused two young American men of breaking into a DEA portal in 2022 yesterday. Given that the portal was connected to the databases of 16 federal law enforcement organizations, the breac...

The secure file transfer platform Fortra GoAnywhere has a zero-day vulnerability that was used to steal data, according to cybersecurity company Rubrik. The company stated that it had been the target...

The UK security minister Tom Tugendhat, the National Cyber Security Centre in the UK, is examining whether or not the Chinese-owned video app TikTok ought to be prohibited from being used on officia...

Since June 2022, a new threat actor named "YoroTrooper" has been conducting cyberespionage operations against governments and energy companies in CIS nations. According to Cisco Talos, the World Inte...

In the most recent flash loan attack to strike the sector, hackers reportedly stole $197 million in cryptocurrencies from the decentralized finance (DeFi) platform Euler Finance. Euler finance Labs d...

Zoll Medical, a medical technology developer, recently announced that it had suffered a data breach. The company said that the breach was detected at the end of January when it found some unusual act...

AI in cybersecurity positively affects the rapid evolution of technology, and the threat landscape for cyber-attacks has increased. Cybercriminals are developing increasingly complex attacks, making...

In the AT&T data breach, nine million user accounts were compromised after a third-party marketing partner was breached. As a result of the breach, customer data, including first names, account n...

Exotic Lily is known as PROJECTOR LIBRA and TA580, which is an initial access broker (IAB). Since its start, the threat actor has been well-known in the dark web due to its connections to Diavol and...

To settle their charges, Blackbaud has agreed to pay $3 million. The Securities and Exchange Commission (SEC) accused Blackbaud of failing to fully disclose the effects of a 2020 ransomware assa...

A new automatic transfer system (ATS) framework and the capacity to steal login information for 400 banks are two of the main capabilities added to the Xenomorph Android virus in this new iteration....

Sharp Panda's new "SoulSearcher" malware framework is targeting high-profile government agencies in Vietnam, Thailand, and Indonesia. Chinese APTs used the virus to spy on vital Southeast Asian organ...

After seizing the website and bringing down the infrastructure used by criminals connected to the NetWire remote access malware, international law enforcement authorities have declared another triump...

Since the release of ChatGPT, the cybersecurity company Darktrace has issued a warning, claiming that a rise in criminals utilizing artificial intelligence to craft more intricate schemes to defraud...

TikTok has become one of the world's most popular social media platforms in recent years. However, TikTok's data collection policies have been scrutinized, especially regarding cybersecurity. Followi...

The RESTRICT Act has gained more support from lawmakers as concerns over the security implications of foreign technology continue to increase. The legislation aims to strengthen the US government's a...

Fortinet has discovered a "Critical" vulnerability affecting FortiOS & FortiProxy. It enables an unauthenticated attacker to run arbitrary code or result in a service denial (DoS) to the GUI of s...

According to hundreds of public documents, the FBI and Defense Department were developing face recognition software to identify people using street cameras and drone images. These documents reveal th...

An error in an earlier version of Shein's Android app might occasionally collect and send the clipboard's contents to a distant server. According to the Microsoft 365 Defender Research Team, the issu...

Taiwan-based computer hardware and electronics company Acer is facing another potential data breach as a threat actor claimed to have posted the company's sensitive data for sale on a popular hacking...

Authorities in Barcelona revealed on Monday that thousands of appointments had to be canceled due to a ransomware attack on the city's primary hospital. After a Saturday attack on the Hospital Clinic...

With assistance from Europol, the Dutch Police (Politie), the United States Federal Bureau of Investigations, and the German Regional Police (Landeskriminalamt Nordrhein-Westfalen), the DoppelPaymer...

Two buffer overflow flaws in the Trusted Platform Module (TPM) 2.0 specification could let attackers access or replace sensitive data, like cryptographic keys. TPM is a hardware-based solution that o...

The regulations prohibiting the use of numerous international private messaging services in the Russian government and state entities went into effect today, according to Roskomnadzor, a Russian inte...

WH Smith reports a cyberattack and claims that employee data was accessed. Attackers were able to obtain the company's data during a cybersecurity breach, according to WH Smith, which was the target...

Researchers from the cybersecurity company ESET in Slovakia have discovered that a UEFI bootkit known as BlackLotus is capable of getting beyond UEFI Secure Boot, a crucial platform security feature....

Chick-fil-A, an American fast food company, has acknowledged that consumers' accounts were compromised in a months-long credential stuffing assault, giving threat actors access to personal data and t...

On Thursday, the White House instituted its National Cyber Strategy, which serves as a roadmap for how the Biden administration plans to protect the United States from dangers online. The strategy wo...

Trezor wallet is involved in an ongoing phishing attack that attempts to steal a target's cryptocurrency wallet and assets by impersonating Trezor data breach alerts. Trezor is a cryptocurrency walle...

A public transit company 'Pierce Transit' operating in sections of Washington state, believed some of its systems were affected by a ransomware attack two weeks ago. The ransomware attack began on Fe...

According to cybersecurity company eSentire, six law firms were the targets of distinct GootLoader and SocGholish malware attacks in January and February 2023. The first effort, which targeted employ...

After testing the functionality in late 2022, Google has now made client-side encryption (CSE) for Gmail and Calendar generally available. According to Google's Ganesh Chilakapati and Andy Wen, the d...

A free MortalKombat ransomware decryptor has been made available by cybersecurity company Bitdefender in order to prevent victims from having to pay a ransom to regain their files. The publication of...

The theft of private law enforcement data is being looked into by the U.S. Marshals Service (USMS) as a result of a ransomware attack that hit "a stand-alone USMS system," according to the USMS. T...

Following the discovery of 91 million threats over the course of 28 days in January, security experts have warned that remote employees in the capital of the UK are under constant cyberattacks. In...

LastPass DevOps engineers were compromised because they had access to the decryption keys. LastPass detailed an "organized second attack" in which a threat actor took data from Amazon AWS cloud stora...

Anonymous Sudan's DDoS strikes took down nine Danish hospitals' websites on Sunday evening. Copenhagen's health authority tweeted that hospital care was unaffected by the attacks despite hospital web...

The importance of cybersecurity has never been higher than it is in the current digital era. The threat of online thieves and cyberattacks increases as technology develops and penetrates more aspects...

The websites and apps of Dish Network, a leading American TV company and satellite broadcaster, have unexpectedly stopped working for the past 24 hours. According to customers, the company's call cen...

A new malware campaign called S1deload Stealer has been discovered by Bitdefender's Advanced Threat Control (ATC) team, targeting YouTube and Facebook users. The malware infects computers, hijacks so...

Dutch police detained three individuals on suspicion of hacking into businesses' computer systems, extorting their management, issuing threats, and dealing in stolen data. The criminals allegedly dam...

One of the world's biggest growers and distributors of fresh food, Dole Food Company, has disclosed that a ransomware attack has affected its business. There is now little information available, and...

E.U. bans TikTok; the executive body of the European Union announced on Thursday that TikTok had been temporarily removed from employee phones as a cybersecurity precaution. Reflecting growing concer...

With the Vulnerability Reward Program, Google last year awarded its highest bug bounty ever for an important exploit chain disclosure that the business valued at $605,000. For a total of more than 2,...

Most of the thousands of systems that MyloBot has seized control of are in Iran, India, the US, Indonesia, and Indonesia. A high of 250,000 unique hosts was reached in 2020. However, new research fro...

Hydrochasma, a threat actor that no one knew about before, has been going after shipping and medical labs that work on COVID-19 vaccine development and treatments. The hackers' goal seems to be to st...

On Monday, the U.S. Department of Defense shut down a server that had been leaking private emails from the American military to the public internet for the previous two weeks. The exposed server w...

Several websites that were broadcasting President Putin's speech in the state of the nation address on Tuesday were reportedly taken down by a suspected distributed denial of service (DDoS) attack....

Activision has confirmed that it had a data breach at the beginning of December 2022. Hackers got into the company's internal systems by sending an SMS phishing text to a worker and getting them to c...

A phone call from a con artist was made to one of the employees who had fallen for the fraud after the SMS phishing attempt (also known as "smishing"). The largest bitcoin exchange on the planet, Coi...

To protect Galaxy smartphone users from so-called "zero-click" exploits that use malicious picture files, Samsung has created a new security solution called Samsung Message Guard. According to the Ko...

Although the RailYatri attack occurred in December 2022, the stolen data was only recently made public on a well-known hacker forum. In addition to exposing personal information, the RailYatri hack r...

The Lazarus Group stole cryptocurrencies worth 60 million NOK (about $5.84 million) in March 2022 as a result of the Axie Infinity Ronin Bridge hack, according to a statement from the Norwegian polic...

Twitter has stated that it will no longer enable SMS two-factor authentication unless you have a Twitter Blue subscription. However, there are multi-factor authentication alternatives that are more s...

GoDaddy, a major provider of web hosting services, claims that a multi-year attack on its cPanel shared hosting environment resulted in a breach where unidentified attackers took source code and put...

According to reports, the FBI is looking into harmful online behavior on the network of the agency. The federal law enforcement organization claims to have already stopped the "isolated occurrence" a...

Atlassian has confirmed that its network and client data are secure and that a recent data leak at a third-party vendor was the result of a compromise. Cyberscoop was the first to reveal that a hacke...

According to a new study, the FatalRAT malware, which spreads via bogus websites for well-known apps, targets Chinese-speaking people. FatalRat malware, which was first identified in August 2021, has...

A cyberattack against Scandinavian Airlines was reported, and "Anonymous Sudan" took credit. On Tuesday, a hack against Scandinavian Airlines (SAS) caused its website to go down and revealed some cus...

ESXiArgs ransomware assaults have recently affected hundreds of different systems, but it's still not known which vulnerability is being used. The number of ESXiArgs ransomware assaults has increased...

Because of the effects of a ransomware assault that required the City to shut down all of its IT systems on February 8, the City of Oakland has declared a local state of emergency. G. Harold Duffey,...

Beep 4 was discovered last week, a brand-new stealthy virus with several capabilities to avoid analysis and detection by security tools. After a flurry of samples were posted to VirusTotal, an intern...

Organizations in the Philippines, Turkey, the Philippines, and the United Kingdom have recently been affected by MortalKombat, a new ransomware that cybersecurity experts are pointing out. Using Mort...

The APT37 threat group targets people for intelligence gathering using the new elusive "M2RAT" malware and steganography. North Korea's APT37, sometimes referred to as "RedEyes" or "ScarCruft," is a...

Preventing data breaches and other cyberattacks is paramount in today's digital world. Members of the BlueTeam are security experts tasked with finding and fixing vulnerabilities before they cause da...

Blockchain analysts have uncovered evidence that North Korean hackers have found a way to get around U.S. sanctions to launder the bitcoin gains from their heists. Through a single crypto-mixing busi...

Cloudflare thwarted the largest volumetric distributed denial-of-service (DDoS) attempt ever this past weekend. The company reported that it had stopped dozens of hyper-volumetric DDoS attempts over...

Following a network intrusion in which information-stealing malware was installed, and data was extracted, Pepsi Bottling Ventures LLC, one of the largest bottlers of Pepsi-Cola beverages in the Unit...

In June 2022, the advanced persistent threat (APT) actor Tonto Team attempted to target the cybersecurity firm Group-IB but was unsuccessful. The business, with its headquarters in Singapore, claimed...

A Sunday night email hack at domain registrar Namecheap resulted in a deluge of DHL and MetaMask phishing emails that sought to steal the recipients' personal information and bitcoin wallets. The phi...

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has released new cybersecurity advice that details recent tactics, methods, and procedures (TTPs) associated with North Korean ranso...

The largest chain of bookstores in Canada, Indigo Books & Music, was the victim of a hack yesterday, forcing the business to restrict online payments to cash and shut down its website for custome...

On Sunday night, the popular social platform Reddit was the victim of a cyberattack that granted hackers access to its internal business systems and provided them the chance to obtain sensitive data...

Researchers revealed on Wednesday that hackers had found a means to get beyond ChatGPT's limitations and are using it to market services that let users produce malware and phishing emails. ChatGPT is...

There is evidence that hackers with ties to Russia are using new software designed to steal information to launch attacks against Ukraine. This malware, discovered by the Computer Emergency Response...

A data breach at the Weee! Asian and Hispanic meal delivery business exposed the private data of 1.1 million clients. Weee! bills itself as the most prominent Asian and Hispanic supermarket in North...

Security specialists have discovered four malicious Dota 2 game modes that a threat actor used to backdoor the players' systems. Avast Threat Labs researchers discovered that the unidentified attacke...

According to crowdsourced data examined by CNN, a new worldwide ransomware campaign has affected at least 3,800 people, including hundreds in the US, triggering warnings from European and US cybersec...

Since ChatGPT's inception in November of last year, it has experienced phenomenal growth in popularity. This growth has finally impacted Google, as it just unveiled Bard as a ChatGPT rival and altern...

The Ukrainian CERT-UA (Computer Emergency Response Team) has issued a warning about potential cyberattacks against Ukrainian governmental institutions using the authorized remote access program Remco...

After a massive wave of raids across Europe last week, Law enforcement has shut down an encrypted messaging service that has been on their radar since a raid on an old NATO bunker in 2019. 48 individ...

Electronic billboards in Moscow attracted the attention of locals and Russian media over the weekend. The large signs had the words "Come to me if you're looking for the greatest" and a picture of a...

Using illegal means, the Russian government has been spying on its citizens, according to 128 GB of information leaked by Caxxii, a hacktivist group affiliated with Anonymous. The biggest Russian int...

In order to propagate the ESXiArgs ransomware, attackers actively target VMware ESXi servers that have not yet gotten a patch for a two-year-old remote code execution vulnerability, according to admi...

Dingo Token has been reported as a possible scam by IT security firm Check Point security researchers after discovering a feature that lets the project's owner manipulate trading fees up to 99% of th...

The internet and phone service available in Bermuda was hampered by a major power outage that began on Friday evening. The government encouraged consumers as personnel attempted to restore service ar...

In an ongoing cyber espionage campaign that uses a new backdoor to exfiltrate data, the Iranian nation-state hacker group OilRig has continued to target Middle Eastern governments. Researchers at Tre...

An authenticated attacker could use a high-severity format string vulnerability in BIG-IP to cause a denial-of-service (DoS) condition and possibly execute arbitrary code, according to a warning from...

Since the beginning of 2020, romance fraud has caused consumer retail banks to lose 95% more money, according to data released by TSB, as part of a campaign to bring attention to the problem. In a re...

Since September 2021, about a thousand Redis servers have been infected by new stealthy malware meant to hunt down unprotected Redis servers online and create a botnet that mines for the Monero crypt...

Following an attack on a firm that is crucial to the British financial system by a ransomware group with Russian ties, trading in the City of London has fallen into disarray. A top official in the US...

Hacker gangs frequently run like businesses; they have staff, clients, and working hours. They often employ the same strategies as legitimate tech companies and startups to find fresh individuals wit...

The world has become increasingly digital, and with that, it has also become more vulnerable to scams and fraudulent activities. One such scam is deep fake scams. Deepfake technology has been around...

Over twenty thousand of QNAP network-attached storage (NAS) units are awaiting a patch to fix a serious security hole that was fixed on Monday by the Taiwanese business. This SQL injection vulnerabil...

A cyberattack took down over a dozen US hospitals' websites on Monday morning, which is being blamed on Russian hackers. A pro-Russian organization called Killnet claims to have taken down the websit...

Porsche stopped making a new NFT line because of weak sales and criticism from the cryptocurrency community, which gave threat actors the opportunity to fill the gap by building phishing websites tha...

A researcher has revealed the specifics of a 2FA bypass issue affecting Instagram and Facebook. A researcher has revealed the specifics of a two-factor authentication (2FA) flaw for which Facebook pa...

JD Sports has issued a warning that a cyberattack that affected the company may have exposed the personal information of roughly 10 million customers, including personal contact information, such as...

A new class of activity-tracking apps that have recently had significant success on Google Play, the official software store for Android, has been downloaded onto more than 20 million devices. The ap...

Netflix wants to stop people from sharing their passwords, which will be pretty upsetting for its customer who shares passwords, especially those who don't live with you. However, the streaming servi...

Google Adwords phishing campaigns steal Bitwarden and other password managers' vault passwords. As enterprises and consumers use unique passwords at every site, password managers must keep track of t...

Today, the Artificial Intelligence Risk Management Framework's initial version was released, according to the National Institute of Standards and Technology (NIST), a leading voice in developing A.I....

The FBI announced in November that since June 2021, this ransomware operation had stolen almost $100 million from more than 1,500 businesses. For information that could assist in tying the Hive ranso...

A member of the forum going by the name IntelBroker has offered a database containing the personal information of 3.7 million people participating in the Hilton Hotels Honors program. According to th...

A "widespread cyber effort" that employed legitimate remote monitoring and management (RMM) software to spread a phishing scam affected at least two federal departments in the United States. To steal...

The company Zacks Investment Research (Zacks) was infiltrated by hackers last year, allowing them access to 820,000 clients' sensitive and personal data. The 1978-founded business uses cutting-edge f...

With the increasing number of cyberattacks targeting large enterprises, many companies have turned to zero-trust security measures to protect their networks and data. However, a recent report from Ga...

The US "No Fly" list has 1.5 million entries that have been made public. The US "No Fly List" was made publicly available online by a Swiss hacker who allegedly discovered three private documents on...

Customers of GoTo (previously LogMeIn) are being alerted that threat actors took encrypted backups, including user information and an encryption key for some of that data, when they infiltrated its d...

The year 2022 was a record-breaking year for Distributed Denial of Service (DDoS) attacks in Russia. According to a report released by Russia's largest internet service provider (ISP), Rostelecom. T...

What originally served as a Cobalt Strike substitute has evolved into a popular C2 platform for threat actors. All essential capabilities for adversary simulation are being offered by Sliver, an open...

Due to an alleged bug in the game's PC version, Grand Theft Auto (GTA) Online gamers claim to have lost game progress, had their in-game money taken, and been blacklisted from the game servers. GTA O...

As we approach Data Privacy Day on January 28th, 2023, we must take the time to reflect on the importance of protecting our personal information. With the digital age in full force, we share an enorm...

After discovering last week that its development environment had been breached. Riot Games, the publisher, and producer of the computer games League of Legends and Valorant announced that it would po...

Customers of the FanDuel sportsbook and betting platform are being cautioned that their names and email addresses were made public due to a security breach at MailChimp in January 2023. Users are adv...

The 8220 Gang, a Chinese threat organization that operates for profit, was the subject of a threat bulletin from Radware today. Using a specially created crypto miner and IRC bot, the group, also kno...

Following a network intrusion by a "unidentified malicious intruder," around 37 million T-Mobile customers had their personal information taken. Its been confirmed that data taken were customers' add...

35k accounts of PayPal users were affected by a large-scale credential stuffing attack that exposed their personal information. The attack, which took place between December 6th and December 8th, 202...

Ransomware attacks continue to pose a significant threat to organizations and industries worldwide. The Q4 2022 ransomware report by ReliaQuest (formerly Digital Shadows) comprehensively analyzes the...

Hackers gained access to an internal customer assistance and account administration tool, and the email marketing company MailChimp had another breach that gave threat actors access to the informatio...

FTX, a bankrupt cryptocurrency exchange, said on Tuesday to creditors that cyberattacks had stolen around $415 million in cryptocurrencies. Since FTX declared bankruptcy on November 11, its CEO John...

DNV, a Norwegian assurance and risk management firm and classification organization, has confirmed that almost 1,000 ships were affected by a recent ransomware cyberattack on its fleet management sys...

In order to assist victims of the infection in retrieving their files without paying the thieves, security software provider Avast has made a free decryptor for the BianLian ransomware strain availab...

Nissan North America has started delivering data breach notifications that there has been a disclosure of client data due to a breach at a third-party service provider. On Monday, January 16, 2023, N...

One of the largest liquor distributors in Canada, the Liquor Control Board of Ontario (LCBO), serves over 670 stores throughout Ontario. It has recently confirmed that a web skimmer had been injected...

Over the past week, a group claimed to have wrecked the website of ODIN Intelligence, a business that offers technology and solutions to law enforcement and police departments. They had a severe secu...

Datadog, a cloud security company, reports that a recent CircleCI security incident exposed one of its RPM GPG signing keys and its passphrase. The business has yet to discover proof that this key ha...

More than 6,000 customers of NortonLifeLock have been informed that nefarious outsiders have probably accessed their accounts and may have even gotten to their password vaults. The letter informing c...

The bulk of Cacti servers that are accessible via the internet has not been updated to address a severe security flaw that was just patched and is currently being actively exploited. Censys, a platfo...

Prestigious social media platform and the latest internet giant TikTok have received a warning for breaking cookie consent requirements. According to France's data protection regulators, TikTok UK an...

Unknown attackers used a FortiOS SSL-VPN zero-day vulnerability patched last month in attacks on government organizations and government-related targets, according to Fortinet. The exploited security...

MetaMask, a cryptocurrency wallet provider, is alerting customers about a new fraud known as 'Address Poisoning,' which involves tricking users into sending payments to a scammer rather than the inte...

In an unexpected turn of events, the Federal Aviation Administration (FAA) suspended all outgoing aircraft in the United States this morning. The cause of the grounding is currently unknown, with fli...

It has been reported that the Royal Mail, a primary postal service in the United Kingdom, has been hit by a cyber-incident. The company has advised customers to stop sending items overseas while it w...

The recent cyber-attack on the San Francisco Transit Police Department (SFTP) has highlighted the critical need for robust cyber security measures in the public sector. The attack, which took place o...

As of late, Kubernetes clusters have been actively breached by the Kinsing malware, which exploits vulnerabilities in container images and misconfigured, exposed PostgreSQL containers. While not new,...

In yet another DDoS attack on financial institutions, according to the Denmark central bank and an IT business that works with the financial sector. Hackers have disabled access to the websites of se...

Custom Android apps are now being used by online drug and other illegal substance markets on the darknet to boost privacy and elude law enforcement. These apps enable customers of pharmacy stores to...

The well-known JsonWebToken (JWT) open-source encryption project has a high-severity vulnerability (CVE-2022-23529) that attackers might exploit to get remote code execution (RCE) on a target encrypt...

Text-to-SQL models are a type of artificial intelligence (AI) used in database applications to facilitate communication between humans and database systems. These models use natural language processi...

A skillfully designed website for the Pokemon NFT card game is being used by threat actors to disseminate the NetSupport remote access tool and commandeer victims' devices. The "pokemon-go[.]io" webs...

Six dangerous packages were discovered on PyPI, the Python Package Index, that used Cloudflare Tunnel to get over firewall constraints for remote access while also installing data-stealing and RAT (r...

With the intention of building supply chain attacks, malicious extensions could be uploaded using a new attack vector that targets the Visual Studio Code extensions marketplace. According to Ilay Gol...

Private information about young students was posted online as a result of a cyberattack that targeted schools across the nation. A major cyber-attack that affected 14 UK schools led to the disclosure...

The Wabtec Corporation has finally provided information regarding a data security breach that occurred last year and resulted in the compromise of extremely sensitive personal data. The $8 billion co...

Users of one of the leading business communication and collaboration platforms, Slack, have been warned that hackers have stolen several of its private source code repositories. At the same time, Sla...

In a recent report, web application security researcher Sam Curry revealed serious vulnerabilities in the API (application programming interfaces) endpoints of cars from 15+ major manufacturers. Thes...

A well-known hacker site allegedly dumped a database containing the email addresses of over 235 million Twitter users and is being sold for roughly $200,000. According to a cyber intelligence company...

The National Health Service (NHS) is the most impersonated UK government organization in scams, according to a recent report. This is concerning news, as scams targeting the NHS can have serious cons...

As artificial intelligence (AI) becomes more prevalent in our daily lives, it's essential to consider new technologies' potential risks and benefits. One such example is ChatGPT, a popular new AI cha...

For over a year, Chinese overseas students in the United Kingdom have been targeted by persistent Chinese-speaking scammers as part of an operation known as RedZei (aka RedThief). "The RedZei scammer...

As a website owner, it is essential to prioritize the security of your WordPress website. Cyberattacks and hacking attempts can compromise sensitive information, disrupt your website’s functionalit...

LAHORE, Pakistan - The official YouTube channel of the Pakistan Cricket Board (PCB) was hacked on Tuesday, causing great panic among the board's officials and its 4.4 million subscribers. The hackers...

Fahmi Fadzil, Malaysian Communications and Digital Minister, has launched an investigation into an alleged significant data breach impacting over 13 million individuals. Fadzil directed the national...

A new strain of Linux malware is targeting WordPress sites and exploiting vulnerabilities in over two dozen plugins and themes to compromise systems. Russian security firm Doctor Web discovered the m...

The states of Indiana and the District of Columbia in the U.S. have settled claims against Google for its location monitoring tactics, with Google agreeing to pay a total of $29.5 million to resolve...

Do you ever find yourself curious about which nations are hit hardest by cybercrime? If you've ever pondered the topic of "which nations have the most cybercrime?" You might be shocked to learn that...

As 2022 draws to a close, an anonymous Twitter user has leaked over 100,000 API Keys stolen from 3commas. In a hack last week, hackers made off with $22 million worth of cryptocurrency due to stolen...

The third largest port in Portugal has gone offline after the gang launched a ransomware attack on Christmas Day. Although this does not affect its operational activity, there has been nearly a week...

Singapore-based decentralized multi-chain crypto wallet, BitKeep, confirmed on Wednesday that it was the target of a cyberattack that resulted in the theft of an estimated $9.9 million worth of digit...

In July 2022, Microsoft made a crucial development to its Office software that blocks macros in Office files attached to email messages. This change was implemented in an effort to counter the misuse...

In order to resolve a continued class-action lawsuit started in 2018, Meta, the leading owner of Facebook, Instagram, and WhatsApp, among other social media sites, has agreed to pay $725 million....

Information security analysts play a crucial role in protecting organizations and individuals from cyber threats and ensuring data and systems' confidentiality, integrity, and availability. These pro...

Hackers are exploiting a well-known gift card plug-in of over 50k websites on WordPress – YITH WooCommerce Gift Cards Premium, that would let them perform various scams through legitimate sites....

More than 5.4 million Twitter users were impacted by this leak, which contained both public data scraped from the website and private phone numbers and email addresses. The information was accessed v...

In 2022, the threat of cyber-attacks, hacks, and security breaches loomed large, with numerous high-profile incidents impacting companies and individuals alike. The year saw a range of cyber security...

The Chinese parent firm of the well-known video app TikTok, ByteDance, has acknowledged that some of its staff members inappropriately accessed the data of two journalists in an effort to find out wh...

As the world continues to undergo rapid digital change, it is increasingly important for businesses to buckle up their cyber resilience. This means not only being able to prevent and defend against c...

Yet again, password management firm LastPass has announced that they have been hacked for the second time this year. If you recall, in August 2022, they had a data breach that stole a significant amo...

Okta has disclosed that its private GitHub repositories containing its source code were compromised earlier this December, but the company has reassured customers that their data was not affected. Th...

Cybercriminals have recently launched a new Android trojan called BrasDex that targets Brazilian bank users. This trojan is part of a more extensive, ongoing multi-platform campaign that has been att...

A leading international media outlet, Guardian, was recently attacked in what is suspected to be caused by Ransomware. This happening started late on Tuesday night and has damaged several components...

In-depth studies on cybersecurity have recently uncovered a new malicious package hiding in the Python Package Index (PyPI) repository. This package was participating in a campaign known as SentinelS...

Last week, sports betting company DraftKings revealed that a credential stuffing attack in November exposed the personal information of over 67,000 customers. Credential stuffing attacks involve the...

H-Hotels (h-hotels.com) have recently been the target of a cyber-attack, which has led to disruptions in the company's communication systems. The Play ransomware gang has claimed responsibility for t...

The implementation of end-to-end encryption into Google's Gmail on the web service has been the subject of much conjecture and anticipation. And the company has finally confirmed that it will be doin...