The Federal Bureau of Investigation (FBI) warned US companies in a recently updated flash alert that the financially motivated FIN7 cybercriminals group is targeting the US defense industry with packages containing malicious USB devices. The …
FBI: Hackers target US defense firms with malicious USB packages Read More »
In December 2021, the online booking service FlexBooker suffered a data breach that exposed 3.7 million accounts. The data included email addresses, names, phone numbers and for a small number of accounts, password hashes and …
Oregon-based venue operator McMenamins said employee data was accessed during a ransomware attack that occurred on December 12. In a statement, the company explained that even though they managed to “block” the attack, employee information …
Over 20 years of employee data leaked during McMenamins ransomware attack Read More »
Microsoft has released an emergency out-of-band update to address a Windows Server bug leading to Remote Desktop connection and performance issues. Microsoft is releasing Out-of-band (OOB) updates today, January 4, 2022, to resolve issues in …
Emergency Windows Server update fixes Remote Desktop issues Read More »
In late 2021, email address and plain text password pairs from the rap mixtape website DatPiff appeared for sale on a popular hacking forum. The data allegedly dated back to an earlier breach and in …
The cracked passwords for almost 7.5 million DatPiff members are being sold online, and users can check if they are part of the data breach through the Have I Been Pwned notification service. DatPiff is a …
Have I Been Pwned warns of DatPiff data breach impacting millions Read More »
A malicious Telegram for Desktop installer distributes the Purple Fox malware to install further malicious payloads on infected devices. The installer is a compiled AutoIt script named “Telegram Desktop.exe” that drops two files, an actual …
Purple Fox malware distributed via malicious Telegram installers Read More »
Just four months after the successful launch of the NitroPhone 1, we are now releasing the NitroPhone 2 and NitroPhone 2 Pro. The new NitroPhone 2/Pro is the world’s most secure Android smartphone and comes …
New: NitroPhone 2/Pro with 4.5 Years of Software Updates! Read More »
New South Wales’ electoral commissioner has revealed the iVote system failure during the state’s local elections last month may have materially impacted the councillor elections in Kempsey, Singleton, and the City of Shellharbour. During …
NSWEC finds iVote system failure may have impacted three local election outcomes Read More »
A novel persistent denial of service vulnerability named ‘doorLock’ was discovered in Apple HomeKit, affecting iOS 14.7 through 15.2. Apple HomeKit is a software framework that lets iPhone and iPad users control smart home appliances …
Apple iOS vulnerable to HomeKit ‘doorLock’ denial of service bug Read More »
Programmers, sysadmins, security researchers, and tech hobbyists copying-pasting commands from web pages into a console or terminal are warned they risk having their system compromised. A technologist demonstrates a simple trick that’ll make you think twice before …
Don’t copy-paste commands from webpages — you can get hacked Read More »
Executive summary Log4Shell is a high severity vulnerability (CVE-2021-44228) impacting Apache Log4j versions 2.0 to 2.14.1. It was discovered by Chen Zhaojun of Alibaba Cloud Security Team and disclosed via the project´s GitHub repository on …