Ireland’s Data Privacy Commissioner (DPC) has hit Facebook-owned messaging platform WhatsApp with a €225 million ($266 million) administrative fine for violating the EU’s GDPR privacy regulation after failing to inform users and non-users on what …
WhatsApp to appeal $266 million fine for violating EU privacy laws Read More »
Today, T-Mobile’s CEO Mike Sievert said that the hacker behind the carrier’s latest massive data breach brute forced his way through T-Mobile’s network after gaining access to testing environments. The attacker could not exfiltrate customer financial information, …
T-Mobile CEO: Hacker brute-forced his way through our network Read More »
Taiwan-based NAS maker Synology has revealed that recently disclosed remote code execution (RCE) and denial-of-service (DoS) OpenSSL vulnerabilities impact some of its products. “Multiple vulnerabilities allow remote attackers to conduct denial-of-service attack or execute arbitrary …
Synology: Multiple products impacted by OpenSSL RCE vulnerability Read More »
Samsung says that it can disable any of its Samsung TV sets remotely using TV Block, a feature built into all television products sold worldwide. This was revealed by the company South Korean multinational in a press …
Samsung can remotely disable their TVs worldwide using TV Block Read More »
Digital threat researchers at Citizen Lab have uncovered a new zero-click iMessage exploit used to deploy NSO Group’s Pegasus spyware on devices belonging to Bahraini activists. In total, nine Bahraini activists (including members of the Bahrain Center for …
New zero-click iPhone exploit used to deploy NSO spyware Read More »
The Federal Bureau of Investigation (FBI) has shared info about a threat actor known as OnePercent Group that has been actively targeting US organizations in ransomware attacks since at least November 2020. The US federal law …
FBI: OnePercent Group Ransomware targeted US orgs since Nov 2020 Read More »
A clever UPS phishing campaign utilized an XSS vulnerability in UPS.com to push fake and malicious ‘Invoice’ Word documents. The phishing scam was first discovered by security research Daniel Gallagher and pretended to be an email from …
Phishing campaign uses UPS.com XSS vuln to distribute malware Read More »
A Mirai-based botnet now targets a critical vulnerability in the software SDK used by hundreds of thousands of Realtek-based devices, encompassing 200 models from at least 65 vendors, including Asus, Belkin, D-Link, Netgear, Tenda, ZTE, …
Botnet targets hundreds of thousands of devices using Realtek SDK Read More »
GitHub urges its user base to toggle on two-factor authentication (2FA) after deprecating password-based authentication for Git operations. “If you have not done so already, please take this moment to enable 2FA for your GitHub account,” the …
GitHub urges users to enable 2FA after going passwordless Read More »
Tokio Marine Holdings, a multinational insurance holding company in Japan, announced this week that its Singapore branch, Tokio Marine Insurance Singapore (TMiS), suffered a ransomware attack. The announcement came at the beginning of the week …
Japanese insurer Tokio Marine discloses ransomware attack Read More »
A new analysis of a Diavol ransomware sample shows a more clear connection with the gang behind the TrickBot botnet and the evolution of the malware. The recent research is the second one that finds …
Diavol ransomware sample shows stronger connection to TrickBot gang Read More »
T-Mobile has confirmed that threat actors hacked their servers in a recent cyber attack but still investigate whether customer data was stolen. Yesterday, news broke that a threat actor was selling the alleged personal data …
T-Mobile confirms servers were hacked, investigates data breach Read More »