British classifieds site Gumtree.com suffered a data leak after a security researcher revealed that he could access sensitive personally identifiable data of advertisers simply by pressing F12 on the keyboard. When pressing the F12 key …
Gumtree classifieds site leaked personal info via the F12 key Read More »
Lenovo laptops, including ThinkPad and Yoga models, are vulnerable to a privilege elevation bug in the ImControllerService service allowing attackers to execute commands with admin privileges. The flaws are tracked as CVE-2021-3922 and CVE-2021-3969 and affect …
Lenovo laptops vulnerable to bug allowing admin privileges Read More »
The Hive ransomware gang is more active and aggressive than its leak site shows, with affiliates attacking an average of three companies every day since the operation became known in late June. Security researchers gleaning …
Hive ransomware enters big league with hundreds breached in four months Read More »
The previously shutdown Phorpiex botnet has re-emerged with new peer-to-peer command and control infrastructure, making the malware more difficult to disrupt. The botnet first launched in 2016 and quickly accumulated a massive army of over …
Phorpiex botnet returns with new tricks making it harder to disrupt Read More »
A suspected Iranian state-supported threat actor is deploying a newly discovered backdoor named ‘Aclip’ that abuses the Slack API for covert communications. The threat actor’s activity started in 2019 and targeted an unnamed Asian airline …
State-sponsored hackers abuse Slack API to steal airline data Read More »
Researchers have spotted a new espionage hacking campaign targeting telecommunication and IT service providers in the Middle East and Asia. The campaign has been conducted over the past six months, and there are tentative links …
Telecom operators targeted in recent espionage hacking campaign Read More »
The first public case of the Log4j Log4Shell vulnerability used to download and install ransomware has been discovered by researchers. Last Friday, a public exploit was released for a critical zero-day vulnerability named ‘Log4Shell’ in the Apache …
New ransomware now being deployed in Log4Shell attacks Read More »
The Department of Homeland Security (DHS) has launched a new bug bounty program dubbed “Hack DHS” that allows vetted cybersecurity researchers to find and report security vulnerabilities in external DHS systems. As the federal government’s …
DHS announces ‘Hack DHS’ bug bounty program for vetted researchers Read More »
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch systems against the critical Log4Shell vulnerability and released mitigation guidance in response to active exploitation. This follows threat actors’ head start in …
CISA orders federal agencies to patch Log4Shell by December 24th Read More »
Researchers at the University of Darmstadt, Brescia, CNIT, and the Secure Mobile Networking Lab, have published a paper that proves it’s possible to extract passwords and manipulate traffic on a WiFi chip by targeting a …
Bugs in billions of WiFi, Bluetooth chips allow password, data theft Read More »
Ukrainian law enforcement arrested 51 suspects believed to have been selling stolen personal data on hacking forums belonging to hundreds of millions worldwide, including Ukraine, the US, and Europe. As a result of the operation, …
Ukraine arrests 51 for selling data of 300 million people in US, EU Read More »
Threat actors and researchers are scanning for and exploiting the Log4j Log4Shell vulnerability to deploy malware or find vulnerable servers. In this article we have compiled the known payloads, scans, and attacks using the Log4j …
Hackers start pushing malware in worldwide Log4Shell attacks Read More »