Amazon has published a post-event summary to shed some light on the root cause behind this week’s massive AWS outage that took down a long list of high-profile sites and online services, including Ring, Netflix, …
Amazon explains the cause behind Tuesday’s massive AWS outage Read More »
Researchers from cybersecurity firm Cybereason has released a “vaccine” that can be used to remotely mitigate the critical ‘Log4Shell’ Apache Log4j code execution vulnerability running rampant through the Internet. Apache Log4j is a Java-based logging …
Researchers release ‘vaccine’ for critical Log4Shell vulnerability Read More »
A new phishing campaign that targets German e-banking users has been underway in the last couple of weeks, involving QR codes in the credential-snatching process. The actors are using a range of tricks to bypass …
Phishing attacks use QR codes to steal banking credentials Read More »
Swedish carmaker Volvo Cars has disclosed that unknown attackers have stolen research and development information after hacking some of its servers. “Volvo Cars has become aware that one of its file repositories has been illegally …
Volvo Cars discloses security breach leading to R&D data theft Read More »
Swedish video game developer Mojang Studios has released an emergency Minecraft security update to address a critical bug in the Apache Log4j Java logging library used by the game’s Java Edition client and multiplayer servers. …
Minecraft rushes out patch for critical Log4j vulnerability Read More »
The new ALPHV ransomware operation, aka BlackCat, launched last month and could be the most sophisticated ransomware of the year, with a highly-customizable feature set allowing for attacks on a wide range of corporate environments. …
ALPHV BlackCat – This year’s most sophisticated ransomware Read More »
Researchers have discovered a set of previously unknown methods to launch URL redirection attacks against weak OAuth 2.0 implementations. These attacks can lead to the bypassing of phishing detection and email security solutions, and at …
Microsoft, Google OAuth flaws can be abused in phishing attacks Read More »
Cox Communications has disclosed a data breach after a hacker impersonated a support agent to gain access to customers’ personal information. Cox Communications, aka Cox Cable, is a digital cable provider and telecommunication company that provides …
Cox discloses data breach after hacker impersonates support agent Read More »
Western Digital has fixed a security vulnerability that enabled attackers to brute force SanDisk SecureAccess passwords and access the users’ protected files. SanDisk SecureAccess (now rebranded to SanDisk PrivateAccess) allows storing and protecting sensitive files …
SanDisk SecureAccess bug allows brute forcing vault passwords Read More »
Credit card swipers are being injected into random plugins of e-commerce WordPress sites, hiding from detection while stealing customer payment details. With the Christmas shopping season in full swing, card-stealing threat actors raise their efforts …
Hackers infect random WordPress plugins to steal credit cards Read More »
Google announced today that it has taken action to disrupt the Glupteba botnet that now controls more than 1 million Windows PCs around the world, growing by thousands of new infected devices each day. Glupteba is …
Google disrupts massive Glupteba botnet, sues Russian operators Read More »
German security software company G DATA has released a vaccine that will block STOP Ransomware from encrypting victims’ files after infection. This tool does not prevent the infection itself. STOP ransomware will still place ransom notes …
STOP Ransomware vaccine released to block encryption Read More »