Colorado’s Delta-Montrose Electric Association (DMEA) is still struggling to recover from a devastating cyberattack last month that took down 90% of its internal systems and caused 25 years of historical data to be lost. In …
A Pakistani threat actor successfully socially engineered a number of ministries in Afghanistan and a shared government computer in India to steal sensitive Google, Twitter, and Facebook credentials from its targets and stealthily obtain access …
Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments Read More »
IT security researchers from Ruhr-Universität Bochum (RUB) and the Niederrhein University of Applied Sciences have discovered 14 new types of ‘XS-Leak’ cross-site leak attacks against modern web browsers, including Google Chrome, Microsoft Edge, Safari, and …
Researchers discover 14 new data-stealing web browser attacks Read More »
Phishing actors have quickly started to exploit the emergence of the Omicron COVID-19 variant and now use it as a lure in their malicious email campaigns. Threat actors are quick to adjust to the latest …
Phishing actors start exploiting the Omicron COVID-19 variant Read More »
An advanced persistent threat (APT) group that had been exploiting a flaw in the Zoho ManageEngine ADSelfService Plus software has pivoted to leveraging a different vulnerability in another Zoho product. The actor has been seen exploiting an …
Hackers use in-house Zoho ServiceDesk exploit to drop webshells Read More »
For years, Facebook has given its users the option of protecting their accounts with two-factor authentication. Soon, the platform’s highest-risk users will no longer have a choice: The social network will require them to lock …
Facebook Will Force More At-Risk Accounts to Use Two-Factor Read More »
Russia’s internet watchdog, ‘Roskomnadzor’, has announced the ban of six more VPN products, bringing the total number to more than a dozen, shows a notification to companies in the country. The latest services added to …
Russian internet watchdog announces ban of six more VPN products Read More »
An indictment from the Department of Justice suggests that the Ubiquiti hack reported in January, and subsequent whistleblower claims of a cover-up, were the work of someone who was then an employee of the company. …
Ubiquiti hack may have been an inside job, federal charges suggest Read More »
When it comes to fuzzing, Mozilla has plenty of cred, and has been doing so for some time, and yet, its prized Network Security Services (NSS) library was busted by Google Project Zero’s Tavis Ormandy …
Mozilla properly fuzzed NSS and still ended up with a simple memory corruption hole Read More »
Australia is looking to create a new national data commissioner role that will be responsible for applying the data reforms presented in the Data Availability and Transparency (DAT) Bill 2020. The DAT Bill, which is still …
Australia to appoint its first National Data Commissioner Read More »
Planned Parenthood Los Angeles has disclosed a data breach after suffering a ransomware attack in October that exposed the personal information of approximately 400,000 patients. According to a data breach notification sent to Planned Parenthood …
Planned Parenthood LA discloses data breach after ransomware attack Read More »
The Emotet malware is now distributed through malicious Windows App Installer packages that pretend to be Adobe PDF software. Emotet is a notorious malware infection that spreads through phishing emails and malicious attachments. Once installed, …
Emotet now spreads via fake Adobe Windows App Installer packages Read More »