A new zero-day vulnerability has been disclosed in Palo Alto Networks GlobalProtect VPN that could be abused by an unauthenticated network-based attacker to execute arbitrary code on affected devices with root user privileges. Tracked as …
Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN Read More »
A hacker-for-hire group called Void Balaur has been stealing emails and highly-sensitive information for more than five years, selling it to customers with both financial and espionage goals. With more than 3,500 targets spread across …
Void Balaur hackers-for-hire sell stolen mailboxes and private data Read More »
Vendors of surveillance technology can make big money on the global market, frequently by enabling authoritarian governments to spy on journalists and activists. That’s why, for years, EFF has called for more accountability against technology …
Ninth Circuit: Surveillance Company Not Immune from International Lawsuit Read More »
HPE has disclosed that data repositories for their Aruba Central network monitoring platform were compromised, allowing a threat actor to access collected data about monitored devices and their locations. Aruba Central is a cloud networking …
HPE says hackers breached Aruba Central using stolen access key Read More »
The Federal Bureau of Investigation (FBI) warned private industry partners of attempts by an Iranian threat actor to buy stolen information regarding US and worldwide organizations. The warning came in a private industry notification (PIN) …
FBI warns of Iranian hackers looking to buy US orgs’ stolen data Read More »
Telnyx is the latest VoIP telephony provider targeted with distributed denial-of-service (DDoS) attacks, causing worldwide outages since yesterday. Telnyx is a voice over Internet Protocol (VoIP) company that provides worldwide telephony services over the Internet, including …
Telnyx is the latest VoIP provider hit with DDoS attacks Read More »
Screenshots obtained by Motherboard reportedly show the internal Robinhood tools that a hacker used to access “more extensive account details” for some of the trading platform’s accounts. The heavily redacted screenshots show that hackers had …
Screenshots reveal what extra information the Robinhood hackers accessed Read More »
A North Korean hacking group has been attacking think tanks in the South through malware-laden blog posts. In a new campaign, tracked since June 2021, the state-sponsored advanced persistent threat (APT) group has been attempting …
North Korean hackers target the South’s think tanks through blog posts Read More »
Major comic book company Diamond Comic Distributors is struggling to keep up with its planned shipments after being hit with a ransomware attack on Sunday. In a statement, the company said its planned shipments for …
Comic book distributor struggling with shipments after ransomware attack Read More »
More than 1,000 Android users have been infected with newly discovered malware that surreptitiously records audio and video in real time, downloads files, and performs a variety of other creepy surveillance activities. In all, researchers …
>1,000 Android phones found infected by creepy new spyware Read More »
Microsoft has released security updates for its Exchange on-premises email server software that businesses should take on board. The security updates are for flaws in Exchange Server 2013, 2016, and 2019 — the on-premises versions …
A threat actor tracked as Shatak (TA551) recently partnered with the ITG23 gang (aka TrickBot and Wizard Spider) to deploy Conti ransomware on targeted systems. The Shatak operation partners with other malware developers to create phishing …
TrickBot teams up with Shatak phishers for Conti ransomware attacks Read More »