The very best work from our friends at competing publications. © 2024 TechCrunch. All rights reserved. For personal use only.
Category: Security
Global Security News, Security
Clop ransomware threatens 66 Cleo attack victims with data leak
The Clop ransomware gang started to extort victims of its Cleo data theft attacks and announced on its dark web portal that 66 companies have 48 hours to respond to the demands. […]
Exploits, Global Security News, Security
Adobe warns of critical ColdFusion bug with PoC exploit code
Adobe has released out-of-band security updates to address a critical ColdFusion vulnerability with proof-of-concept exploit code. […]
Global Security News, Legal, Security
FTC orders Marriott and Starwood to implement strict data security
The Federal Trade Commission (FTC) has ordered Marriott International and Starwood Hotels to define and implement a robust customer data security scheme following failures that led to massive data breaches. […]
Global Security News, Security
Premium WPLMS WordPress plugins address seven critical flaws
Two WordPress plugins required by the premium WordPress WPLMS theme, which has over 28,000 sales, are vulnerable to more than a dozen critical-severity vulnerabilities. […]
Global Security News, Security
US court finds spyware maker NSO liable for WhatsApp hacks
A U.S. federal judge has ruled that Israeli spyware maker NSO Group violated U.S. hacking laws by using WhatsApp zero-days to deploy Pegasus spyware on at least 1,400 devices. […]
Global Security News, Managed Kubernetes, Security, Security Bloggers Network
The Top 5 Kubernetes CVEs of 2024: Have You Patched Them Yet?
Keeping up to date with critical vulnerabilities related to Kubernetes can be challenging for a variety of reasons. The biggest one may be related to Kubernetes itself; it’s a complex and rapidly evolving platform, with regular updates and new features being introduced regularly (not to mention updates to APIs and add-ons). Kubernetes environments are scalable…
Android, Apple, Cybersecurity, encryption, Global Security News, Google, identity theft, Microsoft, Mobile Security, password manager, phishing, privacy, Ransomware, Security, spam, TR Academy, trend micro
Protect 3 Devices With This Maximum Security Software
Trend Micro guards desktop and mobile devices from ransomware, phishing schemes, spam, and more for one year.
cyberattacks, Cybersecurity, data breach, Evergreen, Global IT News, Global Security News, Security
The TechCrunch Cyber Glossary
This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of how — and why — we use them. © 2024 TechCrunch. All rights reserved. For personal use only.
Artificial Intelligence, AT&T, Big Data, Cloud, Cybersecurity, Exec, Global Security News, moveit breach, national public data breach, nis 2 directive, Security
Navigating the Cyber Threat Landscape: Lessons Learned & What’s Ahead
A look at the cyber threat landscape of 2024, including major breaches and trends. An expert weighs in on key lessons and what to expect in 2025.
Artificial Intelligence, AT&T, Big Data, Cloud, Cybersecurity, Exec, Global Security News, moveit breach, national public data breach, nis 2 directive, Security
Navigating the Cyber Threat Landscape: Lessons Learned & What’s Ahead
A look at the cyber threat landscape of 2024, including major breaches and trends. An expert weighs in on key lessons and what to expect in 2025.
Cloud Security, eset, Global Security News, Heimdal Patch & Asset Management, ManageEngine Patch Manager Plus, ninjaone, Patch Management Software, Security, SolarWinds Patch Manager
Best Patch Management Software (2024): Compare Features & Pricing
Patch management software ensures that known vulnerabilities are patched efficiently to prevent breaches while streamlining IT workflows. Find the best patch management solution for your business.
Cloud Security, eset, Global Security News, Heimdal Patch & Asset Management, ManageEngine Patch Manager Plus, ninjaone, Patch Management Software, Security, SolarWinds Patch Manager
Best Patch Management Software (2024): Compare Features & Pricing
Patch management software ensures that known vulnerabilities are patched efficiently to prevent breaches while streamlining IT workflows. Find the best patch management solution for your business.
Global Security News, Security
Apache fixes remote code execution bypass in Tomcat web server
Apache has released a security update that addresses an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution. […]
Cybersecurity, Global IT News, Global Security News, NSO Group, pegasus, privacy, Security, Spyware, WhatsApp
WhatsApp scores historic victory against NSO Group in long-running spyware hacking case
A US judge ruled that the Israeli spyware maker breached hacking laws by using WhatsApp to infect devices with Pegasus © 2024 TechCrunch. All rights reserved. For personal use only.
Apple, Gadgets, Global IT News, Global Security News, Hardware, Security
Apple might be working on a smart doorbell
There’s been a lot of reporting in recent months around Apple’s efforts to expand its footprint in customers’ homes with in-development products like a wall-mounted smart home hub. According to a new report in Bloomberg, that strategy could also include a smart doorbell. This doorbell would use Apple’s FaceID technology to scan people’s faces as…
CryptoCurrency, Global Security News, Security
North Korean hackers stole $1.3 billion worth of crypto this year
North Korean hackers have stolen $1.34 billion worth of cryptocurrency across 47 cyberattacks that occurred in 2024, according to a new report by blockchain analysis company Chainalysis. […]
Global Security News, Security
New FlowerStorm Microsoft phishing service fills void left by Rockstar2FA
A new Microsoft 365 phishing-as-a-service platform called “FlowerStorm” is growing in popularity, filling the void left behind by the sudden shutdown of the Rockstar2FA cybercrime service. […]
Blog, Careers, cryptography, Global Security News, PQC, Security, Security Awareness, Security Bloggers Network
Navigating the Future of Secure Code Signing and Cryptography
In today’s interconnected world, the integrity of software has never been more critical. With the increasing reliance on open-source components and the complexities introduced by containerized applications, ensuring trust in software has become a cornerstone of modern security practices. I […] The post Navigating the Future of Secure Code Signing and Cryptography appeared first on…
Department of Justice, Global IT News, Global Security News, indictment, LockBit, Security
Third member of LockBit ransomware gang has been arrested
LockBit is believed tobe responsible for at least $500 million in ransom payments alone. © 2024 TechCrunch. All rights reserved. For personal use only.
Big Data, Compliance, Data Security, employee payments, Global Security News, hr, Human Resources, International, Payroll, payroll platforms, payroll taxes, privacy regulations, Security, Software
What Payroll Documents Do You Need to Pay Employees?
Essential payroll documents like W-2s and time sheets ensure accurate employee payments. Learn what you need for compliance and efficiency.
CryptoCurrency, Global Security News, Security
Malicious Rspack, Vant packages published using stolen NPM tokens
Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. […]
Global Security News, Security
US charges Russian-Israeli as suspected LockBit ransomware coder
The US Department of Justice has charged a Russian-Israeli dual-national for his suspected role in developing malware and managing the infrastructure for the notorious LockBit ransomware group. […]
Global Security News, Security
Sophos Firewall vulnerable to critical remote code execution flaw
Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged SSH access to devices. […]
Cybersecurity, data breach, Global IT News, Global Security News, Healthcare, Ransomware, Security
Ransomware attack on health giant Ascension hits 5.6 million patients
The cyberattack on Ascension ranks as the third-largest healthcare-related breach of 2024. © 2024 TechCrunch. All rights reserved. For personal use only.
Apple, Citizen Lab, Cybersecurity, Global IT News, Global Security News, infosec, iOS, iPhone, lockdown mode, NSO Group, privacy, Security, Spyware, surveillance
Why Apple sends spyware victims to this nonprofit security lab
Before the elections, the cybersecurity team of U.S. vice president and then-presidential candidate Kamala Harris reached out to Apple asking for help, according to Forbes, after a tool that’s designed to detect spyware on iPhones flagged anomalies on two devices belonging to campaign staffers. Apple declined to forensically analyze the phones, per Forbes. The company’s…
Global Security News, Security
Krispy Kreme breach, data theft claimed by Play ransomware gang
The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November. […]
Global Security News, Healthcare, Security
Ascension: Health data of 5.6 million stolen in ransomware attack
Ascension, one of the largest private U.S. healthcare systems, is notifying over 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation. […]
Global Security News, Security
Massive live sports piracy ring with 812 million yearly visits taken offline
The Alliance for Creativity and Entertainment (ACE) has taken down one of the world’s largest live sports streaming piracy rings, with over 821 million visits last year. […]
AI, Enterprise, Fundraising, Global IT News, Global Security News, Mindgard, Security, spinouts, Startups
British university spinoff Mindgard protects companies from AI threats
AI creates a dilemma for companies: Don’t implement it yet, and you might miss out on productivity gains and other potential benefits; but do it wrong, and you might expose your business and clients to unmitigated risks. This is where a new wave of “security for AI” startups come in, with the premise that these…
Global Security News, Security
Romanian Netwalker ransomware affiliate sentenced to 20 years in prison
Daniel Christian Hulea, a Romanian man charged for his involvement in NetWalker ransomware attacks, was sentenced to 20 years in prison after pleading guilty to computer fraud conspiracy and wire fraud conspiracy in June. […]
Global IT News, Global Security News, India, Rapido, Security
India’s Rapido exposed user and driver data through leaky website feedback form
Rapido restricted access to the exposed portal soon after TechCrunch contacted the company. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Hardware, Security
BadBox malware botnet infects 192,000 Android devices despite disruption
The BadBox Android malware botnet has grown to over 192,000 infected devices worldwide despite a recent sinkhole operation that attempted to disrupt the operation in Germany. […]
Global Security News, Security
Android malware found on Amazon Appstore disguised as health app
A malicious Android spyware application named ‘BMI CalculationVsn’ was discovered on the Amazon Appstore, masquerading as a simple health tool but stealing data from infected devices in the background. […]
Global Security News, Security
Junipers warns of Mirai botnet targeting Session Smart routers
uniper Networks has warned customers of Mirai malware attacks targeting and infecting Session Smart routers using default credentials. […]
Global Security News, Security
Juniper warns of Mirai botnet targeting Session Smart routers
Juniper Networks has warned customers of Mirai malware attacks targeting and infecting Session Smart routers using default credentials. […]
Global Security News, Security
Fortinet warns of FortiWLM bug giving hackers admin privileges
Fortinet has disclosed a critical vulnerability in Fortinet Wireless Manager (FortiWLM) that allows remote attackers to take over devices by executing unauthorized code or commands through specially crafted web requests. […]
Global Security News, Security
BeyondTrust says hackers breached Remote Support SaaS instances
Privileged access management company BeyondTrust suffered a cyberattack in early December after threat actors breached some of its Remote Support SaaS instances. […]
Asia Pacific, Cybersecurity, encryption, Global Security News, lockdown mode, Salt Typhoon, Security, signal
US government urges high-ranking officials to lock down mobile devices following telecom breaches
The move to urge Americans to use end-to-end encrypted apps comes as China-backed gangs are hacking into phone and internet giants. © 2024 TechCrunch. All rights reserved. For personal use only.
antivirus, Cloud Security, Global Security News, mcafee, norton, Security
McAfee vs Norton: Which Antivirus Software Is Best?
Norton and McAfee are among the original AV vendors. Does one have an edge over the other?
Crypto, Global IT News, Global Security News, North Korea, Security
North Korea-linked hackers accounted for 61% of all crypto stolen in 2024
With the rising adoption and value of crypto assets, the potential for theft is also on the rise. This year, the total value of cryptocurrency stolen surged 21%, reaching a substantial $2.2 billion. And according to a Chainalysis report released on Thursday, more than half of this amount was stolen by North Korea-affiliated hacking groups.…
Global IT News, Global Security News, India, mcdonalds, McDonalds India, Security
Bugs in a major McDonald’s India delivery system exposed sensitive customer data
McDonald’s India exposed the personal information of customers and drivers due to security flaws impacting its APIs. © 2024 TechCrunch. All rights reserved. For personal use only.
Compliance, Cybersecurity, Data Security, ecommerce, Enterprise, Exploits, Global Security News, Security, Security Awareness, Security Boulevard (Original), Skimming, Social - Facebook, Social - LinkedIn, Social - X
Understanding Virtual Skimmers: A Threat to E-Commerce Security
Virtual skimmers exploit vulnerabilities in websites that process payments online, often without leaving a trace until it’s too late. The post Understanding Virtual Skimmers: A Threat to E-Commerce Security appeared first on Security Boulevard.
Global Security News, Google, Security
Ongoing phishing attack abuses Google Calendar to bypass spam filters
An ongoing phishing scam is abusing Google Calendar invites and Google Drawings pages to steal credentials while bypassing spam filters. […]
Global Security News, Security
Raccoon Stealer malware operator gets 5 years in prison after guilty plea
Ukrainian national Mark Sokolovsky was sentenced today to five years in prison for his involvement in the Raccoon Stealer malware cybercrime operation. […]
Global Security News, Security
Russian hackers use RDP proxies to steal data in MiTM attacks
The Russian hacking group tracked as APT29 (aka “Midnight Blizzard”) is using a network of 193 remote desktop protocol proxy servers to perform man-in-the-middle (MiTM) attacks to steal data and credentials and to install malicious payloads. […]
Global Security News, Security
US considers banning TP-Link routers over cybersecurity risks
The U.S. government is considering banning TP-Link routers starting next year if ongoing investigations find that their use in cyberattacks poses a national security risk. […]
Global Security News, Security
Don’t overlook these key SSE components
Security service edge (SSE) has emerged as a hot topic in the networking and security markets because it provides cloud-delivered security to protect access to websites and applications. This is key for the work-from-anywhere approach enterprises adopted during the pandemic and maintained as hybrid work became the norm. SSE is also a prevalent subject because…
Cybersecurity, data breach, Exclusive, Global IT News, Global Security News, location tracking, Security
Tracker firm Hapn spilling names of thousands of GPS tracking customers
A security researcher found customer names and workplace affiliations spilling directly from Hapn’s servers. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
HubSpot phishing targets 20,000 Microsoft Azure accounts
A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials. […]
Global Security News, North America, Security
CISA urges switch to Signal-like encrypted messaging apps after telecom hacks
Today, CISA urged senior government and political officials to switch to end-to-end encrypted messaging apps like Signal following a wave of telecom breaches across dozens of countries, including eight carriers in the United States. […]
CryptoCurrency, Global Security News, Microsoft, Security
Malicious Microsoft VSCode extensions target devs, crypto community
Malicious Visual Studio Code extensions were discovered on the VSCode marketplace that download heavily obfuscated PowerShell payloads to target developers and cryptocurrency projects in supply chain attacks. […]
Global Security News, Security
Recorded Future CEO applauds “undesirable” designation by Russia
Recorded Future, an American threat intelligence company, has become the first cybersecurity firm designated by the Russian government as an “undesirable” organization. […]
cyberattack, Cybersecurity, evergreens, Global IT News, Global Security News, Healthcare, Ransomware, Security
How the ransomware attack at Change Healthcare went down: A timeline
A hack on UnitedHealth-owned tech giant Change Healthcare likely stands as one of the biggest data breaches of U.S. medical data in history. © 2024 TechCrunch. All rights reserved. For personal use only.
Cybersecurity, data breach, Global IT News, Global Security News, Ransomware, Security, UnitedHealth
Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans
New details emerged about the Change Healthcare ransomware attack in Nebraska’s complaint. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
Interpol replaces dehumanizing “Pig Butchering” term with “Romance Baiting”
Interpol calls on the cybersecurity community, law enforcement, and the media to stop using the term “Pig Butchering” when referring to online relationship and investment scams, as it unnecessarily shames the victims impacted by these fraud campaigns. […]
Cloud Security, Global Security News, QRadar, Security, SIEM, splunk
QRadar vs Splunk (2024): SIEM Tool Comparison
This is a comprehensive QRadar vs. Splunk SIEM tool comparison, covering their features, pricing, and more. Use this guide to find the best SIEM tool for you.
Global Security News, Security
‘Bitter’ cyberspies target defense orgs with new MiyaRAT malware
A cyberespionage threat group known as ‘Bitter’ was observed targeting defense organizations in Turkey using a novel malware family named MiyaRAT. […]
CryptoCurrency, Global Security News, Security
New fake Ledger data breach emails try to steal crypto wallets
A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. […]
Global Security News, Microsoft, Security
CISA orders federal agencies to secure Microsoft 365 tenants
CISA has issued this year’s first binding operational directive (BOD 25-01), ordering federal civilian agencies to secure their Microsoft 365 cloud environments by implementing a list of required configuration baselines. […]
Artificial Intelligence, crowdstrike, Cybersecurity, generative ai, Global Security News, International, Security
CrowdStrike Survey Highlights Security Challenges in AI Adoption
Ideally, generative AI should augment, not replace, cybersecurity workers. But ROI still proves a challenge.
Exploits, Global Security News, Security
New critical Apache Struts flaw exploited to find vulnerable servers
A recently patched critical Apache Struts 2 vulnerability tracked as CVE-2024-53677 is actively exploited using public proof-of-concept exploits to find vulnerable devices. […]
Global Security News, Legal, Security
Ireland fines Meta $264 million over 2018 Facebook data breach
The Irish Data Protection Commission (DPC) fined Meta €251 million ($263.6M) over General Data Protection Regulation (GDPR) violations arising from a 2018 personal data breach impacting 29 million Facebook accounts. […]
business, channel, Global Security News, Security, services
The Cybersecurity Stories that Defined 2024 in the Channel
More than ever, cybersecurity posture is an incredibly important aspect of the IT channel, with wide-ranging implications. As we continue to generate colossal amounts of data, protecting systems and clients has become a challenging task that requires partnerships, new emerging solutions, and acquisitions to overcome such a challenge. Over the course of 2024, there have…
Global Security News, Security
Next-gen cybercrime: The need for collaboration in 2025
Cybercrime is a relentless and evolving threat to organizations worldwide. However, with the right insights, we can significantly enhance our security, mitigate risks, and stay ahead of these criminals. FortiGuard Labs’ Cyberthreat Predictions for 2025 report is designed to provide exactly these insights. It identifies emerging threat trends for the coming year and offers actionable…
Global Security News, Security
Over 25,000 SonicWall VPN Firewalls exposed to critical flaws
Over 25,000 publicly accessible SonicWall SSLVPN devices are vulnerable to critical severity flaws, with 20,000 using a SonicOS/OSX firmware version that the vendor no longer supports. […]
Global Security News, Security
Might need a mass password reset one day? Read this first.
Organizations are often caught off-guard when a data breaches occurs, forcing them to quickly perform mass password resets Learn from Specops Software about some of the common mass password reset scenarios and the challenges you may face. […]
Cybersecurity, data breach, Global IT News, Global Security News, Ransomware, Security
Texas medical school says hackers stole sensitive health data of 1.4 million individuals
The university’s incident website blocks search engines from listing the site, making it more difficult for affected individuals to find the website in search results. © 2024 TechCrunch. All rights reserved. For personal use only.
Cloud Security, Global Security News, Security, VPN
Astrill VPN Review: Features, Performance, and Insights
Astrill VPN is touted as one of the best VPNs around. But is it worth the extra money?
Global Security News, Hardware, Security, TechRepublic Premium
Secure Equipment Repair Policy and Confidentiality Agreement
Organizations must frequently work with third parties to repair laptops, desktops, tablets, smartphones, servers, and other IT equipment. This customizable policy, written by Erik Eckel and Mark W. Kaelin for TechRepublic Premium, ensures an organization maintains regulatory and best business practice security compliance while tracking systems when they are being repaired. Featured text from the…
Global Security News, Security
FBI spots HiatusRAT malware attacks targeting web cameras, DVRs
The FBI warned today that new HiatusRAT malware attacks are now scanning for and infecting vulnerable web cameras and DVRs that are exposed online. […]
Global Security News, Security
Texas Tech University System data breach impacts 1.4 million patients
The Texas Tech University Health Sciences Center and its El Paso counterpart suffered a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients. […]
APAC, Artificial Intelligence, Australia, Exploits, Global Security News, Rapid7, Security
APAC: Ransomware to Cause ‘Bumpy’ Security Ride in 2025
Cashed-up ransomware criminals may exploit more zero days while potential blanket ransomware payment bans hang over defenders like a shadow.
Global Security News, linux, Security
Kali Linux 2024.4 released with 14 new tools, deprecates some features
Kali Linux has released version 2024.4, the fourth and final version of 2024, and it is now available with fourteen new tools, numerous improvements, and deprecates some features. […]
Global IT News, Global Security News, Security
Called your doctor after-hours? ConnectOnCall hackers may have stolen your medical data
The hackers stole names, phone numbers, dates of birth and information related to health conditions, treatments and prescriptions. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
Windows kernel bug now exploited in attacks to gain SYSTEM privileges
CISA has warned U.S. federal agencies to secure their systems against ongoing attacks targeting a high-severity Windows kernel vulnerability. […]
Global Security News, Security
Malicious ads push Lumma infostealer via fake CAPTCHA pages
A large-scale malvertising campaign distributed the Lumma Stealer info-stealing malware through fake CAPTCHA verification pages that prompt users to run PowerShell commands to verify they are not a bot. […]
Global Security News, Healthcare, Security
ConnectOnCall breach exposes health data of over 910,000 patients
Healthcare software as a service (SaaS) company Phreesia is notifying over 910,000 people that their personal and health data was exposed in a May breach of its subsidiary ConnectOnCall. […]
Global Security News, Security
Rhode Island confirms data breach after Brain Cipher ransomware attack
Rhode Island is warning that its RIBridges system, managed by Deloitte, suffered a data breach exposing residents’ personal information after the Brain Cipher ransomware gang hacked its systems. […]
Cybersecurity, Francisco Partners, Global IT News, Global Security News, Israel, NSO, NSO Group, paragon, Security, Spyware, surveillance
Israeli spyware maker Paragon bought by U.S. private equity giant
The company’s spyware, dubbed Graphite, is capable of hacking phones and stealing private communications. © 2024 TechCrunch. All rights reserved. For personal use only.
acquisition, cyber, Cybersecurity, Enterprise, Funding, Global IT News, Global Security News, Security
BlackBerry sells Cylance for $160M, a fraction of the $1.4B it paid in 2018
Arctic Wolf has acquired Cylance, BlackBerry’s beleaguered cybersecurity business, for $160 million — a significant write-down from the $1.4 billion BlackBerry paid to acquire the company in 2018. Under the terms of the deal, which is expected to close in BlackBerry’s fiscal Q4, BlackBerry will sell its Cylance assets to Arctic Wolf for $160 million…
Exploits, Global Security News, Mobile, Security
New Android NoviSpy spyware linked to Qualcomm zero-day bugs
The Serbian government exploited Qualcomm zero-days to unlock and infect Android devices with a new spyware named ‘NoviSpy,’ used to spy on activists, journalists, and protestors. […]
Global Security News, Hardware, Security, Software, Tech & Work
Remote Access Checklist
This Remote Access Checklist, created by Scott Matteson for TechRepublic Premium, should be used to ensure all employees have the requisite items, accounts, access, and instructions needed for remote work. It should be filled out by the IT department and signed off on by the employee and their supervisor/manager. This checklist can be customized to…
Amnesty International, Cellebrite, Cybersecurity, Global IT News, Global Security News, hacking, infosec, malware, Security, Serbia, Spyware
Serbian police used Cellebrite to unlock, then plant spyware, on a journalist’s phone
Amnesty said it found NoviSpy, an Android spyware linked to Serbian intelligence, on the phones of several members of Serbian civil society following police stops. © 2024 TechCrunch. All rights reserved. For personal use only.
Exploits, Global Security News, Security
Clop ransomware claims responsibility for Cleo data theft attacks
The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data. […]
Asia Pacific, Global Security News, Security
Winnti hackers target other threat actors with new Glutton PHP backdoor
The Chinese Winnti hacking group is using a new PHP backdoor named ‘Glutton’ in attacks on organizations in China and the U.S., and also in attacks on other cybercriminals. […]
Global IT News, Global Security News, rhode island, Security
Rhode Island says personal data likely breached in social services cyberattack
State officials said hundreds of thousands of Rhode Island residents could be affected by a cyberattack on the state’s online portal for social services, with a “high probability” that personally identifiable information was breached. According to an update from Governor Dan McKee’s office, the attack targeted RIBridges, which Rhode Island residents use to apply for…
Global Security News, Security
390,000 WordPress accounts stolen from hackers in supply chain attack
A threat actor tracked as MUT-1244 has stolen over 390,000 WordPress credentials in a large-scale, year-long campaign targeting other threat actors using a trojanized WordPress credentials checker. […]
Global Security News, Security
Auto parts giant LKQ says cyberattack disrupted Canadian business unit
Automobile parts giant LKQ Corporation disclosed that one of its business units in Canada was hacked, allowing threat actors to steal data from the company. […]
APAC, Australia, Cloud, cyber security, Global Security News, Salt Typhoon, salt typhoon australia, Security
Australian IT Pros Urged to Guard Against Chinese Cybersecurity Threats
Australian IT pros are urged to strengthen defenses as Chinese cyber threats target critical infrastructure and sensitive data.
Global Security News, Security
Citrix shares mitigations for ongoing Netscaler password spray attacks
Citrix Netscaler is the latest target in widespread password spray attacks targeting edge networking devices and cloud platforms this year to breach corporate networks. […]
Exploits, Global Security News, Security
CISA confirms critical Cleo bug exploitation in ransomware attacks
CISA confirmed today that a critical remote code execution bug in Cleo Harmony, VLTrader, and LexiCom file transfer software is being exploited in ransomware attacks. […]
Cybersecurity, Exclusive, Global IT News, Global Security News, Optum, Security, UnitedHealthcare
UnitedHealthcare’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet
Optum’s AI chatbot was found exposed online at a time when the healthcare giant faces scrutiny for its use of AI to allegedly deny patient claims. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
FTC warns of online task job scams hooking victims like gambling
The Federal Trade Commission (FTC) warns about a significant rise in gambling-like online job scams, known as “task scams,” that draw people into earning cash through repetitive tasks, with the promises of earning more if they deposit their own money. […]
Global Security News, Security
CISA warns water facilities to secure HMI systems exposed online
CISA and the Environmental Protection Agency (EPA) warned water facilities today to secure Internet-exposed Human Machine Interfaces (HMIs) from cyberattacks. […]
cyber attack, cyber security, Cybersecurity, E-Commerce, EU, Global Security News, Ransomware, retail, sainsburys, Security, Software, starbucks, supply chain, TR, uk, United Kingdom
Starbucks, Supermarkets Targeted in Ransomware Attack
In December, ransomware group Termite claimed responsibility for the attacks.
Global Security News, Security
Russia blocks Viber in latest attempt to censor communications
Russian telecommunications watchdog Roskomnadzor has blocked the Viber encrypted messaging app, used by hundreds of millions worldwide, for violating the country’s legislation. […]
Global Security News, Mobile, Security
Russian cyberspies target Android users with new spyware
Russian cyberspies Gamaredon has been discovered using two Android spyware families named ‘BoneSpy’ and ‘PlainGnome’ to spy on and steal data from mobile devices. […]
Global Security News, Mobile, Security
Russian cyberspies target Android users with new spyware
Russian cyberspies Gamaredon has been discovered using two Android spyware families named ‘BoneSpy’ and ‘PlainGnome’ to spy on and steal data from mobile devices. […]
Global Security News, Hardware, Security
Germany sinkholes BadBox malware pre-loaded on Android devices
Germany’s Federal Office for Information Security (BSI) has disrupted the BadBox malware operation pre-loaded in over 30,000 Android IoT devices sold in the country. […]