Discord Adds Security Key Support For All Users To Enhance Security
Discord has made security key multi-factor authentication (MFA) available for all accounts on the platform, bringing significant security and anti-phishing...
News
Us Nuclear Research Lab Data Breach Impacts 45 000 People
The Idaho National Laboratory (INL) confirmed that attackers stole the personal information of more than 45,000 individuals after breaching its...
Kraft Heinz Investigates Hack Claims Says Systems Operating Normally
Kraft Heinz has confirmed that their systems are operating normally and that there is no evidence they were breached after...
Protect Your Active Directory From These Password Based Vulnerabilities
Active Directory (AD) is a highly attractive target for threat actors due to its critical role as the identity (or...
Ubiquiti Users Report Having Access To Others Unifi Routers Cameras
12/14/23 update with information from Ubiquiti added below. Since yesterday, users of Ubiquiti networking devices, ranging from routers to security...
Google’s New Tracking Protection in Chrome Blocks Third-Party Cookies
Google on Thursday announced that it will start testing a new feature called "Tracking Protection" starting January 4, 2024, to...
New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities
A pro-Hamas threat actor known as Gaza Cyber Gang is targeting Palestinian entities using an updated version of a backdoor...
Microsoft Targets Prolific Outlook Fraudster Storm-1152
Microsoft has gone after a prolific Vietnam-based threat group it describes as “the number one seller and creator” of fake...
Approval Phishing Scams Drain $1bn of Cryptocurrency from Victims
Approval phishing scams have been used to steal at least $1bn in cryptocurrency since May 2021, according to a new...
GambleForce Group Targets Websites With SQL Injection
Security researchers have warned of a new threat group targeting gambling, government, retail and travel websites to steal sensitive information...
Cozy Bear Hackers Target JetBrains TeamCity Servers in Global Campaign
Cozy Bear, a threat group linked with the Russian foreign intelligence service (SVR), has been conducting a global hacking campaign...
Vulnerabilities Now Top Initial Access Route For Ransomware
Threat actors are switching tactics to compromise their victims with ransomware, with more attacks now exploiting vulnerabilities rather than using phishing...
Multiple High Severity Vulnerabilities in Qualcomm and MediaTek Products
MediaTek and Qualcomm have released updates addressing multiple high severity implementation-level 5G vulnerabilities in their products. These vulnerabilities are collectively...
Reimagining Network Pentesting With Automation
Network penetration testing plays a crucial role in protecting businesses in the ever-evolving world of cybersecurity. Yet, business leaders and...
116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems
Cybersecurity researchers have identified a set of 116 malicious packages on the Python Package Index (PyPI) repository that are designed...
Multiple High Severity Vulnerabilities in Qualcomm and MediaTek Products
MediaTek and Qualcomm have released updates addressing multiple high severity implementation-level 5G vulnerabilities in their products. These vulnerabilities are collectively...
Apple Emergency Updates Fix Recent Zero Days On Older Iphones
Apple has issued emergency security updates to backport patches for two actively exploited zero-day flaws to older iPhones and some...
Counter Strike 2 Html Injection Bug Exposes Players Ip Addresses
Valve has reportedly fixed an HTML injection flaw in CS2 that was heavily abused today to inject images into games...
Cloud Engineer Gets 2 Years For Wiping Ex Employers Code Repos
Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping...
Ukraines Largest Mobile Carrier Kyivstar Down Following Cyberattack
Kyivstar, Ukraine's largest telecommunications service provider serving over 25 million mobile and home internet subscribers, has suffered a cyberattack impacting...
Over 1 450 Pfsense Servers Exposed To Rce Attacks Via Bug Chain
Roughly 1,450 pfSense instances exposed online are vulnerable to command injection and cross-site scripting flaws that, if chained, could enable...
50k WordPress Sites Exposed To Rce Attacks By Critical Bug In Backup Plugin
A critical severity vulnerability in a WordPress plugin with more than 90,000 installs can let attackers gain remote code execution...
Lazarus Hackers Drop New Rat Malware Using 2 Year Old Log4j Bug
The notorious North Korean hacking group known as Lazarus continues to exploit CVE-2021-44228, aka "Log4Shell," this time to deploy three...
Hackers Are Exploiting Critical Apache Struts Flaw Using Public Poc
Hackers are attempting to leverage a recently fixed critical vulnerability (CVE-2023-50164) in Apache Struts that leads to remote code execution,...
