Romanian Cryptojacking Gang Target Linux-based Machines to Install Cryptominer Malware
Romanian threat actors are employing a new brute-forcer “Diicot brute” to crack the passwords on Linux-based machines and install cryptominer...
News
Israeli Firm Assisted Governments Target Journalists & Activists with Zero Days and Spyware
Microsoft as part of its Patch on Tuesday fixed two of the zero-day Windows flaws weaponized by Candiru, an Israeli...
Thousands of PS4s Seized, Employed in Mining Cryptocurrency Illegally
In Vinnytsia city located along the Southern Bug river, a large-scale electricity theft was revealed and recorded by the SBU....
Threat actor claims to have stolen 1 TB of data belonging to Saudi Aramco
A hacker claims to have stolen 1 TB of sensitive data from the Saudi Arabian petroleum and natural gas giant,...
Pegasus Project – how governments use Pegasus spyware against journalists
Pegasus Project investigation into the leak of 50,000 phone numbers of potential surveillance targets revealed the abuse of NSO Group’s...
Experts show how to bypass Windows Hello feature to login on Windows 10 PCs
Security researchers demonstrated how to bypass the Windows Hello facial recognition that is used in Windows 10 as a login...
“Seven or eight” zero-days: The failed race to fix Kaseya VSA, with Victor Gevers, Lock and Code S02E13
Kaseya VSA included at least “seven or eight” privately known zero-day vulnerabilities before it suffered a widespread ransomware attack that...
THORChain Suffers $7.6 Million Loss in Latest DeFi Exploit
Popular cross-chain liquidity exchange THORChain got compromised in a new DeFi hack where $7.6 million were stolen, suffering a second...
Telegram’s Encryption Protocol Detected with Vulnerabilities
A multinational computer team claimed on Friday that the popular encrypted chat app Telegram is detected with four cryptographic vulnerabilities...
Facebook says Iranian Hackers Targeted U.S. Military Personnel
On Thursday, Facebook announced that it had shut down approximately 200 accounts operated by a group of hackers in Iran...
Chinese government issues new vulnerability disclosure regulations
Cyberspace Administration of China (CAC) issued new vulnerability disclosure regulations that oblige experts to report zero-days to the government. The...
Instagram implements ‘Security Checkup’ to help users recover compromised accounts
Instagram introduced a new security feature dubbed “Security Checkup” to help users to recover their accounts that have been compromised....
HelloKitty ransomware gang targets vulnerable SonicWall devices
BleepingComputer became aware that the recent wave of attacks targeting vulnerable SonicWall devices was carried out by HelloKitty ransomware operators....
Security Affairs newsletter Round 323
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
By Fooling a Webcam, Hackers were Able to get Past Windows Hello
Biometric authentication is a critical component of the IT industry's plan to eliminate the need for passwords. However, a new...
Experts: the volume of cryptocurrency fraud in the world has reached $1 billion in a year
In the last year, at least $1 billion worth of digital currency was stolen worldwide. The number of extortion cases...
SpearTip: New Diavol Ransomware Does Steal Data
The Wizard Spider threat organization, which is behind the Trickbot botnet, has been connected to a new ransomware outbreak called...
Toddler Android Banking Malware Spreads Across Europe
Cybersecurity researchers have unearthed a new Android banking Trojan dubbed ‘Toddler’, which is infecting users across Europe. According to the...
Russia Based Company, DDoS – Guard gets Targeted by Cybercriminals
Leaked data for sale through forums and marketplaces in cybercrime appears so frequent that it is essentially unknown, except for...
US govt offers $10 million reward for info on nation-state cyber operations
The US government is offering a $10 million reward to everyone that provides information on operations conducted by nation-state actors....
Cisco fixes high-risk DoS flaw in ASA, FTD Software
Cisco addressed a high severity DoS vulnerability in the Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software. Cisco...
D-Link issues beta hotfix for multiple flaws in DIR-3040 routers
Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment...
US offers huge reward in fight against state-sponsored cybercriminals
The US Department of State has announced that its Rewards for Justice (RFJ) program is now offering: …up to $10...
Does using a VPN slow down your Internet?
A Virtual Private Network (VPN) can stop others from snooping on or tampering with your Internet traffic. It does this...
