Lockbit Ransomware Gang Has Over 110 Million In Unspent Bitcoin
The LockBit ransomware gang received more than $125 million in ransom payments over the past 18 months, according to the...
News
Insomniac Games Alerts Employees Hit By Ransomware Data Breach
Sony subsidiary Insomniac Games is sending data breach notification letters to employees whose personal information was stolen and leaked online...
U Haul Says Hacker Accessed Customer Records Using Stolen Creds
U-Haul has started informing customers that a hacker used stolen account credentials to access an internal system for dealers and...
78% of Organizations Suffer Repeat Ransomware Attacks After Paying
Almost four in five (78%) of organizations who paid a ransom demand were hit by a second ransomware attack, often...
ICO Bans Serco Leisure’s Use of Facial Recognition for Employee Attendance
Serco Leisure has been ordered to stop using facial recognition technology (FRT) and fingerprint scanning to monitor employee attendance by...
Operation Cronos: Who Are the LockBit Admins
Read more about LockBit Ransomware: LockBit Takedown: What You Need to Know about Operation CronosLockBit Infrastructure Disrupted by Global Law...
Ftc To Ban Avast From Selling Browsing Data For Advertising Purposes
The U.S. Federal Trade Commission (FTC) will order Avast to pay $16.5 million and ban the company from selling the...
Lockbit Ransomware Secretly Building Next Gen Encryptor Before Takedown
LockBit ransomware developers were secretly building a new version of their file encrypting malware, dubbed LockBit-NG-Dev - likely to become...
Screenconnect Servers Hacked In Lockbit Ransomware Attacks
Attackers are exploiting a maximum severity authentication bypass vulnerability to breach unpatched ScreenConnect servers and deploy LockBit ransomware payloads on...
Bitwardens New Auto Fill Option Adds Phishing Resistance
The Bitwarden open-source password management service has introduced a new inline auto-fill menu that addresses the risk of user credentials being...
Cyber Pros Embrace AI, Over 80% Believe It Will Enhance Jobs
Most cybersecurity professionals believe that AI will have a positive impact on their jobs, helping alleviate pressures caused by the...
Businesses Increase Cybersecurity as Budgets Surge in 2024
Cybersecurity is a top concern for businesses in 2024, with over two-thirds of IT decision-makers reporting increased budgets. This positive...
Chinese Duo Found Guilty of $3m Apple Fraud Plot
Two Chinese nationals have been found guilty of running a sophisticated fraud scheme in which they attempted to con Apple...
Ransomware Warning as CVSS 10.0 ScreenConnect Bug is Exploited
IT admins have been urged to patch any on-premises ScreenConnect servers immediately, after reports that a recently published maximum severity...
Change Healthcare Cyber-Attack Leads to Prescription Delays
Health tech firm Change Healthcare, part of Optum, has been hit by a cyber-attack, leading to delays in prescriptions being...
SMBs at Risk From SendGrid-Focused Phishing Tactics
Cybersecurity experts at Kaspersky have uncovered a new phishing campaign that specifically targets small and medium-sized businesses (SMBs). The attack method...
OWASP Releases Security Checklist for Generative AI Deployment
Chief information security officers now have a new tool at their disposal to get started with AI securely.The Open Web...
Russian-Aligned Network Doppelgänger Targets German Elections
A joint effort by SentinelLabs and ClearSky Cyber Security has uncovered a significant propaganda and disinformation campaign, possibly orchestrated by...
Multiple Vulnerabilities in VMware Enhanced Authentication Plug-in
VMware has released mitigating measures addressing multiple vulnerabilities (CVE-2024-22245 and CVE-2024-22250) impacting their Enhanced Authentication Plug-in (EAP).The vulnerabilities are:• CVE-2024-22245:...
Active Exploitation of Critical Vulnerability in WordPress Bricks Plug-in
WordPress has released security updates to address a critical vulnerability (CVE-2024-25600) impacting their Bricks Builder Plug-in. The vulnerability has a...
Active Exploitation of Critical Vulnerability in WordPress Bricks Plug-in
WordPress has released security updates to address a critical vulnerability (CVE-2024-25600) impacting their Bricks Builder Plug-in. The vulnerability has a...
Multiple Vulnerabilities in VMware Enhanced Authentication Plug-in
VMware has released mitigating measures addressing multiple vulnerabilities (CVE-2024-22245 and CVE-2024-22250) impacting their Enhanced Authentication Plug-in (EAP).The vulnerabilities are:• CVE-2024-22245:...
New Ssh Snake Malware Steals Ssh Keys To Spread Across The Network
A threat actor is using an open-source network mapping tool named SSH-Snake to look for private keys undetected and move laterally...
Screenconnect Critical Bug Now Under Attack As Exploit Code Emerges
Both technical details and proof-of-concept exploits are available for the two vulnerabilities ConnectWise disclosed earlier this week for ScreenConnect, its...
