Security

Monday, 29 May 2023

MCNA Dental data breach impacts 8.9 million people after ransomware attack

Security

Managed Care of North America (MCNA) Dental has published a data breach notification on its website, informing almost 9 million patients that their personal data were compromised.

Tags:

Jimbos Protocol Arbitrum-based DeFi project flash loan attack 4000 ETH tokens Twitter yesterday

1228 Hits

0 Comments

Bill Toulas

Monday, 29 May 2023

Lazarus hackers target Windows IIS web servers for initial access

Security

The notorious North Korean state-backed hackers, known as the Lazarus Group, are now targeting vulnerable Windows Internet Information Services (IIS) web servers to gain initial access to corporate networks.

1260 Hits

0 Comments

Lawrence Abrams

Sunday, 28 May 2023

Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

Security

A new 'File Archivers in the Browser' phishing kit abuses ZIP domains by displaying fake WinRAR or Windows File Explorer windows in the browser to convince users to launch malicious files.

1260 Hits

0 Comments

Sergiu Gatlan

Saturday, 27 May 2023

CISA warns govt agencies of recently patched Barracuda zero-day

Security

CISA warned of a recently patched zero-day vulnerability exploited last week to hack into Barracuda Email Security Gateway (ESG) appliances.

1150 Hits

0 Comments

Lawrence Abrams

Saturday, 27 May 2023

QBot malware abuses Windows WordPad EXE to infect devices

Security

The QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program to infect computers, using the legitimate program to evade detection by security software.

1166 Hits

0 Comments

Bill Toulas

Saturday, 27 May 2023

Hot Pixels attack checks CPU temp, power changes to steal data

Security

A team of researchers at Georgia Tech, the University of Michigan, and Ruhr University Bochum have developed a novel attack called "Hot Pixels," which can retrieve pixels from the content displayed in the target's browser and infer the navigation history.

1233 Hits

0 Comments

Bill Toulas

Tuesday, 23 May 2023

IT employee impersonates ransomware gang to extort employer

Security

A 28-year-old United Kingdom man from Fleetwood, Hertfordshire, has been convicted of unauthorized computer access with criminal intent and blackmailing his employer.

1230 Hits

0 Comments

Bill Toulas

Tuesday, 23 May 2023

Cuba ransomware claims cyberattack on Philadelphia Inquirer

Security

The Cuba ransomware gang has claimed responsibility for this month's cyberattack on The Philadelphia Inquirer, which temporarily disrupted the newspaper's distribution and disrupted some business operations.

1220 Hits

0 Comments

Lawrence Abrams

Tuesday, 16 May 2023

New ZIP domains spark debate among cybersecurity experts

Security

Cybersecurity researchers and IT admins have raised concerns over Google's new ZIP and MOV Internet domains, warning that threat actors could use them for phishing attacks and malware delivery.

1203 Hits

0 Comments

Bill Toulas

Tuesday, 16 May 2023

Hackers use Azure Serial Console for stealthy access to VMs

Security

A financially motivated cybergang tracked by Mandiant as 'UNC3944' is using phishing and SIM swapping attacks to hijack Microsoft Azure admin accounts and gain access to virtual machines.

1214 Hits

0 Comments

Bill Toulas

Monday, 15 May 2023

Ransomware gang steals data of 5.8 million PharMerica patients

Security

Pharmacy services provider PharMerica has disclosed a massive data breach impacting over 5.8 million patients, exposing their medical data to hackers.

1231 Hits

0 Comments

Bill Toulas

Sunday, 14 May 2023

Hackers use public exploit to attack vulnerable WordPress sites

Security

Hackers are actively exploiting a recently fixed vulnerability in the WordPress Advanced Custom Fields plugin roughly 24 hours after a proof-of-concept (PoC) exploit was made public.

1145 Hits

0 Comments

Sergiu Gatlan

Saturday, 13 May 2023

Capita warns customers they should assume data was stolen

Security

Business process outsourcing firm Capita is warning customers to assume that their data was stolen in a cyberattack that affected its systems in early April.

1312 Hits

0 Comments

Sergiu Gatlan

Friday, 12 May 2023

Discord discloses data breach after support agent got hacked

Security

Discord is notifying users of a data breach that occurred after the account of a third-party support agent was compromised.

1201 Hits

0 Comments

Bill Toulas

Friday, 12 May 2023

Toyota: Car location data of 2 million customers exposed for ten years

Security

Toyota Motor Corporation disclosed a data breach on its cloud environment that exposed the car-location information of 2,150,000 customers for ten years, between November 6, 2013, and April 17, 2023.

1254 Hits

0 Comments

Bill Toulas

Thursday, 20 April 2023

Capita confirms hackers stole data in recent cyberattack

Security

London-based professional outsourcing giant Capita has published an update on the cyber-incident that impacted it at the start of the month, now admitting that hackers exfiltrated data from its systems.

1433 Hits

0 Comments

Sergiu Gatlan

Sunday, 16 April 2023

CISA warns of Android bug exploited by Chinese app to spy on users

Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of a high-severity Android vulnerability believed to have been exploited by a Chinese e-commerce app Pinduoduo as a zero-day to spy on its users.