Security

Monday, 29 May 2023

MCNA Dental data breach impacts 8.9 million people after ransomware attack

Security

Managed Care of North America (MCNA) Dental has published a data breach notification on its website, informing almost 9 million patients that their personal data were compromised.

Tags:

Jimbos Protocol Arbitrum-based DeFi project flash loan attack 4000 ETH tokens Twitter yesterday

1285 Hits

0 Comments

Bill Toulas

Monday, 29 May 2023

Lazarus hackers target Windows IIS web servers for initial access

Security

The notorious North Korean state-backed hackers, known as the Lazarus Group, are now targeting vulnerable Windows Internet Information Services (IIS) web servers to gain initial access to corporate networks.

1331 Hits

0 Comments

Lawrence Abrams

Sunday, 28 May 2023

Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

Security

A new 'File Archivers in the Browser' phishing kit abuses ZIP domains by displaying fake WinRAR or Windows File Explorer windows in the browser to convince users to launch malicious files.

1313 Hits

0 Comments

Sergiu Gatlan

Saturday, 27 May 2023

CISA warns govt agencies of recently patched Barracuda zero-day

Security

CISA warned of a recently patched zero-day vulnerability exploited last week to hack into Barracuda Email Security Gateway (ESG) appliances.

1206 Hits

0 Comments

Lawrence Abrams

Saturday, 27 May 2023

QBot malware abuses Windows WordPad EXE to infect devices

Security

The QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program to infect computers, using the legitimate program to evade detection by security software.

1226 Hits

0 Comments

Bill Toulas

Saturday, 27 May 2023

Hot Pixels attack checks CPU temp, power changes to steal data

Security

A team of researchers at Georgia Tech, the University of Michigan, and Ruhr University Bochum have developed a novel attack called "Hot Pixels," which can retrieve pixels from the content displayed in the target's browser and infer the navigation history.

1312 Hits

0 Comments

Bill Toulas

Tuesday, 23 May 2023

IT employee impersonates ransomware gang to extort employer

Security

A 28-year-old United Kingdom man from Fleetwood, Hertfordshire, has been convicted of unauthorized computer access with criminal intent and blackmailing his employer.

1286 Hits

0 Comments

Bill Toulas

Tuesday, 23 May 2023

Cuba ransomware claims cyberattack on Philadelphia Inquirer

Security

The Cuba ransomware gang has claimed responsibility for this month's cyberattack on The Philadelphia Inquirer, which temporarily disrupted the newspaper's distribution and disrupted some business operations.

1277 Hits

0 Comments

Lawrence Abrams

Tuesday, 16 May 2023

New ZIP domains spark debate among cybersecurity experts

Security

Cybersecurity researchers and IT admins have raised concerns over Google's new ZIP and MOV Internet domains, warning that threat actors could use them for phishing attacks and malware delivery.

1275 Hits

0 Comments

Bill Toulas

Tuesday, 16 May 2023

Hackers use Azure Serial Console for stealthy access to VMs

Security

A financially motivated cybergang tracked by Mandiant as 'UNC3944' is using phishing and SIM swapping attacks to hijack Microsoft Azure admin accounts and gain access to virtual machines.

1277 Hits

0 Comments

Bill Toulas

Monday, 15 May 2023

Ransomware gang steals data of 5.8 million PharMerica patients

Security

Pharmacy services provider PharMerica has disclosed a massive data breach impacting over 5.8 million patients, exposing their medical data to hackers.

1286 Hits

0 Comments

Bill Toulas

Sunday, 14 May 2023

Hackers use public exploit to attack vulnerable WordPress sites

Security

Hackers are actively exploiting a recently fixed vulnerability in the WordPress Advanced Custom Fields plugin roughly 24 hours after a proof-of-concept (PoC) exploit was made public.

1207 Hits

0 Comments

Sergiu Gatlan

Saturday, 13 May 2023

Capita warns customers they should assume data was stolen

Security

Business process outsourcing firm Capita is warning customers to assume that their data was stolen in a cyberattack that affected its systems in early April.