Menu

Link

3.8 Billion Users’ Combined Clubhouse, Facebook Data Up for Sale
Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords
TangleBot Malware Reaches Deep into Android Device Functions
Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN
Apple Patches 3 More Zero-Days Under Active Attack
Lithuania warns firms not to use Xiaomi and Huawei smartphones after investigation finds security and censorship concerns
REvil Affiliates Confirm: Leadership Were Cheating Dirtbags
5 Tips for Achieving Better Cybersecurity Risk Management
100M IoT Devices Exposed By Zero-Day Bug
Smashing Security podcast #244: Facebook Ray-Bans, VPN spies, and AI camouflage
US Government tells firms not to give in to ransomware demands, as first crypto exchange sanctioned for laundering cyber ransoms
FamousSparrow APT Wings in to Spy on Hotels, Governments
Google Report Spotlights Uptick in Controversial ‘Geofence Warrants’ by Police
Acronis Offers up to $5,000 to Users Who Spot Bugs in Its Cyber Protection Products
Domain Brand Monitor: The First Brand Protection Layer by WhoisXML API
Large-Scale Phishing-as-a-Service Operation Exposed
Crystal Valley Farm Coop Hit with Ransomware
Predict 21 – the intelligence summit from Recorded Future you cannot afford to miss, October 12-13 2021
Facebook’s Ray-Ban Stories glasses have got a problem
Netgear SOHO Security Bug Allows RCE, Corporate Attacks
Unpatched Apple Zero-Day in macOS Finder Allows Code Execution
How REvil May Have Ripped Off Its Own Affiliates
VMware Warns of Ransomware-Friendly Bug in vCenter Server
TikTok, GitHub, Facebook Join Open-Source Bug Bounty
Epik Confirms Hack, Gigabytes of Data on Offer
Hackers Are Going ‘Deep-Sea Phishing,’ So What Can You Do About It?
Turla APT Plants Novel Backdoor In Wake of Afghan Unrest
BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom
46% of On-Prem Databases Globally Contain Vulnerabilities: Is Yours Safe?
106 arrests as police dismantle Mafia-linked online crime gang
Amazon Driver-Surveillance Cameras Roll Out, Sparking Debate
Europol Breaks Open Extensive Mafia Cybercrime Ring
Payment API Bungling Exposes Millions of Users’ Payment Data
Bring Your APIs Out of the Shadows to Protect Your Business
Porn Problem: Adult Ads Persist on US Gov’t, Military Sites
Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do
AT&T Phone-Unlocking Malware Ring Costs Carrier $200M
Free decryptor for past REvil ransomware victims released
Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang
Fake Walmart press release causes cryptocurrency price surge
CISA, FBI: State-Backed APTs May Be Exploiting Critical Zoho Bug
Airline Credential-Theft Takes Off in Widening Campaign
Financial Cybercrime: Following Cryptocurrency via Public Ledgers
REvil/Sodinokibi Ransomware Universal Decryptor Key Is Out
DDoS Attacks: A Flourishing Business for Cybercrooks – Podcast
HP Omen Hub Exposes Millions of Gamers to Cyberattack
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
Smashing Security podcast #243: Breaking news, Apple zero-clicks, and bad blood
No Patch for High-Severity Bug in Legacy IBM System X Servers
Don’t miss Predict 21 – Recorded Future’s intelligence summit, October 12-13 2021
Attackers Impersonate DoT in Two-Day Phishing Scam
Adobe Snuffs Critical Bugs in Acrobat, Experience Manager
Microsoft Patches Actively Exploited Windows Zero-Day Bug
2021’s Most Dangerous Software Weaknesses
ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender
Pair of Google Chrome Zero-Day Bugs Actively Exploited
Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast
Romance, BEC Scams Lands Soldier in Jail for 46 Months
BlackMatter Ransomware Hits Japanese Tech Giant Olympus
Apple Issues Emergency Fix for NSO Zero-Click Zero Day
REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key?
WhatsApp’s End-to-End Encryption Isn’t Actually Broken
Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware
WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing
“Foolish” university hacker jailed after selling exam papers to fellow students
MyRepublic Data Breach Raises Data-Protection Questions
Top Steps for Ransomware Recovery and Preparation
Yandex Pummeled by Potent Meris DDoS Botnet
SOVA, Worryingly Sophisticated Android Trojan, Takes Flight
5 Steps For Securing Your Remote Work Space
Stolen Credentials Led to Data Theft at United Nations
Thousands of Fortinet VPN Account Credentials Leaked
McDonald’s Email Blast Includes Password to Monopoly Game Database
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
Microsoft warns of a Windows zero-day security hole that is being actively exploited
Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix
BladeHawk Attackers Target Kurds with Android Apps
Hear me speak about endpoint security and ransomware at two free webinars next week
Smashing Security podcast #242: ProtonMail privacy questioned, and Banksy blunder
What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
Tooling Network Detection & Response for Ransomware
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports
TeamTNT’s New Tools Target Multiple OS
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
Alleged Russian malware developer arrested after being stranded in South Korea due to COVID-19 pandemic
Ragnar Locker Gang Warns Victims Not to Call the FBI
Netgear Smart Switches Open to Complete Takeover
Jenkins Hit as Atlassian Confluence Cyberattacks Widen
ProtonMail Forced to Log IP Address of French Activist
Authorities Arrest Another TrickBot Gang Member in South Korea
If you contact the police, we *will* leak your data – warns Ragnar Locker ransomware gang
Holy Grail of Security: Answers to ‘Did XYZ Work?’ – Podcast
Human Fraud: Detecting Them Before They Detect You
Priti Patel backs ad campaign that criticises Facebook’s stance on end-to-end encryption
IoT Attacks Skyrocket, Doubling in 6 Months
Save your free seat for Recorded Future Predict 21: The intelligence summit
The State of Incident Response: Measuring Risk and Evaluating Your Preparedness
FIN7 Capitalizes on Windows 11 Release in Latest Gambit