-
"Dallas County: Data of 200,000 Exposed in 2023 Ransomware Attack"
Dallas County is notifying over 200,000 people that the Play ransomware attack in October 2023 exposed their personal data to cybercriminals.
-
"Advance Auto Parts Data Breach Impacts 2.3 Million People"
Advance Auto Parts started to send data breach notifications to over 2.3 million people whose personal data was stolen in recent Snowflake data theft attacks.
-
"CRYSTALRAY Hacker Expands to 1,500 Breached Systems Using SSH-Snake Tool"
According to researchers at Sysdig, the new threat actor called "CRYSTALRAY" now has over 1,500 victims. The threat actor has stolen credentials and deployed cryptocurrency miners.
-
"PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks"
A recently disclosed PHP security flaw has been used to deliver Remote Access Trojans (RATs), cryptocurrency miners, and Distributed Denial-of-Service (DDoS) botnets.
-
"CISA, FBI Urge Immediate Action on OS Command Injection Vulnerabilities in Network Devices"
The US Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have released a joint alert about the exploitation of OS command injection vulnerabilities in network edge devices.
-
"Huione Guarantee Marketplace Exposed as Front for Cybercrime"
Cryptocurrency investigators at Elliptic have claimed a popular online marketplace in Southeast Asia is actually being used primarily by money launderers and fraudsters.
-
"VMware Patches Critical SQL-Injection Flaw in Aria Automation"
VMWare recently pushed out patches for a high-risk SQL injection vulnerability in its Aria Automation product and warned that an authenticated malicious user could target the flaw to manipulate databases.
-
"NSA Joins in Releasing Case Studies Showing PRC Tradecraft in Action"
The National Security Agency (NSA) joins the Australian Signals Directorate (ASD) and other agencies in publishing a Cybersecurity Advisory (CSA) titled "PRC MSS Tradecraft in Action." It delves into the tradecraft of a cyber actor group associat
-
"Ransomware Groups Prioritize Defense Evasion for Data Exfiltration"
Cisco Talos reports that ransomware attackers are increasingly focusing on defense evasion to boost dwell time in victim networks.
-
"Citrix Patches Critical NetScaler Console Vulnerability"
Cloud computing and virtualization software vendor Citrix recently released patches to fix multiple security vulnerabilities, including critical and high-severity issues, in its flagship NetScaler product line.
-
"UCSC Students Discover, Help Patch Cybersecurity Flaw for Free Laundry"
Alexander Sherbrooke, a first-year computer science and engineering student at UC Santa Cruz, explored the security of an Internet-connected laundry machine.
-
"We Analyzed the Entire Web and Found a Cybersecurity Threat Lurking in Plain Sight"
Researchers have found that clickable website links often lead to malicious destinations. Millions of "hijackable hyperlinks" have been found across the web, including on trusted websites.
News