All News

Google Chrome to let Isolated Web App access sensitive USB devices

Google is working on a new Unrestricted WebUSB feature, which allows trusted isolated web apps to bypass security restrictions in the WebUSB API.
- Mayank Parmar
- June 30, 2024
- 05:17 PM
- 0
Juniper releases out-of-cycle fix for max severity auth bypass flaw

Juniper Networks has released an emergency update to address a maximum severity vulnerability that leads to authentication bypass in Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router products.
- Bill Toulas
- June 30, 2024
- 11:14 AM
- 0
Dev rejects CVE severity, makes his GitHub repo read-only

The popular open source project, 'ip' had its GitHub repository archived, or made "read-only" by its developer as a result of a dubious CVE report filed for his project. Unfortunately, open-source developers have recently been met with an uptick in debatable or outright bogus CVEs filed for their projects.
- Ax Sharma
- June 30, 2024
- 10:31 AM
- 2
Fake IT support sites push malicious PowerShell scripts as Windows fixes

Fake IT support sites promote malicious PowerShell "fixes" for common Windows errors, like the 0x80070643 error, to infect devices with information-stealing malware.
- Lawrence Abrams
- June 30, 2024
- 10:21 AM
- 0
Microsoft resumes rollout of Windows 11 KB5039302 update for most users

Microsoft has resumed the rollout of the June Windows 11 KB5039302 update, now blocking the update only for those using virtualization software.
- Lawrence Abrams
- June 29, 2024
- 02:01 PM
- 1
Hackers exploit critical D-Link DIR-859 router flaw to steal passwords

Hackers are exploiting a critical vulnerability that affects all D-Link DIR-859 WiFi routers to collect account information from the device, including passwords.
- Bill Toulas
- June 29, 2024
- 11:18 AM
- 1
Meet Brain Cipher — The new ransomware behind Indonesia's data center attack

The new Brain Cipher ransomware operation has begun targeting organizations worldwide, gaining media attention for a recent attack on Indonesia's temporary National Data Center.
- Lawrence Abrams
- June 29, 2024
- 10:14 AM
- 1
Infosys McCamish says LockBit stole data of 6 million people

Infosys McCamish Systems (IMS) disclosed that the LockBit ransomware attack it suffered earlier this year impacted sensitive information of more than six million individuals.
- Bill Toulas
- June 28, 2024
- 02:08 PM
- 2
Dairy giant Agropur says data breach exposed customer info

Agropur, one of the largest dairy cooperatives in North America, is notifying customers of a data breach after some of its shared online directories were exposed.
- Bill Toulas
- June 28, 2024
- 12:53 PM
- 0
Ticketmaster sends notifications about recent massive data breach

Ticketmaster has started to notify customers who were impacted by a data breach after hackers stole the company's Snowflake database, containing the data of millions of people.
- Lawrence Abrams
- June 28, 2024
- 12:45 PM
- 0
TeamViewer links corporate cyberattack to Russian state hackers

RMM software developer TeamViewer says a Russian state-sponsored hacking group known as Midnight Blizzard is believed to be behind a breach of their corporate network this week.
- Lawrence Abrams
- June 28, 2024
- 10:42 AM
- 1
Polyfill.io, BootCDN, Bootcss, Staticfile attack traced to 1 operator

The recent large scale supply chain attack conducted via multiple CDNs, namely Polyfill.io, BootCDN, Bootcss, and Staticfile that affected up to tens of millions of websites has been traced to a common operator. Researchers discovered a public GitHub repository with leaked API keys helping them draw a conclusion.
- Ax Sharma
- June 28, 2024
- 09:00 AM
- 1
Former IT employee accessed data of over 1 million US patients

Geisinger, a prominent healthcare system in Pennsylvania, has announced a data breach involving a former employee of Nuance, an IT services provider contracted by the organization.
- Bill Toulas
- June 27, 2024
- 07:17 PM
- 0
BlackSuit ransomware gang claims attack on KADOKAWA corporation

The BlackSuit ransomware gang claimed a recent cyberattack on KADOKAWA corporation and is now threatening to publish stolen data if a ransom is not paid.
- Lawrence Abrams
- June 27, 2024
- 06:57 PM
- 0
New Unfurling Hemlock threat actor floods systems with malware

A threat actor tracked as Unfurling Hemlock has been infecting target systems with up to ten pieces of malware at the same time in campaigns that distribute hundreds of thousands of malicious files.
- Bill Toulas
- June 27, 2024
- 06:27 PM
- 0
U.S. indicts Russian GRU hacker, offers $10 million reward

The U.S. indicted Russian national Amin Timovich Stigal for his alleged role in cyberattacks targeting Ukrainian government computer networks in an operation from the Russian foreign military intelligence agency (GRU) prior to invading the country.
- Bill Toulas
- June 27, 2024
- 03:31 PM
- 2
TeamViewer's corporate network was breached in alleged APT hack

The remote access software company TeamViewer is warning that its corporate environment was breached in a cyberattack yesterday, with a cybersecurity firm claiming it was by an APT hacking group.
- Lawrence Abrams
- June 27, 2024
- 02:29 PM
- 5
Microsoft pulls Windows 11 KB5039302 update causing reboot loops

Microsoft pulled the June Windows 11 KB5039302 update after finding that it causes some devices to restart repeatedly.
- Lawrence Abrams
- June 27, 2024
- 12:10 PM
- 12
Critical GitLab bug lets attackers run pipelines as any user

A critical vulnerability is affecting certain versions of GitLab Community and Enterprise Edition products, which could be exploited to run pipelines as any user.
- Bill Toulas
- June 27, 2024
- 10:53 AM
- 0
Sponsored Content
EC-Council to Decrease AI Chasm with Free Cyber AI Toolkit for Members

EC-Council, creator of the Certified Ethical Hacker (CEH) credential, is introducing a Cyber AI Toolkit free for all of its certified members. The Cyber AI Toolkit equips members with cutting-edge AI-enabled cybersecurity courses at no cost, helping them be better prepared for today's cybersecurity landscape in the advent of AI.
- Sponsored by EC-Council
- June 27, 2024
- 10:04 AM
- 0