All News

Four FIN9 hackers indicted for cyberattacks causing $71M in losses

Four Vietnamese nationals linked to the international cybercrime group FIN9 have been indicted for their involvement in a series of computer intrusions that caused over $71 million in losses to companies in the U.S.
- Bill Toulas
- June 24, 2024
- 01:35 PM
- 0
CoinStats says North Korean hackers breached 1,590 crypto wallets

CoinStats suffered a massive security breach that compromised 1,590 cryptocurrency wallets, with the attack suspected to have been carried out by North Korean threat actors.
- Bill Toulas
- June 24, 2024
- 10:56 AM
- 0
Sponsored Content
Is your cybersecurity vendor transparent about vulnerability fixes?

Transparent disclosure empowers consumers with the information they need to to safeguard their assets effectively. Learn more from Fortinet about choosing a vendor that is transparent with their bug fixes.
- Sponsored by Fortinet
- June 24, 2024
- 10:02 AM
- 0
Microsoft Photos update brings requested features to Windows 11

Microsoft's updated Photos app is now available for Windows 11 in the Windows Insider Program, bringing requested interface changes and better image quality.
- Mayank Parmar
- June 23, 2024
- 03:03 PM
- 1
Facebook PrestaShop module exploited to steal credit cards

Hackers are exploiting a flaw in a premium Facebook module for PrestaShop named pkfacebook to deploy a card skimmer on vulnerable e-commerce sites and steal people's payment credit card details.
- Bill Toulas
- June 23, 2024
- 10:08 AM
- 0
CDK Global outage caused by BlackSuit ransomware attack

The BlackSuit ransomware gang is behind CDK Global's massive IT outage and disruption to car dealerships across North America, according to multiple sources familiar with the matter.
- Lawrence Abrams
- June 22, 2024
- 03:08 PM
- 7
Rafel RAT targets outdated Android phones in ransomware attacks

An open-source Android malware named 'Rafel RAT' is widely deployed by multiple cybercriminals to attack outdated devices, some aiming to lock them down with a ransomware module that demands payment on Telegram.
- Bill Toulas
- June 22, 2024
- 10:19 AM
- 1
Los Angeles Unified confirms student data stolen in Snowflake account hack

The Los Angeles Unified School District has confirmed a data breach after threat actors stole student and employee data by breaching the company's Snowflake account.
- Lawrence Abrams
- June 21, 2024
- 05:09 PM
- 1
US sanctions 12 Kaspersky Lab execs for working in Russian tech sector

The Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned twelve Kaspersky Lab executives for operating in the technology sector of Russia.
- Lawrence Abrams
- June 21, 2024
- 01:32 PM
- 6
Change Healthcare lists the medical data stolen in ransomware attack

UnitedHealth has confirmed for the first time what types of medical and patient data were stolen in the massive Change Healthcare ransomware attack, stating that data breach notifications will be mailed in July.
- Lawrence Abrams
- June 21, 2024
- 12:10 PM
- 0
Five men convicted for operating illegal streaming site Jetflicks

A federal jury in Las Vegas convicted five men for their involvement in the operation of Jetflicks, one of the largest and most popular illegal streaming services in the United States.
- Bill Toulas
- June 21, 2024
- 11:20 AM
- 0
Tor Browser 13.5 brings Android enhancements, better bridge management

The Tor Project has released Tor Browser 13.5, bringing several improvements and enhancements for Android and desktop versions.
- Bill Toulas
- June 21, 2024
- 10:26 AM
- 0
CDK warns: threat actors are calling customers, posing as support

CDK Global has cautioned customers about unscrupulous actors calling them and posing as CDK agents or affiliates to gain unauthorized systems access. The warning follows ongoing cyberattacks that have hit CDK, a software-as-a-service (SaaS) platform that thousands of US car dealerships rely upon.
- Ax Sharma
- June 21, 2024
- 07:00 AM
- 3
Biden bans Kaspersky antivirus software in US over security concerns

Today, the Biden administration has announced an upcoming ban of Kaspersky antivirus software and the pushing of software updates to US companies and consumers, giving customers until September 29, 2024, to find alternative security software.
- Lawrence Abrams
- June 20, 2024
- 06:38 PM
- 15
Phoenix UEFI vulnerability impacts hundreds of Intel PC models

A newly discovered vulnerability in Phoenix SecureCore UEFI firmware tracked as CVE-2024-0762 impacts devices running numerous Intel CPUs, with Lenovo already releasing new firmware updates to resolve the flaw.
- Lawrence Abrams
- June 20, 2024
- 05:31 PM
- 0
CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites

A vulnerability dubbed "CosmicSting" impacting Adobe Commerce and Magento websites remains largely unpatched nine days after the security update has been made available, leaving millions of sites open to catastrophic attacks.
- Bill Toulas
- June 20, 2024
- 04:02 PM
- 0
Linux version of RansomHub ransomware targets VMware ESXi VMs

The RansomHub ransomware operation is using a Linux encryptor designed specifically to encrypt VMware ESXi environments in corporate attacks.
- Bill Toulas
- June 20, 2024
- 03:00 PM
- 0
UNC3886 hackers use Linux rootkits to hide on VMware ESXi VMs

A suspected Chinese threat actor tracked as UNC3886 uses publicly available open-source rootkits named 'Reptile' and 'Medusa' to remain hidden on VMware ESXi virtual machines, allowing them to conduct credential theft, command execution, and lateral movement.
- Bill Toulas
- June 20, 2024
- 01:46 PM
- 0
SolarWinds Serv-U path traversal flaw actively exploited in attacks

Threat actors are actively exploiting a SolarWinds Serv-U path-traversal vulnerability, leveraging publicly available proof-of-concept (PoC) exploits.
- Bill Toulas
- June 20, 2024
- 11:45 AM
- 0
CDK Global hacked again while recovering from first cyberattack

Car dealership SaaS platform CDK Global suffered an additional breach Wednesday night as it was starting to restore systems shut down in an previous cyberattack.
- Lawrence Abrams
- June 20, 2024
- 11:32 AM
- 0