News in the Security category

VMware fixes critical vCenter RCE vulnerability, patch now

VMware has issued a security advisory addressing critical vulnerabilities in vCenter Server, including remote code execution and local privilege escalation flaws.
- Bill Toulas
- June 18, 2024
- 02:08 PM
- 0
Scathing report on Medibank cyberattack highlights unenforced MFA

A scathing report by Australia's Information Commissioner details how misconfigurations and missed alerts allowed a hacker to breach Medibank and steal data from over 9 million people.
- Lawrence Abrams
- June 18, 2024
- 01:25 PM
- 1
Two men guilty of breaching law enforcement portal in blackmail scheme

Two men have pleaded guilty to hacking into a federal law enforcement database to steal personal information of those they were extorting.
- Bill Toulas
- June 18, 2024
- 10:48 AM
- 0
Fake Google Chrome errors trick you into running malicious PowerShell scripts

A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware.
- Bill Toulas
- June 17, 2024
- 06:31 PM
- 3
Panera Bread likely paid a ransom in March ransomware attack

Panera Bread, an American chain of fast food restaurants, most likely paid a ransom after being hit by a ransomware attack, suggests language used an internal email sent to employees.
- Lawrence Abrams
- June 17, 2024
- 03:55 PM
- 3
Hackers use F5 BIG-IP malware to stealthily steal data for years

A group of suspected Chinese cyberespionage actors named 'Velvet Ant' are deploying custom malware on F5 BIG-IP appliances to gain a persistent connection to the internal network and steal data.
- Bill Toulas
- June 17, 2024
- 01:37 PM
- 2
Alleged Scattered Spider sim-swapper arrested in Spain

A 22-year-old British national allegedly linked to the Scattered Spider hacking group and responsible for attacks on 45 U.S. companies has been arrested in Palma de Mallorca, Spain.
- Bill Toulas
- June 17, 2024
- 10:16 AM
- 1
New ARM 'TIKTAG' attack impacts Google Chrome, Linux systems

A new speculative execution attack named "TIKTAG" targets ARM's Memory Tagging Extension (MTE) to leak data with over a 95% chance of success, allowing hackers to bypass the security feature.
- Bill Toulas
- June 16, 2024
- 10:16 AM
- 1
New Linux malware is controlled through emojis sent from Discord

A newly discovered Linux malware dubbed 'DISGOMOJI' uses the novel approach of utilizing emojis to execute commands on infected devices in attacks on government agencies in India.
- Lawrence Abrams
- June 15, 2024
- 01:08 PM
- 0
ASUS warns of critical remote authentication bypass on 7 routers

ASUS has released a new firmware update that addresses a vulnerability impacting seven router models that allow remote attackers to log in to devices.
- Bill Toulas
- June 15, 2024
- 11:17 AM
- 4
Microsoft: New Outlook security changes coming to personal accounts

Microsoft has announced new cybersecurity enhancements for Outlook personal email accounts as part of its 'Secure Future Initiative,' including the deprecation of basic authentication (username + password) by September 16, 2024.
- Bill Toulas
- June 15, 2024
- 10:12 AM
- 4
Keytronic confirms data breach after ransomware gang leaks stolen files

PCBA manufacturing giant Keytronic is warning it suffered a data breach after the Black Basta ransomware gang leaked 530GB of the company's stolen data two weeks ago.
- Lawrence Abrams
- June 14, 2024
- 05:20 PM
- 0
Mozilla Firefox can now secure access to passwords with device credentials

Mozilla Firefox finally allows you to further protect local access to stored credentials in the browser's password manager using your device's login, including a password, fingerprint, pin, or other biometrics
- Lawrence Abrams
- June 14, 2024
- 04:19 PM
- 3
London hospitals cancel over 800 operations after ransomware attack

NHS England revealed today that multiple London hospitals impacted by last week's Synnovis ransomware attack were forced to cancel hundreds of planned operations and appointments.
- Sergiu Gatlan
- June 14, 2024
- 02:05 PM
- 1
CISA warns of Windows bug exploited in ransomware attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity Windows vulnerability abused in ransomware attacks as a zero-day to its catalog of actively exploited security bugs.
- Sergiu Gatlan
- June 14, 2024
- 12:39 PM
- 0
Former IT employee gets 2.5 years for wiping 180 virtual servers

A former quality assurance employee of National Computer Systems (NCS) was sentenced to two years and eight months in prison for reportedly deleting 180 virtual servers after being fired.
- Bill Toulas
- June 14, 2024
- 11:51 AM
- 3
Scattered Spider hackers switch focus to cloud apps for data theft

The Scattered Spider gang has started to steal data from software-as-a-service (SaaS) applications and establish persistence through creating new virtual machines.
- Bill Toulas
- June 14, 2024
- 11:04 AM
- 0
Insurance giant Globe Life investigating web portal breach

American financial services holding company Globe Life says attackers may have accessed consumer and policyholder data after breaching one of its web portals.
- Sergiu Gatlan
- June 14, 2024
- 08:39 AM
- 0
Microsoft delays Windows Recall amid privacy and security concerns

Microsoft is delaying the release of its AI-powered Windows Recall feature to test and secure it further before releasing it in a public preview on Copilot+ PCs.
- Lawrence Abrams
- June 13, 2024
- 10:11 PM
- 7
Truist Bank confirms breach after stolen data shows up on hacking forum

Truist Bank, a leading U.S. commercial bank, confirmed this week that its systems were breached in an October 2023 cyberattack after a threat actor posted some of the company's data for sale on a hacking forum.
- Sergiu Gatlan
- June 13, 2024
- 07:17 PM
- 0