Browsing tag
Online extortion campaigns keep growing. This time, data protection specialists report the emergence of a new extortion campaign that uses a network of nearly 500,000 infected devices to send threatening emails. In this message, hackers threaten victims to post compromising photos & videos unless they make a payment of $800 USD in Bitcoin. The email […]
An Apple security feature has caught the attention of information security specialists. As reported, the company checks the websites that each user visits to see if they are fraudulent or malware-infested sites. This Safari feature, known as “Fraudulent Website Warning”, was implemented to improve the online security experience of users using URL cross-references using an […]
A recently revealed story has attracted the interest of the cybersecurity community. Aleksey Burkov, 29, is a man from Russia who has spent the last four years of his life in Hadarim prison, in Israel without anyone noticing his presence too much, until now. Little was known about Burkov outside the prison until last weekend […]
A recently revealed report has concerned Linux users. Vulnerability testing specialists have revealed a new security flaw in Sudo, one of the most common and important utilities and which is also included as a central command installed in almost any Linux and UNIX-based deployment. “This security flaw is a problem of bypassing security policies in […]
We all know of the exponential growth of cybercrimes. The question now is, how do we stay ahead of a possible data breach? Some experts in the commercial real estate have their say on what’s in store for cybersecurity. We’ve heard of the recent Capital One hacking. A person was able to access its 100 […]
The US Department of Justice (DOJ) has dealt a severe blow to cybercrime. Vulnerability testing experts reported that American authorities have arrested 18 hackers from various countries allegedly involved in multiple financial frauds, stealing tens of millions of dollars from both banking and users. The DOJ mentions that these cyberciminals are involved in the theft […]
A team of ethical hacking specialists from security firm Confiant has revealed the discovery of a new malware variant for Mac devices. Dubbed Tarmac, this strain is distributed through some malicious advertising campaigns in countries such as the US, Japan and Italy. In their report, the researchers mention that it all starts using malicious advertising, […]
According to digital forensics specialists, the hacker group identified as FIN7 has developed a new malicious tool, capable of delivering payloads directly into the memory of the targeted system, as well as including a module that establishes a connection to the remote control software used by NCR Corporation, an ATM manufacturer. The experts, members of […]
A report from web application security specialists claims that the company in charge of developing TeamViewer, the popular system remote control software, was a victim of hacking. According to the reports, attackers could control any computer that has logged into this service for perform arbitrary activities. The report reveals that TeamViewer was hacked in 2016, […]
A couple of months ago information security specialists reported a hacking incident against London Metropolitan Police, whose Twitter account (with more than a million followers) was taken over by hackers to show a series of bizarre posts. The hackers also sent some emails from the Police Press Office. After months of research, the authorities have […]
Vulnerability testing specialists report the finding of a critical vulnerability in the Sophos hardware and software company’s firewall solutions. If exploited, this flaw could give a threat actor access to a company’s internal network without having to enter access credentials. According to reports, all Sophos Cyberoam Firewall deployments running CyberoamOS (CROS) version 10.6.6 MR-5 and […]
Although most attacks against websites only last a few hours, or even days, digital forensics experts mention that other times these incidents can have irreversible consequences. Such is the case of the Southeastern Pennsylvania Transportation Authority (SEPTA), which had to permanently shut down its online store (domain Shop.SEPTA.org) after a massive malware attack. Travel tickets, […]
New hardware and software security flaws seem to appear on a daily basis. This time, web application security experts from security firm SafeBreach Labs, specializing in cyberattack simulation, report the finding of a critical vulnerability in Open Hardware Monitor, a free open source tool to monitor temperature, fans speed and voltage in computer hardware components. […]
Cyber activism is waiting to entering Spain’s political scene again. Ethical hacking specialists report that some hackers, allegedly linked to the ‘hacktivist’ movement known as Anonymous, are preparing a cyberattack campaign against the websites of multiple public organizations and private companies in the country. As reported in various hacking forums, the attacks have been planned […]
A couple of months ago, a team of digtial forensics specialists from security firm Morphisec discovered a malicious campaign that used a new form of detection evasion targeting a major automotive company. Now, specialists from the same company have revealed the active exploitation of a zero-day vulnerability in Bonjour, Apple’s updater tool included in iTunes […]
According to data protection specialists, corporate espionage is becoming a way too common practice and has also evolved with the inclusion of new technologies. This time, the CEO of a technology company currently based in San Francisco, US, has been charged with four illegal intrusions into a protected computer equipment crimes. Jonathan Manzi, 28-years-old, turned […]
A vulnerability testing specialist just revealed a zero-day vulnerability in versions of Joomla, the popular content management system (CMS) launched between September 2012 and December 2015. The vulnerability could reportedly pose a severe risk to thousands of websites worldwide. This flaw may seem too old, but in the case of Joomla! this might be irrelevant, […]
Ironically, companies that offer information security services are also exposed to malicious hackers; they’re even a great target. Experts from the National Cyber Security Center (NCSC) and the National Security Agency (NSA) have released a report warning about serious vulnerabilities in some of the most popular virtual private network (VPN) services. The companies noted in […]
Privacy scandals involving large social media companies are becoming more frequent nowadays. This time, web application security specialists report that the phone numbers used for multi-factor authentication and email addresses linked to the Twitter users accounts were “inadvertently” used for advertising purposes. The alleged error was revealed on the company’s official blog. In their post […]
A threat actor has played a bad trick on the IT team and many of the customers of a popular shoe company. According to ethical hacking specialists, a hacker, self-appointed as “Nathan”, infiltrated the computer systems of the company TOMS Shoes, gaining access to their email list. Once there, the hacker began sending emails with […]
Data protection specialists report that an unidentified threat actor is auctioning off a database with records of more than 90 million Brazilian citizens on dark web forums. The bidder states that each registration is unique and 100% real, making it possible to make a detailed profile of some of the people affected for malicious purposes. […]