Browsing tag

cybersecurity

Has your personal information been leaked in Sephora databases breach?

Besides their makeup, thousands of Sephora customers should start worrying about the security of their personal information. Security audit specialists report that the French cosmetics company has begun notifying its customers in Southeast Asia of a cybersecurity incident recently occurring in one of the company’s databases. “Your personal information is truly important to us, as […]

A food delivery app was hacked and customers were billed for food & drinks

According to information security specialists, several users of Deliveroo, a food delivery app, suffered the hacking of their accounts, as the app charged their accounts with hundreds of food and drinks bills that they never actually ordered. One London resident who was affected by the incident claims that an unknown user made purchases at multiple […]

Equifax will be paying up to $23k USD to each user whose data was compromised

The massive 2017 data breach in Equifax compromised more than 140 million sensitive data, including social security numbers, payment card details, among others. Recently, data protection specialists reported that the company had reached an agreement with U.S. government agencies, an agreement that included payment of about $650M USD for damage repair. One of the highlights […]

New vulnerability at NVIDIA allows remote code execution and privilege escalation

A new vulnerability in NVIDIA Tegra processors exposes multiple cyberattacks to systems that use them, primarily Internet of Things (IoT) devices. According to information security services specialists, vulnerable equipments are exposed to data forwarding, hijacking, malicious code execution and privilege escalation. Researcher Triszka Balázs was in charge of discovering the vulnerability; after publishing its finding, […]

After Florida, Indiana & Canada, the same ransomware infects china

Specialists in system audits have detected a new ransomware variant that has already managed to infect more than a hundred private companies and government institutions in the United States and, most recently, in China. Tencent, the company in charge of the report, claims that the attacks are directed from Asian territory. The report mentions that […]

Biggest credit reporting firm pays $700M USD data breach fine

Data protection specialists say that, after two years, business advisory firm Equifax has reached an agreement with U.S. government agencies to pay around $700M USD due to massive data breach happened in the company in 2017. The agreement involves bodies such as the Federal Trade Commission (FTC), the Consumer Protection Bureau, and several states’ attorney […]

Russian spy agency was hacked; how will Russia respond to this cyber warfare?

A hacker group successfully launched a cyber attack against the Federal Security Service (FSB), a Russian government intelligence agency. According to reports from cybersecurity specialists, about 7.5 terabytes of classified information were extracted in the attack.  Various media claim that among the information compromised during this incident are Russian projects to disable private browsing with […]

Fundamental Actions Regarding Ransomware

Ransomware is a category of malware that brings trouble to users by locking files by an industry-standard encryption protocol (usually AES – Advanced Encryption Standard), and asking them to pay a “ransom” in order to restore the files to their original state. It is a virus that requires money in exchange for restoring such a […]

8 methods for bypassing surveillance cameras and facial recognition software

Facial recognition systems are becoming more sophisticated. When we post a photo on Facebook accompanied by our closest friend, it is almost certain that the system will identify our faces and suggest us to add a tag.  According to ethical hacking specialists, governments around the world and private companies are driving the creation of a […]

Facebook is tracking when you feel horny and which porn you watch

Technology companies systematically monitor our online activity. Information security experts have been mentioning it for years, but many people still seem to be ignoring it; recently, reports have increased that this surveillance occurs even when users enable private browsing mode to visit adult content sites. The tracking software used by companies such as Facebook and […]

Ransomware next target is your favorite radio stations and television channel companies

Cybersecurity services specialists reported a ransomware attack that temporarily affected the operations of the community radio station WMNF 88.5 – FM, based in Tampa, Florida. According to statements by interim general manager Cindy Reichard, that nasty incident began sometime on June 18. The next day, one of the radio station’s programmers detected strange behavior on […]

Thousands of Microsoft customer accounts compromised due to corporate surveillance and data theft

According to network security specialists, thousands of cyberattacks compromised the information security of more than 10k Microsoft customers last year. Most of these malicious activities were reportedly carried out from countries such as North Korea, Iran and Russia.   Microsoft’s corporate vice president for customer trust and security, Tom Burt, mentioned on the company’s official blog […]

GrandCrab ransomware master keys released by the FBI

Ransomware is one of the most common cyber threats that users face nowadays. According to IT security audit experts, every few days groups of threat actors launch new campaigns to infect users, encrypt their files and demand ransoms in exchange for compromised information access. Although there are dozens of variants of encryption malware, one of […]

Iomega StorCenter & Lenovo EMC NAS devices are leaking users’ information

Web application security specialists reported critical firmware-level vulnerability in Lenovo’s storage devices connected to network; if exploited, this flaw could compromise the security of the information of the users of these implementations. The vulnerability exists only in some models of network attached storage (NAS) devices and allows unauthenticated users to access and read data stored […]

Ad Inserter, a WordPress plugin, allows remote code execution

Experts in vulnerability testing discovered a critical flaw in Ad Inserter, a plugin for advertising management on WordPress sites. If exploited, this flaw would allow any low-privileged user to execute code on the compromised web server. After the presence of this flaw was verified, multiple members of the cybersecurity community recommended that system administrators using […]

New exploit allows hackers to access shared files via WhatsApp and Telegram

Ethical hacking specialists from cybersecurity firm Symantec reported the discovery of a vulnerability that, if exploited, would allow a hacker to access files (such as photos, videos or PDF documents) shared via WhatsApp and Telegram.   The vulnerability, dubbed by experts as ‘Media File Jacking’, exists due to the time span between writing a file on […]

New York power blackout; did Iran did performed a counter cyberattack?

Last Saturday night, a blackout in New York left the entire Manhattan area without electric power; interestingly, the incident occurred on the anniversary of the massive blackout that happened in 1977 that left the entire city without power, crippling traffic and all work, academic and domestic activities, network security specialists report. Con Edison, one of […]

Most Important Security Tools and Resources For Security Researcher and Malware Analyst

Security Professionals always need to learn many tools, techniques, and concepts to analyze sophisticated Threats and current cyber attacks. Hex Editors HxD 010 Editor Hex Workshop HexFiend Hiew Also Enroll:  Complete Ethical Hacking and Penetration Testing Course – Become a Professional Ethical Hacker Disassemblers IDA Pro Binary Ninja Radare Hopper Capstone objdump fREedom plasma Detection and […]