News

Threat Post2y
Student Loan Breach Exposes 2.5M Records - Threatpost
2.5 million people were affected, in a breach that could spell more trouble down the line. EdFinancial and the Oklahoma Student Loan Authority (OSLA) are notifying over 2.5 million loanees that ...
Threat Post2y
Watering Hole Attacks Push ScanBox Keylogger - Threatpost
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Threat Post2y
Ransomware Attacks are on the Rise | Threatpost
With data gathered by “actively monitoring the leak sites used by each ransomware group and scraping victim details as they are released,” researchers have determined that Lockbit was by far ...
Threat Post2y
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
New research indicates that over 80,000 Hikvision surveillance cameras in the world today are vulnerable to an 11 month-old command injection flaw.
Threat Post2y
iPhone Users Urged to Update to Patch 2 Zero-Days | Threatpost
Apple is urging macOS, iPhone and iPad users immediately to install respective updates this week that includes fixes for two zero-days under active attack. The patches are for vulnerabilities that ...
Threat Post2y
Cisco Confirms Network Breach Via Hacked Employee Google Account
Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account. Cisco Systems revealed details of a May hack by the Yanluowang ransomware ...
Threat Post2y
Open Redirect Flaw Snags Amex, Snapchat User Data
During the two-and-a-half-month period over which the campaigns were observed, researchers detected the snapchat [.]com open redirect vulnerability in 6,812 phishing emails originating from ...
Threat Post2y
Malicious Npm Packages Tapped Again to Target Discord Users
Threat actors once again are using the node package manager (npm) repository to hide malware that can steal Discord tokens to monitor user sessions and steal data on the popular chat and ...
Threat Post2y
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands - Threatpost
Through the first half of 2022, 34 percent of all unique phishing attacks tracked by the researchers impersonated financial services brands. The next most popular industry for criminals to abuse ...
Threat Post3y
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post3y
Patchable and Preventable Security Issues Lead Causes of Q1 Attacks
Attacks against U.S. companies spike in Q1 2022 with patchable and preventable external vulnerabilities responsible for bulk of attacks.
Threat Post3y
Being Prepared for Adversarial Attacks | Threatpost
There is no question that the level of threats facing today’s businesses continues evolve. So what are the trends that CISOs need to be on the lookout for?