News

Threat Post2y
Student Loan Breach Exposes 2.5M Records - Threatpost
2.5 million people were affected, in a breach that could spell more trouble down the line. EdFinancial and the Oklahoma Student Loan Authority (OSLA) are notifying over 2.5 million loanees that ...
Threat Post2y
Watering Hole Attacks Push ScanBox Keylogger - Threatpost
Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.
Threat Post2y
Ransomware Attacks are on the Rise | Threatpost
With data gathered by “actively monitoring the leak sites used by each ransomware group and scraping victim details as they are released,” researchers have determined that Lockbit was by far ...
Threat Post2y
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
New research indicates that over 80,000 Hikvision surveillance cameras in the world today are vulnerable to an 11 month-old command injection flaw.
Threat Post2y
iPhone Users Urged to Update to Patch 2 Zero-Days | Threatpost
Apple is urging macOS, iPhone and iPad users immediately to install respective updates this week that includes fixes for two zero-days under active attack. The patches are for vulnerabilities that ...
Threat Post2y
Cisco Confirms Network Breach Via Hacked Employee Google Account
Networking giant says attackers gained initial access to an employee’s VPN client via a compromised Google account. Cisco Systems revealed details of a May hack by the Yanluowang ransomware ...
Threat Post2y
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands - Threatpost
Through the first half of 2022, 34 percent of all unique phishing attacks tracked by the researchers impersonated financial services brands. The next most popular industry for criminals to abuse ...
Threat Post2y
IoT Botnets Fuel DDoS Attacks – Are You Prepared? - Threatpost
The increased proliferation of IoT devices paved the way for the rise of IoT botnets that amplifies DDoS attacks today. Learn more.
Threat Post3y
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post3y
Patchable and Preventable Security Issues Lead Causes of Q1 Attacks
Attacks against U.S. companies spike in Q1 2022 with patchable and preventable external vulnerabilities responsible for bulk of attacks.
Threat Post3y
Conti Ransomware Attack Spurs State of Emergency in Costa Rica
The attack—attributed to the prolific Conti ransomware group–occurred three weeks ago not long after Chaves took office; in fact, the state of emergency was one of his first decrees as ...
Threat Post3y
SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts - Threatpost
Researchers discovered the vulnerability in an API already integrated into many bank systems, which could have defrauded millions of users by giving attackers access to their funds.