News
-
"Azure Health Bot Service Vulnerabilities Possibly Exposed Sensitive Data"Tenable researchers found vulnerabilities in Microsoft's Azure Health Bot Service that threat actors could have used to access sensitive data.
-
"Phishing Campaign Compromises 100+ Ukrainian Government Computers"The Computer Emergency Response Team of Ukraine (CERT-UA) recently announced that more than 100 Ukrainian government computers have been compromised following a mass phishing campaign.
-
"GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks"A team of researchers from Germany's CISPA Helmholtz Center for Information Security discovered an architectural flaw, codenamed "GhostWrite," affecting the Chinese chip company T-Head's XuanTie C910 and C920 RISC-V CPUs.
-
"Carnegie Mellon's Hacking Team Wins Third Straight, Record Eighth Overall DEF CON Capture-the-Flag Title"The most successful team in DEF CON's Capture-the-Flag (CTF) competition history, Carnegie Mellon University's (CMU) "Plaid Parliament of Pwning" (PPP), won its third consecutive title, earning its eighth victory.
-
"35% of Exposed API Keys Still Active, Posing Major Security Risks"The company Nightfall AI found that secrets such as passwords and Application Programming Interface (API) keys were most often found in GitHub. Every year, about 350 total secrets are exposed per 100 employees.
-
"Hackers Leak 2.7 Billion Data Records With Social Security Numbers"Nearly 2.7 billion records of personal information for people in the US were leaked on a popular hacking forum. The records include names, Social Security numbers (SSNs), known physical addresses, and more.
-
"Adobe Calls Attention to Massive Batch of Code Execution Flaws"Adobe recently released fixes for 72 security vulnerabilities across multiple products and warned that Windows and macOS users are at risk of code execution, memory leaks, and denial-of-service attacks.
-
"FBI Leads Effort to Dismantle Radar/Dispossessor Ransomware"The Federal Bureau of Investigation (FBI) has partnered with law enforcement in the UK and Germany to dismantle Information Technology (IT) infrastructure linked to the ransomware group called "Dispossessor" or "Radar." According to the FBI, the
-
"AMD Issues Updates for Silicon-Level 'SinkClose' Processor Flaw"AMD has issued firmware updates to address a nearly two-decade-old silicon-level vulnerability called "SinkClose" in its EPYC data center processors and Ryzen line of processors for PCs and embedded systems.
-
"3AM Ransomware Stole Data of 464,000 Kootenai Health Patients"Kootenai Health has recently disclosed a data breach impacting over 464,000 patients after their personal information was stolen and leaked by the 3AM ransomware operation.
-
"Prolific Belarusian Cybercriminal Arrested in Spain"A 38-year-old Belarusian accused of being one of the world's most prolific Russian-speaking cybercriminals has been arrested and extradited by the UK's National Crime Agency (NCA) as part of an international law enforcement operation.
-
"Post-Quantum Cryptography Standards Officially Announced by NIST – a History and Explanation"The National Institute of Standards and Technology (NIST) has formally published three post-quantum cryptography standards from its competition to develop cryptography that can withstand quantum computing decryption of current asymmetric encryption.