News
-
"Ransomware Rising Despite Takedowns, Says Corvus Report"According to Corvus Insurance, new ransomware gangs filled the void left by LockBit and ALPHV/BlackCat in the first quarter of 2024.
-
"Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years"JFrog researchers found multiple campaigns planting millions of malicious "imageless" containers on Docker Hub over the past five years, highlighting how open source registries can enable supply chain attacks.
-
"Critical Vulnerabilities in Judge0 Lead to Sandbox Escape, Host Takeover"Tanto Security warns that three critical-severity vulnerabilities in the Judge0 open source service enable attackers to conduct sandbox escapes and take over the host machine.
-
"FCC Fines Carriers $200m For Selling User Location Data"According to the FCC, four of America’s largest mobile operators sold access to customer location data to third parties without gaining customer consent or putting adequate safeguards in place.
-
"Ransom Payments Surge by 500% to an Average of $2m"According to security researchers at Sophos, average ransom payments surged by 500% in the past year to reach $2m per payment.
-
"Muddling Meerkat Hackers Manipulate DNS Using China's Great Firewall""Muddling Meerkat," a new cluster of activity, has been suspected of being linked to a Chinese state-sponsored threat actor's manipulation of the Domain Name System (DNS) to probe networks since October 2019, with a surge in activity ob
-
"The Major Hardware Flaw in Apple M-Series Chips"Apple M-series chips, designed to perform more consistently and faster than Intel processors, have a vulnerability that can expose cryptographic keys, enabling a malicious actor to reveal encrypted data.
-
"DHS Publishes Guidelines and Report to Secure Critical Infrastructure and Weapons of Mass Destruction from AI-Related Threats"The US Department of Homeland Security (DHS), in collaboration with the Cybersecurity and Infrastructure Security Agency (CISA), has published new safety and security guidelines that address cross-sector Artificial Intelligence (AI) risks to the
-
"Collection Agency FBCS Says Data Breach Exposed Nearly 2 million People"Debt collection agency Financial Business and Consumer Solutions (FBCS) is starting to notify roughly 2 million individuals that their personal information was compromised in a recent data breach.
-
"Researcher Strips ROM for Binary Code"The security key has served as a barrier to Multi-Factor Authentication (MFA) hacks.
-
"DHS Establishes AI Safety and Security Board to Protect Critical Infrastructure"The US Department of Homeland Security (DHS) has established the Artificial Intelligence (AI) Safety and Security Board. The Board will help DHS stay ahead of growing threats posed by hostile nation-state actors.
-
"London Drugs Pharmacy Chain Closes Stores After Cyberattack"Canadian pharmacy chain London Drugs has recently closed all its retail stores to contain what it described as a "cybersecurity incident." The company has also hired external experts to investigate the cyberattack that impacted its systems.