News
  • "Buggy 'Log in With Google' API Implementation Opens Crypto Wallets to Account Takeover"

    Security researchers at Salt Labs found that a cryptocurrency wallet service provider serving over 2 million users worldwide and managing about $3 billion worth of Bitcoin contains API vulnerabilities tied to how external authentication logins were…

  • "Pentagon Looking for a Few Good Hackers"

    The US Department of Defense (DoD) unveiled an experimental bug bounty program on July 4th, offering cash prizes to white hat hackers. Since 2016, the Pentagon has experimented with accepting vulnerability reports from security researchers. Most recently…

  • "Cyberproofing Small and Medium Businesses—a Small Step With a Big Impact"

    Small businesses are often more vulnerable to cyberattacks because they lack the time, resources, and, in some cases, skills to prepare for and defend against an attack, as well as to mitigate and remedy any consequences. Therefore, the Australian…

  • "Cisco Releases 10 Security Patches For Expressway Series And TelePresence VCS Products"

    Cisco has recently rolled out patches for security flaws across multiple versions of its products.  In an advisory, Cisco disclosed the patches and described two of the vulnerabilities, one of which was rated Critical in severity.  In the…

  • "WVU Tech Awarded Contract to Develop Soldier Cyber Readiness App"

    The US Army Combat Capabilities and Development Command (DEVCOM) and the Civil-Military Innovation Institute (CMI2) awarded the West Virginia University Institute of Technology (WVU Tech), a seed project within the Pathfinder Program, in collaboration…

  • "Russian Info Ops Ramp Up Effort to Divide West on Ukraine"

    Security researchers at Recorded Future have discovered multiple Russian influence networks have been running disinformation and influence campaigns since May designed to sow division in the West over its support for Ukraine.  These disinformation…

  • "Hackers Linked to The Chinese Government Increasingly Target Russia, Analysis Suggests"

    Security researchers at SentinelOne have discovered that nation-state hackers with links to the Chinese government seem to be targeting Russian entities at an increasing rate.  The researchers noted that the ongoing activity appears primarily…

  • "Hack Allows Drone Takeover Via 'ExpressLRS' Protocol"

    A flaw in the mechanism that connects the transmitter and receiver makes a radio control system for drones vulnerable to remote takeover. The popular ExpressLRS protocol for radio-controlled (RC) aircraft can be hacked in just a few steps, according to…

  • "5G Networks Vulnerable to Adversarial ML Attacks"

    A recently published paper called into question the security safeguards built for 5G networks. According to a team of academic researchers from the University of Liechtenstein, a network jamming strategy could allow an attacker with no insider knowledge…

  • "QuickBooks Accounting Software Targeted for Sophisticated Phishing Attacks"

    Customers of Intuit's popular QuickBooks accounting program have received phishing emails claiming their accounts have been suspended, according to a notice on the Intuit website. The legitimate-looking emails are designed to trick QuickBooks users into…

  • "Over 1200 NPM Packages Found Involved in 'CuteBoi' Cryptomining Campaign"

    A new large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository has been revealed by researchers. The malicious activity, attributed to a software supply chain threat actor known as CuteBoi, consists of 1,283 rogue…

  • "IT Services Giant SHI Hit by 'Professional Malware Attack'"

    SHI International, a provider of IT products and services based in New Jersey, has confirmed that a malware attack occurred on its network. With $12.3 billion in revenue in 2021 and 5,000 employees worldwide in operations centers in the United States,…