News
-
"EnemyBot Malware Targets Web Servers, CMS Tools and Android OS"EnemyBot, a rapidly evolving IoT malware, is targeting content management systems (CMS), web servers, and Android devices. Researchers at AT&T Alien labs believe that the threat actor group "Keksec" is behind the malware distribution. The… -
"Magniber Ransomware Now Targets Windows 11 Machines"Magniber ransomware was initially discovered in 2017 and has been recently upgraded to target Windows 11 machines, according to researchers at 360 Total Security. The researchers stated that the attack volume of the ransomware increased…
-
"Microsoft Confirms Exploitation of 'Follina' Zero-Day Vulnerability"Microsoft has confirmed that Windows is affected by a zero-day vulnerability after researchers warned of exploitation in the wild. The vulnerability is now tracked as CVE-2022-30190. A researcher who uses the online moniker “nao_sec” recently reported…
-
"Turkish Airline Exposes Flight and Crew Info in 6.5TB Leak"Researchers at SafetyDetectives recently discovered that a low-cost Turkish airline accidentally leaked personal information of flight crew alongside source code and flight data after misconfiguring an AWS bucket. The researchers found the cloud…
-
"U.S. Academic Credentials Displayed in Public and Dark Web Forums"The cyber division of the Federal Bureau of Investigation (FBI) has recently warned universities and colleges located in the U.S. that higher education credentials have been advertised for sale on online criminal marketplaces and publically accessible…
-
"There Are Systems 'Guarding' Your Data in Cyberspace – But Who Is Guarding the Guards?"A "zero-trust" approach is the current best practice in secure technology architecture followed by large businesses and organizations. Zero-trust security is an approach that requires users to prove their authenticity every time they access data or a…
-
"How Randomly Moving Electrons Can Improve Cyber Security"A team of researchers from the Indian Institute of Science (IISc) has developed a record-breaking True Random Number Generator (TRNG) to improve data encryption and provide enhanced security for sensitive digital data such as credit card details,…
-
"CISA Publishes 5G Security Evaluation Process Plan"The Cybersecurity and Infrastructure Security Agency (CISA) has recently published a new five-step 5G Security Evaluation Process to help companies improve their security posture before deploying new 5G applications. The new guidelines include…
-
"S&T Hackathon Addresses Emerging Threats to Critical Infrastructure"The US Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) issued a warning in late March that critical US infrastructure sectors could be targeted by Russian cyberattacks. The rapid development of new information and…
-
"Microsoft Finds Major Security Flaws in Pre-Installed Android Apps"Bug hunters at Microsoft have discovered several high-severity vulnerabilities in a mobile framework used in pre-installed Android System apps. The researchers warn that exploitation could have allowed the implantation of a persistent backdoor on Android…
-
"Twitter to Pay $150m Fine to Resolve Data Privacy Violations"Twitter has agreed to pay a $150m fine to settle a federal privacy suit over privacy data violations. Twitter reportedly was collecting phone numbers and email addresses for account security measures and then using the information for advertising…
-
"Fronton IoT Botnet Packs Disinformation Punch"The Fronton botnet can do far more than execute Distributed Denial-of-Service (DDoS) attacks. It can also track social media trends and launch fitting propaganda. The Fronton DDoS-focused botnet first made headlines in March of 2020, when a hacktivist…