News
-
"$38 Million Worth of Gift Cards Stolen And Sold on Dark Web"Researchers at a fraud intelligence firm called Gemini Avirsory found that a cybercriminal has sold almost 900,000 gift cards and over 300,000 payment cards on a top-tier cybercrime forum on the dark web. The total value of the cards was claimed to be… -
"Hackers Are Exploiting Discord and Slack Links to Serve Up Malware"Collaboration platforms such as Discord and Slack have increased in use to help maintain ties during the COVID-19 pandemic. As these platforms have increasingly become an integral part of our lives, threat actors have been using them to deliver malware…
-
"Armed Conflict Draws Closer as State-Backed Cyber-Attacks Intensify"A senior lecturer in criminology from the University of Surrey, Mike McGuire, has found in a new study that there has been a 100% increase in “significant” state-backed attacks between 2017 and 2020, and an average of over 10 publicly attributed attacks…
-
"DoD Launches New Security Vulnerability Pilot"The US Department of Defense (DoD) launched a new vulnerability disclosure program on HackerOne to identify vulnerabilities in Defense Industrial Base (DIB) contractor networks and improve digital hygiene. According to HackerOne, any information…
-
"The Superpowered SOC: How AI Can Drive Agencies to the Next Level of Cyber Defense"Cybersecurity incidents faced by federal agencies are continuing to increase in volume, complexity, and impact. The massive SolarWinds hack that impacted the Departments of Treasury, Justice, Commerce, and others further indicates the growing…
-
"Office Depot Configuration Error Exposes One Million Records"Security researchers at Website Planet discovered a misconfigured Elasticsearch server belonging to a popular office supplies store chain on March 3rd. The misconfigured Elasticsearch server was leaking nearly one million records, including…
-
"Vulnerabilities in ICS-Specific Backup Solution Open Industrial Facilities to Attack"Claroty researchers discovered vulnerabilities in Rockwell Automation's FactoryTalk AssetCentre software, a backup solution specifically for Industrial Control Systems (ICS). All of the vulnerabilities have been given a maximum CVSS v3 base score of 10.…
-
"Wormable Netflix Malware Spreads Via WhatsApp Messages"Security researchers at Check Point discovered new malware disguised as a Netflix application, designed to spread worm-like via victims’ WhatsApp messages. The malware is contained in an application on the Google Play Store called ‘FlixOnline.’…
-
"Electric Cars, Smart Refrigerators Pose Cyber Risk To US Utilities, GAO Finds"A report released by the US Government Accountability Office (GAO) in March brings further attention to the increased vulnerability of the electrical grid to cyberattacks because of electric vehicles and internet-connected home appliances. Cybersecurity…
-
"LinkedIn Users Targeted by Spear-Phishing Campaign"Security researchers from eSentire Threat Response Unit (TRU) are warning LinkedIn users to beware of unsolicited job offers after revealing a new spear-phishing campaign designed to install Trojan malware on their devices. When a victim opens the…
-
"GitHub Investigating Crypto-Mining Campaign Abusing Its Server Infrastructure"GitHub is investigating a series of attacks against its cloud infrastructure that allowed cybercriminals to use the company's servers to perform illicit operations for mining cryptocurrency. The attacks, which have been occurring since the fall of 2020,…
-
"Emerging Hacking Tool 'EtterSilent' Mimics DocuSign, Researchers Find"Security researchers at the threat intelligence company Intel 471 published a blog post discussing a malicious document builder known as EtterSilent that is growing in popularity among cybercriminals. Two versions of the maldoc builder have been seen…