Retailers in the Middle East and Africa are more vulnerable to web-skimming attacks, but they make up a small fraction of all consumer victims. An independent researcher recently discovered web-skimming code on the staging server of the clothing retail website Khaadi, which is based in Pakistan and the United Arab Emirates. The code was discovered during an investigation into a web-skimming attack on a German football team's website, and an Internet-wide search revealed 1,800 other potentially compromised websites.

Security researchers hacked a Tesla Modem and collected awards of $722,500 on the first day of Pwn2Own Automotive 2024 for three bug collisions and 24 unique zero-day exploits.  Synacktiv Team took home $100,000 after successfully chaining three zero-day bugs to get root permissions on a Tesla Modem.  The team also used two unique two-bug chains to hack a Ubiquiti Connect EV Station and a JuiceBox 40 Smart EV Charging Station, earning an additional $120,000.

Google recently announced the promotion of Chrome 121 to the stable channel with patches for 17 vulnerabilities, including 11 reported by external researchers.  Of the externally reported security defects, three have a severity rating of "high." Google says it handed over $30,000 in bug bounty rewards to the reporting researchers.  Google noted that the first high-severity bug that Chrome 121 addresses is a use-after-free issue in WebAudio. Tracked as CVE-2024-0807, the flaw earned the reporting researcher a $11,000 bug bounty.

Restaurant chain Jason’s Deli just recently started informing customers that their user accounts and personal information might have been compromised in credential stuffing attacks.  Over the weekend, the company, which owns over 200 fast casual restaurants across the United States, began informing customers that attackers have been observed accessing user accounts using login credentials obtained from other data breaches.

A new study by three UC Berkeley School of Information students and alums aims to make it easier to determine the authenticity of an audio clip as deepfakes and doctored audio have become more common. Deepfakes are a type of media, including images, audio, and videos, manipulated or created using Artificial Intelligence (AI). In addition to spreading false information, deepfakes can decrease the effectiveness of security systems. The team explored various techniques for distinguishing a real voice from a cloned one made to impersonate a specific person.

A National Science Foundation (NSF) grant has been awarded in support of Northeastern University professor David Choffnes and other computer scientists exploring the vulnerabilities of Internet of Things (IoT) devices as part of the "Security and Privacy Heterogeneous Environment for Reproducible Experimentation" (SPHERE) project. Choffnes says the remote IoT lab will be the first of its kind. Anyone can schedule a time to configure the lab's IoT devices to simulate different deployments and interact with them in automated ways to uncover security and privacy flaws.

A new report released by Palo Alto Networks' Unit 42 delves into how the BianLian ransomware group operates as it evolves to focus primarily on the healthcare and manufacturing sectors, as well as the US and Europe. BianLian first appeared around 2021 and gained widespread attention in 2022 when it hit companies in the US, UK, and Australia with ransomware attacks. The group now only steals data and threatens to publish it if victims refuse to pay.

According to Check Point Research's annual review, organizations faced a significant increase in cyberattacks in 2023. Specifically, one out of every ten companies suffered a cyberattack last year, which was 33 percent higher than in 2022. Ransomware was the most common offender, as during 2023, 10 percent of companies struck by a cyberattack faced an attempted ransomware installation. In 2022, this percentage remained at 7 percent. This article continues to discuss the increase in cyberattacks faced in 2023, ransomware trends, and the sectors affected.

Two malicious packages on the NPM package registry use GitHub to store Base64-encrypted SSH keys stolen from developer systems. One module was downloaded 412 times, and the other was downloaded 1,281 times before being removed by the NPM maintainers. The software supply chain security company ReversingLabs, which made the discovery, noted that there were eight different versions of one module and more than 30 versions of the other. Both modules run a postinstall script after installation, with each capable of retrieving and executing a different JavaScript file.