A series of vulnerabilities in multiple smart devices manufactured by Nexx can be exploited to remotely open garage doors, and take control of alarms and plugs....
Month: April 2023
Tax preparation and e-file service eFile.com compromised to serve malware
The eFile.com online service, which is authorized by the US Internal Revenue Service (IRS), was spotted serving malicious malware to visitors. eFile.com, the personal online tax...
HP would take up to 90 days to fix a critical bug in some business-grade printers
HP would take up to 90 days to address a critical flaw, tracked as CVE-2023-1707, that resides in the firmware of some business-grade printers. HP is...
CISA JCDC Will Focus on Energy Sector
The CISA ‘s Joint Cyber Defense Collective (JCDC) initiative is going to build operation plans for protecting and responding to cyber threats. What comes to mind...
Law enforcement seized the Genesis Market cybercrime marketplace
Law enforcement seized the Genesis Market black marketplace, a platform focused on the sale of stolen credentials, as part of Operation Cookie Monster. The FBI seized the...
STYX Marketplace emerged in Dark Web focused on Financial Fraud
Resecurity has recently identified the STYX Marketplace, a new cybercriminal e-commerce platform with a specialized focus on financial fraud and money laundering. The STYX marketplace was...
Seized Genesis Market Data is Now Searchable in Have I Been Pwned, Courtesy of the FBI and “Operation Cookie Monster”
A quick summary first before the details: This week, the FBI in cooperation with international law enforcement partners took down a notorious marketplace trading in stolen...
Why you should spring clean your home network and audit your backups
Do you know how many devices are connected to your home network? You don’t? This is precisely why it’s time for a network audit. The rite...
International sting takes down online marketplace of stolen identities
A criminal online marketplace selling millions of stolen identities for as little as 56p has been taken down in an international crackdown. The sting, led by...
New dark web market STYX focuses on financial fraud services
A new dark web marketplace called STYX launched earlier this year and appears to be on its way to becoming a thriving hub for buying and selling...
Typhon info-stealing malware devs upgrade evasion capabilities
The developers of the Typhon info-stealer announced on a dark web forum that they have updated the malware to a major version they advertise as ‘Typhon...
Google will require Android apps to let you delete your account
Google has announced a new Google Play Store data deletion policy that will require Android developers to provide users with an online option to delete their accounts and...
Microsoft Edge Workspaces now available in limited public preview
Microsoft announced today that the recently introduced Edge Workspaces feature, which allows users to share groups of tabs with friends and family, is now available as...
Hackers can open Nexx garage doors remotely, and there’s no fix
Multiple vulnerabilities discovered Nexx smart devices can be exploited to control garage doors, disable home alarms, or smart plugs. There are five security issues disclosed publicly, with...
Biometric Authentication Isn’t Bulletproof —Here’s How to Secure It
Biometric authentication is often thought of as nearly impossible to steal or fake, a perfect addition to your cybersecurity arsenal. While it is tough for a...
Spain’s most dangerous and elusive hacker now in police custody
The police in Spain have arrested José Luis Huertas (aka “Alcaseca”, “Mango”, “chimichuri”), a 19-year-old regarded as the most dangerous hackers in the country. Huertas is...
Supercharge your small business with these 15 AI tools
EXECUTIVE SUMMARY: Small businesses are facing an increasing number of demands, and need innovative solutions to stay competitive in today’s fast-paced digital landscape. Technological advancements, like...
Noname Security Announces Hardened API Security Platform
San Jose, CA – April 5, 2023 – Noname Security, the leading provider of complete and proactive API security, today announced Noname Public Sector’s Hardened Virtual Appliance making...
BlackBerry Introduces Integrated Solution to Assure Secure Bi-Directional Response Communications During Cyber Incidents
WATERLOO, ON, April 5, 2023 /PRNewswire/ — BlackBerry Limited (NYSE: BB) (TSX: BB) today announced a new integration that combines the award-winning Managed Detection and Response (MDR) protection of CylanceGUARD® with secure...
Garage Door Openers Open to Hijacking, Thanks to Unpatched Security Vulns
Garage door controllers, smart plugs, and smart alarms sold by Nexx contain cybersecurity vulnerabilities that could enable cyberattackers to crack open home garage doors, take over...
AppSec Looms Large for RSAC 2023 Innovation Sandbox Finalists
The need for complying with government rules, securing post-pandemic distributed workforces, and improving AI capabilities drives the cybersecurity startup scene this year, at least as shown...
Researcher Tricks ChatGPT Into Building Undetectable Steganography Malware
A security researcher has tricked ChatGPT into building sophisticated data-stealing malware that signature and behavior-based detection tools won’t be able to spot — eluding the chatbot’s anti-malicious-use...
FBI Seizes Genesis Cybercriminal Marketplace in ‘Operation Cookie Monster’
The FBI has seized the Genesis Market, one of the largest and most widely used Dark Web forums for stolen cookies, credentials, and tokens, plus bots and...
QNAP Zero-Days Leave 80K Devices Vulnerable to Cyberattack
A pair of zero-day vulnerabilities in several Quality Network Appliance Provider (QNAP) operating systems (OS) for network-attached storage (NAS) appliances are impacting an estimated 80,000 devices worldwide. They...
3 Fronts in the Battle for Digital Identity
Technological achievements that change business and lives come fast and furious today. Across all the advances, those who would use technology to empower individuals and open...
New GRC Platform TrustRegister Links Risk to Revenue Impact
TrustCloud’s latest application, TrustRegister, empowers businesses to verify and assure trust in every relationship. TrustRegister allows companies to leverage programmatic risk assessments to proactively identify risks, simplify...
How Strategic Investors Can Help Cybersecurity Startups
Economic uncertainty puts enormous pressure on cybersecurity startups already struggling to break into a crowded market. It’s bad news for both these nascent companies and their...
FBI (and Others) Shut Down Genesis Market
Genesis Market is shut down: Active since 2018, Genesis Market’s slogan was, “Our store sells bots with logs, cookies, and their real fingerprints.” Customers could search...
Smashing Security podcast #316: Of Musk and Afroman
An Elon Musk-worshipping college principal gets schooled, and rapper Afroman turns the tables after armed police raid his house. All this and much more is discussed...
Get two years of ultimate VPN protection on unlimited connections for only $60
on April 5, 2023, 5:54 AM EDT Get two years of ultimate VPN protection on unlimited connections for only $60 Windscribe has functions you probably didn’t...





























