Source: grahamcluley.com – Author: Graham Cluley The story so far. Round 1 The newspaper Aargauer Zeitung published an article claiming that three million IoT-connected toothbrushes had...
Author: CISO2CISO Editor 2
US insurance firms sound alarm after 66,000 individuals impacted by SIM swap attack – Source: www.bitdefender.com
Source: www.bitdefender.com – Author: Graham Cluley Two US insurance companies are warning that thousands of individuals’ personal information may have been stolen after hackers compromised computer...
Surge in deepfake “Face Swap” attacks puts remote identity verification at risk – Source: www.tripwire.com
Source: www.tripwire.com – Author: Graham Cluley New research shows a 704% increase in deepfake “face swap” attacks from the first to the second half of 2023....
Tooth be told: Toothbrush DDoS attack claim was lost in translation, claims Fortinet – Source: grahamcluley.com
Source: grahamcluley.com – Author: Graham Cluley After hundreds of media outlets worldwide repeated the false claim that a botnet of three million toothbrushes attacked a Swiss...
Juniper Support Portal Exposed Customer Device Info – Source: krebsonsecurity.com
Source: krebsonsecurity.com – Author: BrianKrebs Until earlier this week, the support website for networking equipment vendor Juniper Networks was exposing potentially sensitive information tied to customer...
Weekly Update 386 – Source: www.troyhunt.com
Source: www.troyhunt.com – Author: Troy Hunt Somehow, an hour and a half went by in the blink of an eye this week. The Spoutible incident just...
Notorious Bumblebee Malware Re-emerges with New Attack Methods – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Bumblebee malware has re-emerged following a four-month absence from the cyber threat landscape, according to Proofpoint research. The new campaign, observed...
UK Businesses Lose £31bn to Security Breaches in a Year – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Over 1.5 million UK firms were compromised by threat actors last year, costing them more than £31.5bn ($40bn), according to new...
Stealthy “Hunter-Killer” Malware Detections Surge 333% Annually – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Malware designed to seek out and disable enterprise security defenses has surged in popularity over the past year to comprise nearly...
Sophisticated Cyber-Attack Hits Islamic Charity in Saudi Arabia – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 An Islamic charitable non-profit organization based in Saudi Arabia has been the target of a prolonged cyber-espionage campaign. The campaign began...
China Targets US Hacking Ops in Media Offensive – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 China has escalated its media campaign alleging US hacking operations, following condemnation from the US, UK and EU in July 2021...
Malicious Campaign Impacts Hundreds of Microsoft Azure Accounts – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 Cybersecurity firm Proofpoint has observed a new malicious campaign targeting dozens of Microsoft Azure environments. Threat actors have targeted hundreds of...
US Offers $10m Reward for Hive Ransomware Leaders – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 The US government has offered a reward of up to $10m for information leading to the identification and/or location of leaders...
US Dismantles Warzone RAT Malware Operation – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 An international policing operation led by the US has enabled the dismantling of a nefarious malware operation dubbed “Warzone,” according to...
US Consumers Lose a Record $10bn+ to Fraud Last Year – Source: www.infosecurity-magazine.com
Source: www.infosecurity-magazine.com – Author: 1 US adults lost over $10bn to fraud in 2023, with investment scams the biggest earner for threat actors, according to the...
Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit – Source:thehackernews.com
Source: thehackernews.com – Author: . Feb 13, 2024NewsroomCryptocurrency / Rootkit The Glupteba botnet has been found to incorporate a previously undocumented Unified Extensible Firmware Interface (UEFI)...
PikaBot Resurfaces with Streamlined Code and Deceptive Tactics – Source:thehackernews.com
Source: thehackernews.com – Author: . Feb 13, 2024NewsroomCyber Threat / Malware The threat actors behind the PikaBot malware have made significant changes to the malware in...
Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know – Source:thehackernews.com
Source: thehackernews.com – Author: . Feb 13, 2024The Hacker NewsSaaS Security / Data Breach The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities...
Ivanti Vulnerability Exploited to Install ‘DSLog’ Backdoor on 670+ IT Infrastructures – Source:thehackernews.com
Source: thehackernews.com – Author: . Feb 13, 2024NewsroomVulnerability / Cyber Threat Threat actors are leveraging a recently disclosed security flaw impacting Ivanti Connect Secure, Policy Secure,...
Alert: CISA Warns of Active ‘Roundcube’ Email Attacks – Patch Now – Source:thehackernews.com
Source: thehackernews.com – Author: . Feb 13, 2024NewsroomVulnerability / Email Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw...
Bank of America warns customers of data breach after vendor hack – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Bank of America is warning customers of a data breach exposing their personal information after Infosys McCamish Systems (IMS), one...
FBI seizes Warzone RAT infrastructure, arrests malware vendor – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas The FBI dismantled the Warzone RAT malware operation, seizing infrastructure and arresting two individuals associated with the cybercrime operation. Daniel...
FCC orders telecom carriers to report PII data breaches within 30 days – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Starting March 13th, telecommunications companies must report data breaches impacting customers’ personally identifiable information within 30 days, as required by...
Microsoft tests Windows 11 ‘Super Resolution’ AI-upscaling for gamers – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Lawrence Abrams Microsoft is testing a new “Automatic Super Resolution” AI-assisted upscaling feature that increases the video and image quality of supported...
Ongoing Microsoft Azure account hijacking campaign targets executives – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas A phishing campaign detected in late November 2023 has compromised hundreds of user accounts in dozens of Microsoft Azure environments,...
CISA: Roundcube email server bug now exploited in attacks – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan CISA warns that a Roundcube email server vulnerability patched in September is now actively exploited in cross-site scripting (XSS) attacks....
Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas Hackers are exploiting a server-side request forgery (SSRF) vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy...
Free Rhysida ransomware decryptor for Windows exploits RNG flaw – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas South Korean researchers have publicly disclosed an encryption flaw in the Rhysida ransomware encryptor, allowing the creation of a Windows...
Ransomware attack forces 25 Romanian hospitals to go offline – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Sergiu Gatlan Over two dozen hospitals in Romania have taken their systems offline after a ransomware attack took down their healthcare management system....
ExpressVPN bug has been leaking some DNS requests for years – Source: www.bleepingcomputer.com
Source: www.bleepingcomputer.com – Author: Bill Toulas ExpressVPN has removed the split tunneling feature from the latest version of its software after finding that a bug exposed...





























