The infection chain used in this campaign bears significant similarities to a historic campaign Proofpoint observed in July 2021, making it likely the same threat actor is behind both clusters of activity. click here...
The company addressed the data breach on its portal and sought to assure its customers that no sensitive information was compromised. On Monday, it was reported that the company’s database was hacked. click here...
New York Attorney General Letitia James notified seventeen companies after an investigation into credential stuffing, that 1.1 million customer accounts were compromised in cyberattacks. James said her office was releasing a guide for businesses...
Many LastPass users claim that their master passwords were compromised after receiving email warnings that someone had tried to use them to log into their accounts from unknown locations. The email notifications mention that...
Many LastPass users report that their master passwords have been compromised after receiving email warnings that someone tried to use them to log into their accounts from unknown locations. click here to read full...
Two days ago, hundreds of LastPass users took to Twitter, Reddit, and other sites to complain that they were getting alerts about their master password being used by someone who was not them. click...
The Apple iPhones of at least nine US State Department officials were compromised by an unidentified entity using NSO Group’s Pegasus spyware, according to a report published Friday by Reuters. click here to read...
Planned Parenthood Los Angeles said in a statement that there’s no evidence so far that any patient data was used for fraudulent purposes, and it was notifying patients whose information was accessed. click here...
Phishing is an email or SMS from an imposter pretending to be from a legitimate brand to induce people to hand over private information, passwords, and financial card details. It remains a highly effective...
TeamTNT leveraged Weave Scope, which is a legitimate visualization and monitoring tool for Docker and Kubernetes. Admins can use this to monitor and control their deployed containers/pods/workloads. click here to read full Article Read...
Google’s Threat Horizons report claims that hackers were compromising cloud accounts used for storing files and data. Hackers also leverage cloud instances to perform other malicious activities. click here to read full Article Read...
In a statement, NPC confirmed the receipt of a breach notification report on November 15 from S&R Membership Shopping concerning a cyberattack “that may have compromised its members’ personal data.” click here to read...
Apart from compromised installers, the attackers use an ISO file with a Windows link (LNK) and dynamic link library (DLL) payload. The Americas were found to be the most targeted region. click here to...
A new wave of attacks starting late last week has hacked close to 300 WordPress sites to display fake encryption notices, trying to trick the site owners into paying 0.1 bitcoin for restoration. click...
This time, Nobelium attacking a different part of the supply chain: resellers and other technology service providers that customize, deploy and manage various technologies for their customers. click here to read full Article Read...
Ukrainian law enforcement authorities on Monday disclosed the arrest of a hacker running a powerful botnet consisting of over 100,000 devices that was used to carry out DDoS and spam attacks. click here to...
