Security experts discovered a major weakness in M2M protocols that allows hacker to overtake IoT devices. The experts state that this can result in the sabotage of production facilities and serious consequences for smart home owners. M2М Protocols Abuse Leads…
Nothing bands individuals together like a good old security breach. We are all equal in the face of hacks and data breaches, aren’t we? Did you know that there were 2,216 data breaches and more than 53,000 cybersecurity incidents registered…
We have just received reports that a team of researchers discovered a new variation of the Spectre CPU bug known as the SplitSpectre CPU Vulnerability. It allows malicious users to hijack sensitive data vi the same speculative execution approach as…
Quora has sent out notifications to all of its users notifying them that it has been breached. According to the information received, an unknown hacker or collective was able to access their database of user data on Friday (November 30).…
The Zoom conference service has been found to contain a dangerous vulnerability tracked in CVE-2018-15715 that allows hackers to hijack their sessions. A proof-of-concept code demonstration shows that the flaw not only allows the malicious users to listen in to…
A data breach that affects 500 million individuals was just announced. The affected party is US hotel chain Mariott, and more specifically, its Starwood subsidiary’s guest reservation network. Apparently, the network has exposed its entire database consisting of 500 million…
The answer is within the lines of this post, but is not so simple. Before one is given, other questions have to be answered to give you a better understanding of what is a VPN, how VPNs work and what…
Cryptocurrency mining, or cryptojacking for short, is one of the major cybersecurity threats aimed at both individual users and enterprises, entire networks included. According to statistics, one in three organizations has been targeted by cryptocurrency miners. The number of cryptocurrency…
There are successful malicious campaigns, and then there are successful malicious campaigns. This story falls into the second category, as more than 1.7 million infected Windows-running computers were exploited for click fraud. The campaign has been dubbed 3ve, and has…
Linux users and administrators are advised to be vigilant as news broke of a dangerous ransomware targeting them. It’s called the Lucky ransomware and it is deployed in a global attack campaign featuring typical file-encrypting behavior as the numerous variants…
DNA Money, an Indian newspaper, released a report detailing how Microsoft routinely shared the financial details of Indian bank customers with US intelligence agencies. More specifically, “the data of customers running an account with banks that have migrated to Microsoft…
We all have favorite apps and preferred websites which we use on a daily basis. Along with our growing need of apps and services we constantly rely on, lots of new scams pop up that exploit this need. One of…
Nearly four years ago, Lenovo was making the headlines in a pre-installed adware debacle. Back in 2015, the computer manufacturer was caught installing the Superfish Visual Discovery comparison-search engine software by default on its consumer laptops. Shortly after that revelation,…
Deception has always been part of our lives, so have been con artists. With the evolution of the Internet and our ever-growing dependence on it, however, deception in the form of online scams and frauds has amassed. Con artists of…
The L0rdix malware is a newly detected hacking tool that is being offered on the hacker underground markets allowing prospective buyers to use it in attack campaigns against Windows computers. It allows individual hackers and groups to use it in…
A new security report reveals that a dangerous new Linux Trojan has been found to infect computers worldwide. It is categorized as a hybrid threat as it encompasses attack scenarios of several types of infections. The attacks are found to…
Encryption and privacy are two major issues that concern online users around the globe. So any news towards their improvement is good news. Such is the announcement that encrypted email service provider ProtonMail recently launched a standalone VPN (virtual private…
Dropbox’s Offensive Security red team has discovered a set of zero-day vulnerabilities (later assigned CVE-2017-13890) in Apple’s Safari browser. The research team came across the flaws while testing the way Dropbox and its cloud storage system responded to cyberattacks. More…
According to The Register, some Amazon customers have received emails from Amazon notifying them that their names and email addresses have been “inadvertently disclosed” due to a “technical error.” There’s no information about who had access to the compromised information,…
The Emotet malware is back in active campaigns, security researchers warned. Apparently, the malware is hiding in documents in spam messages that pretend to be sent from financial institutions, or masqueraded as Thanksgiving greetings for employees. The last time we…
