Australian Government Website Data Breach, 500 Files Exposed
An alleged data breach of the Australian government website is making rounds on breach forums where a cybercriminal named ‘UsNsA’ has claimed to have access…
Month: January 2023
Deserialized web security roundup – Slack and Okta breaches, lax US government passwords report, and more
Jessica Haworth 13 January 2023 at 18:31 UTC Updated: 16 January 2023 at 14:29 UTC Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and…
Hackers Compromised CircleCI Employee’s Laptop
CircleCI, a DevOps platform, discovered that malware installed on a CircleCI engineer’s laptop was used by an unauthorized third party to steal a legitimate, 2FA-backed…
GitHub Disables Pages of Pro-Russia DDoS Group NoName057(16)
NoName057(16) utilized GitHub for hosting most of its malicious activities, including hosting its DDoS page. NoName057(16) is a pro-Russia hacktivist collective known for targeting several…
CircleCI breach post-mortem: Attackers got in by stealing engineer’s session cookie
The attackers who pulled off the recent breach of continuous integration and continuous delivery (CI/CD) platform maker CircleCI got in by compromising an engineer’s laptop…
Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software
Jan 16, 2023Ravie LakshmananData Security / Cyber Threat A “large and resilient infrastructure” comprising over 250 domains is being used to distribute information-stealing malware such…
IR35 reforms: Contractors cite tax avoidance legislation as ‘biggest concern’ in 2023
Negotiating the UK government’s IR35 tax avoidance legislation remains the biggest concern for contractors in 2023, according to survey findings compiled using feedback from 700…
Avast releases free BianLian ransomware decryptor
Security software company Avast has released a free decryptor for the BianLian ransomware strain to help victims of the malware recover locked files without paying the…
All the Data Apple Collects About You—and How to Limit It
When I turned on personalized ads (I had previously turned them off), Apple’s ad targeting information says I am included in segments based on my…
CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers
Jan 16, 2023Ravie LakshmananIndustrial Control Systems The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical…
LockBit Targets Fulfilment Matters, Claims to Have 5GB Data
Days after hitting Royal Mail, LockBit posted details about British logistics firm, Fulfilment Matters, the e-commerce business that has majors such as Samsung and Unilever…
This is How to Start Your Own Cybersecurity Business
There is really no better time to start a cybersecurity business. Cybercrime is a bigger problem than ever. So, if you’re thinking about starting on…