Inside the Dark World of Doxing for Profit
Since the early 1990s, people have used doxing as a toxic way to strike digital revenge—stripping away someone’s anonymity by unmasking their identity online. But…
Month: August 2024
SEC ends probe into MOVEit attacks impacting 95 million people
The SEC has concluded its investigation into Progress Software’s handling of the widespread exploitation of a MOVEit Transfer zero-day flaw that exposed data of over…
CSR uses analytics for transport, manufacturing visibility – Cloud
CSR, the maker of iconic building products like Gyprock and Bradford insulation, has invested several years into data architecture and the creation of new datasets…
Critical XSS bug in Roundcube Webmail allows attackers to steal emails and sensitive data
Critical XSS bug in Roundcube Webmail allows attackers to steal emails and sensitive data Pierluigi Paganini August 07, 2024 Researchers warn of flaws in the…
Defence advances ‘novel’ analytics capability – Cloud
More details have emerged about Defence’s “resilient decision highway” analytics project, which is intended to improve “operational decision-making” within the Australian Defence Force. Defence has appointed…
☝️340 secretos JWT débiles que debes revisar en tu código
¿Qué pasa con JWT? El token web JSON, usualmente identificado por sus siglas JWT, brinda un recurso eficaz para autenticar y habilitar el acceso en…
New CMoon USB worm targets Russians in data theft attacks
A new self-spreading worm named ‘CMoon,’ capable of stealing account credentials and other data, has been distributed in Russia since early July 2024 via a…
$1.8M Stolen in Major Smart Contract Exploit
Learn how a smart contract vulnerability led to the theft of $1.8 million from Nexera, a DeFi protocol. Discover the hacker’s tactics and the ongoing…
How chip giant Intel spurned OpenAI – Hardware
For US chip giant Intel, the darling of the computer age before it fell on harder times in the AI era, things might have been…
Windows Update downgrade attack “unpatches” fully-updated systems
SafeBreach security researcher Alon Leviev revealed at Black Hat 2024 that two zero-days could be exploited in downgrade attacks to “unpatch” fully updated Windows 10,…
Researchers Find Microsoft 365 First Contact Safety Tip Bypass
While Microsoft 365 (formerly Office 365) has implemented various anti-phishing measures to protect its users, researchers have found a bypass for the First Contact Safety…
UK IT provider faces $7.7 million fine for 2022 ransomware breach
The UK’s Information Commissioner’s Office (ICO) has announced a provisional decision to impose a fine of £6.09M ($7.74 million) on Advanced Computer Software Group Ltd…