LastPass warns of fake support centers trying to steal customer data
LastPass is warning about an ongoing campaign where scammers are writing reviews for its Chrome extension to promote a fake customer support phone number. However,…
Month: November 2024
EMERALDWHALE Steals 15,000+ Cloud Credentials, Stores Data in S3 Bucket
Operation EMERALDWHALE compromises over 15,000 cloud credentials, exploiting exposed Git and Laravel files. Attackers use compromised S3 buckets for storage, increasing the risks of phishing…
Medusa Ransomware attack impacts 1.8 million patients
In what could potentially be the largest data breach in the history of pathology labs in the United States, the Medusa Ransomware group has reportedly…
1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products
Researchers at the Satori Threat Intelligence and Research team have published their findings about a group of cybercriminals that infect legitimate web shops to create…
CISA looks to global collaboration as fraught US election begins
The United States’ Cybersecurity and Infrastructure Security Agency (CISA) this week launched a two-year International Strategic Plan – its first ever – aligning with domestic…
1 Million Vulnerable Fortinet, SonicWall Devices Exposed
Nearly 1 million Fortinet and SonicWall devices with actively exploited vulnerabilities are exposed on the internet, according to Cyble’s weekly vulnerability report published today. The…
DDoS site Dstat.cc seized and two suspects arrested in Germany
The Dstat.cc DDoS review platform has been seized by law enforcement, and two suspects have been arrested after the service helped fuel distributed denial-of-service attacks for…
AI, Fake Hosting, and Psychological Warfare
U.S. and Israeli cybersecurity agencies have published a new advisory attributing an Iranian cyber group to targeting the 2024 Summer Olympics and compromising a French…
Mastercard Arms Small Businesses With Cybersecurity
BetaKit’s CEO Siri Agrell spoke to Mastercard’s Amisha Parikh, vice president of Security Solutions, North America, about being on the front line of global cybersecurity…
Outside IR35: What the Autumn Budget’s Employers’ NI changes mean for IT contractors
The IT contracting market looks set for a shake-up following the Autumn Budget 2024, with the UK government announcing changes that could potentially increase the…
5 SaaS Misconfigurations Leading to Major Fu*%@ Ups
Nov 01, 2024The Hacker NewsSaaS Security / Insider Threat With so many SaaS applications, a range of configuration options, API capabilities, endless integrations, and app-to-app…
Bank of England warns against AI ‘complacency’
The Bank of England is launching a consortium where private sector finance organisations and artificial intelligence (AI) experts can provide knowledge on the technology’s benefits…