Sitting Ducks DNS Attack Hijacked 35k Domains
Threat actors have been exploiting the attack vector known as Sitting Ducks since at least 2019 to conduct malware delivery, phishing, brand impersonation, and data…
Author: Cybernoz
Google Chrome warns uBlock Origin may soon be disabled
Google Chrome is now encouraging uBlock Origin users who have updated to the latest version to switch to other ad blockers before Manifest v2 extensions…
Millions of US Voter Data Exposed in 13 Misconfigured Databases
Cybersecurity researcher finds 4.6M Illinois voter records exposed in unsecured databases. Sensitive data including names, addresses, and SSNs were publicly accessible. Incident highlights vulnerabilities in…
Google Chrome bug breaks drag and drop from Downloads bubble
A recent Google Chrome update has broken the drag-and-drop feature in the Downloads bubble that previously allowed you to drag and drop downloaded files onto any…
The Dumbest Thing In Security: CrowdStrike, Meet Delta
The CrowdStrike outage saga managed to turn even uglier this week, and lawyers may be the only ones who are benefiting. Also, we look at…
Investors sued CrowdStrike over false claims about its Falcon platform
Investors sued CrowdStrike over false claims about its Falcon platform Pierluigi Paganini August 02, 2024 Investors have sued CrowdStrike because the cybersecurity firm made false…
Security Page Updates: Boosting Consistency & Transparency for Security Researchers and Customers
Cross-Directional Consistency & Transparency on the HackerOne Platform HackerOne is a marketplace through which organizations can address security vulnerabilities with security researchers, and security researchers…
US sues TikTok for violating children privacy protection laws
Image: MidjourneyThe U.S. Department of Justice has filed a lawsuit against popular social media platform TikTok and its parent company, ByteDance, alleging widespread violations of…
Fake AI editor ads on Facebook push password-stealing malware
Image: MidjourneyA Facebook malvertising campaign targets users searching for AI image editing tools and steals their credentials by tricking them into installing fake apps that…
SLUBStick Linux Vulnerability Let Attackers Gain Full System Control
Security researchers have discovered a severe vulnerability in the Linux kernel that could allow attackers to gain full control over affected systems. Dubbed “SLUBStick,” the…
APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure
Aug 02, 2024Ravie LakshmananCyber Espionage / Malware A Russia-linked threat actor has been linked to a new campaign that employed a car for sale as…
Cryptonator seized for laundering ransom payments, stolen crypto
U.S. and German law enforcement seized the domain of the crypto wallet platform Cryptonator, used by ransomware gangs, darknet marketplaces, and other illicit services, and…