Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova
Jul 31, 2024Ravie LakshmananCyber Espionage / Threat Intelligence Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known…
Author: Cybernoz
Campaigners call for evidence to reform UK’s cyber laws
The CyberUp Campaign, a group calling for urgent reform to the Computer Misuse Act of 1990, has launched a fresh consultation inviting security professionals and…
Ransomware Strikes U.S. Non-profit Blood Center ‘OneBlood’
A ransomware attack is impacting the software system of OneBlood, a blood donation non-profit that serves hundreds of hospitals in the southeastern U.S. “Our team…
OneBlood’s virtual machines encrypted in ransomware attack
OneBlood, a large not-for-profit blood center that serves hospitals and patients in the United States, is dealing with an IT systems outage caused by a…
Critical OAuth Vulnerability Exposes 1 Million Sites to XSS Attacks
Security researchers have uncovered a critical vulnerability affecting over one million websites. The vulnerability combines OAuth implementation flaws with cross-site scripting (XSS) attacks. The vulnerability…
Global SMS Stealer Targeting Android Users via Malicious Apps and Ads
New SMS Stealer Alert! The massive campaign targets Android users globally. The scope of this campaign is staggering with over 107,000 malware samples identified so…
VMware vulnerability leads ransomware to encrypt mass virtual machines
All these days we have seen hackers targeting Windows and Linux machines. But now they seem to be after the encryption of mass virtual machines…
SMS Stealer malware targeting Android users: Over 105,000 samples identified
Zimperium’s zLabs team has uncovered a new and widespread threat dubbed SMS Stealer. Detected during routine malware analysis, this malicious software has been found in…
Meta to pay $1.4 billion over unauthorized facial recognition image capture
Texas Attorney General Ken Paxton has announced a $1.4 billion settlement with Meta to “stop the company’s practice of capturing and using the personal biometric…
DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight
Jul 31, 2024Ravie LakshmananWeb Security / Compliance Certificate authority (CA) DigiCert has warned that it will be revoking a subset of SSL/TLS certificates within 24…
When critical cyber response becomes second nature
When alerts and headlines blare the warnings of a critical vulnerability in widely used software, the response within the cyber security community must be decisive…
North Korea Now Has A Cyber Army Of 8,400 Hackers
North Korea’s cyber capabilities are expanding at an alarming rate, posing a significant threat to global security. Local media in South Korea citing a recent…