TELUS investigating leak of stolen source code, employee data
Canada’s second-largest telecom, TELUS is investigating a potential data breach after a threat actor shared samples online of what appears to be employee data. The threat actor…
Category: Bleeping Computer
Ukraine says Russian hackers backdoored govt websites in 2021
The Computer Emergency Response Team of Ukraine (CERT-UA) says Russian state hackers have breached multiple government websites this week using backdoors planted as far back…
Forsage DeFi platform founders indicted for $340 million scam
A Federal grand jury in the District of Oregon has indicted four Russian nationals founders of Forsage decentralized finance (DeFi) cryptocurrency investment platform for allegedly running…
Microsoft urges Exchange admins to remove some antivirus exclusions
Microsoft says admins should remove some previously recommended antivirus exclusions for Exchange servers to boost the servers’ security. As the company explained, exclusions targeting the Temporary ASP.NET…
Americans lost $8.8 billion to fraud in 2022 after 30% surge
The U.S. Federal Trade Commission (FTC) revealed today that Americans lost almost $8.8 billion to various types of scams in 2022, following a significant surge…
Valve “honeypot” used to ban 40,000 Dota 2 players using cheat
Game developer Valve has announced that it permanently banned more than 40,000 accounts for using cheating software to gain an unfair advantage over other players in…
Russian malware dev behind NLBrute hacking tool extradited to US
A Russian malware developer accused of creating and selling the NLBrute password-cracking tool was extradited to the United States after being arrested in the Republic…
Fruit giant Dole suffers ransomware attack impacting operations
Dole Food Company, one of the world’ largest producers and distributors of fresh fruit and vegetables, has announced that it is dealing with a ransomware attack that…
What is the Best Pen Testing Schedule for Your Development Cycle?
Pen testing is an essential part of secure application development; it helps find vulnerabilities before they can be exploited, ensures the resilience of web applications,…
Hydrochasma hackers target medical research labs, shipping firms
A previously unknown threat actor named Hydrochasma has been targeting shipping and medical laboratories involved in COVID-19 vaccine development and treatments. The hackers’s goal appears to…
Hackers now exploit critical Fortinet bug to backdoor servers
Threat actors are targeting Internet-exposed Fortinet appliances with exploits targeting CVE-2022-39952, an unauthenticated file path manipulation vulnerability in the FortiNAC webserver that can be abused…
Google paid $12 million in bug bounties to security researchers
Google last year paid its highest bug bounty ever through the Vulnerability Reward Program for a critical exploit chain report that the company valued at…