Squaring the CircleCI: DevOps platform publishes post-mortem on recent breach
How the build pipeline was compromised Popular DevOps platform CircleCI has blamed an attack that successfully planted malware on an internal engineer’s laptop for a…
Latest Cybersecurity News — Page 6072
View all →
How to handle personal data of students
School districts are constantly being targeted by cyber attacks, leading to data breaches and information misuse. So, to those who are worried about the privacy…
A Secure User Authentication Method – Planning is More Important than Ever
Jan 16, 2023The Hacker NewsIdentity Management / MFA When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability.…
Cash use rises for first time in 13 years as cost of living increases
The amount of cash withdrawn from ATMs increased 19% in 2022 as people attempted to avoid going into debt during the cost of living crisis.…
Australian Government Website Data Breach, 500 Files Exposed
An alleged data breach of the Australian government website is making rounds on breach forums where a cybercriminal named ‘UsNsA’ has claimed to have access…
Deserialized web security roundup – Slack and Okta breaches, lax US government passwords report, and more
Jessica Haworth 13 January 2023 at 18:31 UTC Updated: 16 January 2023 at 14:29 UTC Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and…
Hackers Compromised CircleCI Employee’s Laptop
CircleCI, a DevOps platform, discovered that malware installed on a CircleCI engineer’s laptop was used by an unauthorized third party to steal a legitimate, 2FA-backed…
GitHub Disables Pages of Pro-Russia DDoS Group NoName057(16)
NoName057(16) utilized GitHub for hosting most of its malicious activities, including hosting its DDoS page. NoName057(16) is a pro-Russia hacktivist collective known for targeting several…
CircleCI breach post-mortem: Attackers got in by stealing engineer’s session cookie
The attackers who pulled off the recent breach of continuous integration and continuous delivery (CI/CD) platform maker CircleCI got in by compromising an engineer’s laptop…
Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software
Jan 16, 2023Ravie LakshmananData Security / Cyber Threat A “large and resilient infrastructure” comprising over 250 domains is being used to distribute information-stealing malware such…
IR35 reforms: Contractors cite tax avoidance legislation as ‘biggest concern’ in 2023
Negotiating the UK government’s IR35 tax avoidance legislation remains the biggest concern for contractors in 2023, according to survey findings compiled using feedback from 700…
Avast releases free BianLian ransomware decryptor
Security software company Avast has released a free decryptor for the BianLian ransomware strain to help victims of the malware recover locked files without paying the…