NSA shares tips on blocking BlackLotus UEFI malware attacks
The U.S. National Security Agency (NSA) released today guidance on how to defend against BlackLotus UEFI bootkit malware attacks. BlackLotus has been circulating on hacking…
Latest Cybersecurity News — Page 6190
View all →
SAP employees are stealing hard drives from data center and selling on eBay
An SSD drive that was reported stolen from a SAP datacenter in Walldorf has been discovered on eBay, which has prompted the German software manufacturer…
Microsoft Teams bug allows malware delivery from external accounts
Security researchers have found a simple way to deliver malware to an organization with Microsoft Teams, despite restrictions in the application for files from external sources.…
Microsoft 365 users report Outlook, Teams won’t start or freezes
Network and IT admins have been dealing with ongoing Microsoft 365 issues this week, reporting that some end users cannot use Microsoft Outlook or other…
US Auto Insurance Price Comparison Site RateForce Leaks Massive PII Data
RateForce is a platform that facilitates online comparison of car insurance quotes and has boasted nearly 11 million quotes since 2014. A massive data breach…
New Mirai botnet targets tens of flaws in popular IoT devicesSecurity Affairs
Since March 2023, Unit 42 researchers have observed a variant of the Mirai botnet spreading by targeting tens of flaws in D-Link, Zyxel, and Netgear…
Mirai botnet targets 22 flaws in D-Link, Zyxel, Netgear devices
A variant of the Mirai botnet is targeting almost two dozen vulnerabilities aiming to take control of D-Link, Arris, Zyxel, TP-Link, Tenda, Netgear, and MediaTek…
SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool – Krebs on Security
The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send…
Google Backs Creation of Cybersecurity Clinics With $20 Million Donation
Free medical clinics and legal aid clinics, where college students and their instructors help their communities while also learning more about their professions, are now…
CISA orders govt agencies to patch bugs exploited by Russian hackers
On Thursday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six more security flaws to its known exploited vulnerabilities (KEV) list. Three of them…
Hackers hijack Linux systems using trojanized OpenSSH version
Microsoft says Internet-exposed Linux and Internet of Things (IoT) devices are being hijacked in brute-force attacks as part of a recently observed cryptojacking campaign. After…
MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans
Jun 22, 2023Ravie LakshmananCyber Attack / Phishing A new phishing campaign codenamed MULTI#STORM has set its sights on India and the U.S. by leveraging JavaScript…