Healthcare provider ILS suffered a data breach allegation... (2023)

Clop ransomware entered the Crown Resorts network by exploiting the GoAnywhere zero-day vulnerability*

Security researchers have discovered a vulnerability in the WiFi protocol that allows attackers to hijack network traffic*

Researchers found Trojanized Tor browsers targeting Russians with malware to steal cryptocurrency*

Attackers targeted European companies to spread Remco's RAT and Formbook malware*

Pakistan-based SideCopy APT Group Targets India's DRDO With Action RAT*

Researchers have found new variants of IcedID Loader that deliver additional malware*

A new MacStealer malware that targets Mac users and steals iCloud Keychain credentials*

Apple fixes WebKit zero-day bug on older iPhones*

Twitter removes leaked source code on GitHub and seeks downloaders*

Attackers target US taxpayers in new Emotet phishing campaign*

A critical bug in the MLflow AI testing framework could expose AI models and machine learning*

OpenAI reveals an incident related to ChatGPT user data*

Microsoft Warns of Outlook Vulnerability Exploited by Russian Attackers*

Procter & Gamble reports GoAnywhere zero-day* data breach

Chinese Nuclear Power Plants Under Attack From 'Bitter' Spy Hackers

Lionsgate Streaming Network Reveals Over 37 Million Subscriber Data*

Malicious Python package uses Unicode technique to evade detection*

Researchers reveal new attack strategies used by Chinese nation-state hackers*

Threat Actors Attack 450 Financial Apps Using Android Banking Trojan*

GitHub code hosting platform quickly replaces exposed RSA SSH key*

Play ransomware gang publishes data stolen from Royal Dirkzwager shipping company*

WordPress fixed a critical vulnerability in the WooCommerce checkout plugin*

BlackGuard Stealer targets 57 browser extensions and cryptocurrency wallets*

Cisco has patched high-severity vulnerabilities in its IOS and IOS XE software*

Microsoft fixes privacy bugs in Windows 11's Acropalypse snipping tool

Researchers warn of Gmail content theft by threat group Kimsuky*

Researchers Publish Proof-of-Concept (PoC) for Vulnerabilities in NETGEAR Orbi Mesh* Wireless System

Trojan ChatGPT Chrome extension found hijacking Facebook accounts*

CISA warned of critical security vulnerabilities in products for industrial control systems*

Play ransomware gang allegedly releases data stolen from logistics service provider Royal Dirkzwager*

Mozilla fixes Firefox crash issue on Windows 11 and macOS* systems

Hackers use new CommonMagic and PowerMagic malware to steal victims' information*

Threat actors targeting Linux servers with various variants of ShellBot* malware

Researchers have found malicious NuGet packages targeting .NET developers*

Scammers extort 1 crore INR from 81 users through mobile payment app*

Threat actors exploited a zero-day vulnerability in Bitcoin ATMs in general*

Ferrari, Italian luxury sports car maker, announces data breach*

Realtek SDK, Huawei routers and Hadoop YARN servers targeted by new HinataBot* botnet

FBI, CISA, and MS-ISAC Release Notice Warning About LockBit 3.0 Ransomware Attacks*

New Trigona ransomware targets Australia, US and European countries*

Threat actors are now proliferating Emotet malware via malicious Microsoft OneNote files*

The NBA suffers a data breach that exposes the personal information of its fans*

Scammers use Twitter's "quote tweet" feature to target bank customers*

Attackers spread "FakeCalls" Android malware in South Korea*

Cyber ​​attack on Latitude Financial Services leads to data theft at two service providers*

Google warns of 18 zero-day bugs in Samsung's Exynos chipsets*

Attackers misuse Adobe Acrobat Sign to spread information-stealing Redline* malware

Mozilla has announced the release of Firefox 111 with dozens of vulnerability patches*

Attackers broke into US federal agencies by exploiting legacy Telerik UI vulnerability*

Researchers Discover Dero's First Cryptojacking Campaign Targeting Kubernetes*

Healthcare provider ILS suffered a data breach that exposed 4.2 million patient records*

Researchers publish technical details about critical vulnerability in Microsoft Outlook*

Tick ​​​​​​​​​​APT Group contracted with a data loss prevention company in East Asia*

CISA has added a critical Adobe ColdFusion vulnerability to its catalog of known exploits*

New Threat Group YoroTrooper Carries Out Cyber ​​Espionage Campaign Against CIS Government Organizations*

Rubrik Suffers a Data Breach from GoAnywhere's Zero-Day Attack*

SAP fixes five critical vulnerabilities in its security updates*

Microsoft Patchday Security Advisory: March 2023*

Euler Finance Lost $197 Million in Cryptocurrencies in a Flash Loan Attack*

Dark Pink APT Group uses KamiKakaBot malware against government and military entities in Southeast Asia*

Massive cyberattack hijacks East Asian websites to redirect victims to adult content*

Threat actors using AI-generated YouTube videos to spread information-stealing malware*

Researchers have discovered critical vulnerabilities in the Akuvox E11 video door phone*

Unidentified attackers target government networks and exploit new FortiOS bug for zero-day attacks*

Researchers have revealed a cross-site search vulnerability in the OpenSea NFT Marketplace*

Researchers have found a new CASPER attack that leaks data from computers without air*

German vehicle manufacturer BMW reveals customer data and company secrets*

US office supply retailer Essendant suffers multi-day outage*

Updated version of Prometei malware infects 10,000 systems worldwide*

Clop Ransomware Gang Starts Blackmailing Victims of GoAnywhere Zero-Day Exploits*

Researchers discovered BATLOADER malware that abused Google ads to deliver a secondary payload*

New UNC2970 Threat Agent Targeting Security Researchers Using New Custom Malware Families*

Researchers found new servers targeted by GoBruteforcer malware running phpMyAdmin, MySQL, FTP and Postgres* services

CISA adds two vulnerabilities to its catalog of known exploits*

The Brain Health Platform suffered a data breach that affected 3.18 million patients*

Researchers found a new Android malware variant, Xenomorph, targeting over 500 banks*

Threat actors exploiting vulnerabilities in remote desktop software to spread PlugX* malware

New IceFire ransomware variant now actively targets Linux* systems

Attackers Target Oracle WebLogic Server With New ScrubCrypt* Encryptor

A Chinese hacking campaign targets unpatched SonicWall SMA devices to install custom malware*

AT&T carrier hack exposes 9 million customer records*

Researchers have reported a Bitwarden autocomplete flaw that can be abused to steal credentials*

Sharp Panda's new campaign targets Southeast Asian government agencies using Soul Malware*

Veeam has patched a high-level vulnerability in Backup Services affecting its backup infrastructure*

Fortinet has patched a critical RCE vulnerability affecting FortiOS and FortiProxy*

SYS01stealer: A new attack on critical infrastructure companies with Facebook ads*

Transparent Tribe hackers use Trojanized messaging apps to spread CapraRAT*

Microsoft releases fix for Outlook login issues in Exchange environments*

Acer Announces Data Breach After Selling 160GB Of Data On Hacker's Website*

The Android March 2023 update fixes two critical code execution bugs*

New HiatusRAT malware found targets DrayTek Vigor routers to steal data*

Researcher discovered Blackfly APT Group targeting Asian companies*

Experts discover a blind spot in Google Cloud Platform leading to data exfiltration attacks*

New phishing campaign uses legacy Windows User Account Control bypass to drop malware*

Researcher publishes proof of concept for critical Microsoft Word RCE vulnerability*

Sandbox Blockchain Games staff account hacked to send malware-linked emails*

Threat actors using malicious Microsoft OneNote attachments to infect Windows* systems

Researchers found new FiXS ATM malware targeting banks in Mexico*

Tennessee State University and Southeast Louisiana Universities under attack*

CISA and FBI warn of increase in real ransomware attacks*

Researchers found thousands of compromised websites with stolen FTP credentials*

Threat Actors Launch New Cryptojacking Campaign Targeting Misconfigured Redis Database Servers*

Microsoft has patched MMIO information disclosure vulnerabilities in Intel* CPUs

Experts discover an information stealer and an entire Trojan horse in a Python package on PyPI*

Scammers target Trezor customers with fake data breach notifications*

Aruba Networks has patched six critical severity vulnerabilities affecting ArubaOS* releases

Iron Tiger attackers create a new Linux version of their custom malware SysUpdate*

Cisco Addresses Critical RCE Vulnerability in Web UI for Multiple IP Phones*

BlackLotus is the first UEFI boot kit malware to bypass Secure Boot defenses in Windows 11*

Microsoft has addressed a global outage affecting its Exchange online mailboxes*

Blind Eagle hackers target Colombian companies with spear phishing*

Attackers using advanced hacking operation SCARLETEEL to infiltrate cloud services*

Researchers have identified two security flaws in Trusted Platform Module (TPM) 2.0*

US TV giant Dish Network confirms ransomware attack behind multi-day network outage*

CISA Warnings Regarding Active Use of ZK Java Framework RCE Flaw*

Attackers promote new Exfiltrator-22 post-exploit framework to spread ransomware*

LastPass publishes additional data breach information in Password Vault December 2022*

Investigators found a mysterious Nevada group targeting thousands of cloud servers*

Attackers use LinkedIn URL shorteners to send Amazon Prime phishing emails*

Two critical bugs in WordPress Houzez theme and plugin are actively exploited in the wild*

The US Marshals Service suffered a data breach followed by a ransomware attack*

Encino Energy, Ohio's largest oil producer, is the target of a cyberattack*

ChromeLoader campaign now distributes malicious VHD files disguised as game programs*

Cyberattacks target data center organizations to steal information*

News Corp data breach statement reveals hackers have been on their network for 2 years*

Third Party Partner of Electronics Retailer The Good Guy Suffers Data Breach*

Attackers flood NPM repository with 15,000 malicious packages containing phishing links*

Dish Network, American television giant, suffers a blackout*

Stanford University Suffers a Data Breach Affecting 897 Graduate Students*

Researchers found unknown threat actors targeting government agencies with PureCrypter* malware

Pirated Final Cut Pro software targets macOS to mine cryptocurrency*

Researchers uncover a cyber group using Lilith RAT and Atharvan Malware to target materials research industry*

Dole, a fruit and vegetable company affected by a ransomware attack*

Analysts Warn of Increase in Attacks Leveraging Zoho ManageEngine Products*

Canada's second largest telecommunications company, TELUS, is investigating a possible data breach*

Cisco fixes high-severity vulnerabilities in its application-facing infrastructure components*

Attackers exploited the vulnerability in R1Soft Server Backup Manager to provide a backdoor*

New S1deload Info-Stealer malware targets YouTube and Facebook* accounts

Transportation and medical laboratories under attack by the new threat substance Hydrochasma*

Hackers use fake ChatGPT apps to spread malware for Windows and Android*

VMware fixed a critical injection bug in Carbon Black Application Control*

CISA adds three new vulnerabilities to its catalog of known exploits*

Security researchers publish proof-of-concept exploit for Fortinet's critical FortiNAC RCE flaw*

Researchers discovered the MyloBot botnet that infects thousands of systems every day*

Video game publisher Activision suffered a data breach*

Pakistani SideCopy Threat Actor Targeting Indian Government Agencies Using ReverseRAT* Backdoor

Apple has updated its security advisories to add a new class of vulnerabilities*

Researchers found a new feature-rich Stealc malware*

HardBit 2.0 ransomware operators use victim's insurance details to set up ransom payment*

Samsung adds a new security feature to guard against zero-click attacks*

Indian ticketing platform RailYatri suffered a data breach affecting 31 million customers*

The attacker targeted Coinbase employees in a smishing attack

Attackers use a new version of the OxtaRAT backdoor to attack Armenian units*

Researchers found a new WhiskerSpy backdoor implemented by a Trojan codec dropper*

Threat actors exploiting vulnerabilities in Microsoft Exchange ProxyShell to deploy cryptocurrency miners*

Experts found attackers using RambleOn malware to target South Korean journalists*

Researchers found a new Mirai botnet variant targeting Linux and IoT devices*

GoDaddy reports a multi-year security breach it suffered*

Threat actors target Microsoft IIS servers with new Frebniis* malware

Fortinet fixes two critical vulnerabilities in the FortiNAC and FortiWeb* product

CISA alerts on Windows and iOS vulnerabilities exploited as zero days*

Xavier University of Louisiana HBCU reported a data breach in November 2022*

Researchers found an authenticated RCE vulnerability in the Arris* router

Scandinavian Airlines suffered a cyberattack that exposed customer details*

Burton Snowboards canceled online orders after a cyber attack*

RedEyes APT Group uses new "M2RAT" malware to steal data from victims*

Splunk fixes high-severity vulnerabilities in its enterprise solution update*

New stealthy malware "Beep" focuses heavily on evading detection*

Tonga Communications Corporation Suffers Ransomware Attack*

Hyundai and Kia car thefts skyrocket due to TikTok Challenge*

Hackers use new MortalKombat ransomware and Laplas ransomware targeting US victims*

Community Health Systems Suffers Data Breach Affecting 1 Million Patients*

Microsoft Exchange Server 2013 will reach End of Life in April 2023*

Al-Toufan Hacking Group Targets Bahrain Airport News Websites And Websites*

Microsoft Patchday Security Advisory: February 2023*

Pepsi's Largest Bottler, US Bottler, Suffers Data Breach*

Garrison Women's Health suffered a data breach affecting 4,000 patients*

Apple has patched a new actively exploited zero-day vulnerability in WebKit*

Cloudflare detects and mitigates the largest DDoS attack on record*

Modified version of ESXiArgs ransomware blocks VMware host recovery*

New DarkBit Ransomware Group Targets Technion*, Israel's Leading Research University

Threat actors hacked into Namecheap email account to send phishing emails*

CISA Warns of North Korean Hackers Targeting Healthcare Organizations with Ransomware Attacks*

CISA adds three more vulnerabilities to its catalog of known exploits*

Several California medical groups suffered a ransomware attack*

Researchers found malicious packages in PyPI and NPM* repositories

Reproduce attacks with ransomware claims on A10 networks*

Clop Ransomware Gang claims to exploit GoAnywhere zero-day bugs*

Microsoft announces discontinuation of Microsoft Support Diagnostic Tool (MSDT) and troubleshooters*

Researchers have found multiple vulnerabilities in Industrial Wireless Internet of Things (IIoT) devices*

NewsPenguin Threat Actor Targets Pakistani Companies in Phishing Campaign*

Russian Hackers Use Fake Crypto Job Postings to Spread Enigma Malware*

Reddit was hit by a hack that allowed hackers to steal the source code*

Largest Canadian bookstore Indigo suffered cyber attack*

Researchers have found Russian hackers using new Graphiron malware to attack Ukraine*

Ross Memorial Hospital in Lindsay affected by cyberattack*

Munster University of Technology (MTU) in Ireland suffers from a severe IT gap*

Multiple document management systems found with unpatched vulnerabilities*

Google released Chrome 110 that fixes 15 vulnerabilities*

Pharmaceutical retailer AmerisourceBergen affected by a cyberattack*

Researchers found a new Medusa botnet targeting Linux users*

GuLoader malware targets e-commerce industry with malicious NSIS executable files*

Developers Release Emergency Patch for Actively Exploited Zero-Day Bug in GoAnywhere MFTaaS*

Researcher Reveals a Bug Discovered in Toyota's Global Supplier Management System (GSPIMS)*

Google Chrome will no longer support Windows 7, 8, 8.1, Windows Server 2012 and 2012 R2 starting in February 2023*

OpenSSL releases patch to fix high severity vulnerabilities*

US third-party provider Cellular suffers data breach affecting its 52,000 customers*

Researchers announced a high severity string vulnerability in F5 BIG-IP*

India's largest truck broker FR8 discloses 140GB of information in data breach*

TgToxic malware targets Android users in Southeast Asia*

Hackers pose as Ukrainian Ministry officials to deploy malware*

TruthFinder and Instant Checkmate report a data breach affecting 20 million consumers*

A new wave of ransomware attacks on ESXi systems exploiting a vulnerability in VMware*

Major Power and Internet Outages in Bermuda*

A new banking Trojan for Android targets Brazilian financial institutions*

A GoAnywhere MFT zero-day bug allows server hacking*

Florida hospital shuts down its IT systems after cyberattack*

Threat Actors Targeting Vulnerabilities in SugarCRM and Oracle E-Business Suite*

Atlassian's Jira software has a critical authentication vulnerability*

Iranian oil rig hackers use new backdoor to steal data from government agencies*

Hackers use KoiVM virtualization technology to avoid detection when installing Formbook Data Stealer*

North Korean hacking group Lazarus stole 100GB of data through the No Pineapple!* campaign

Financial Software Provider ION Group Suffers Ransomware Attack Global Markets Affected*

Cisco has patched a high severity vulnerability in its IOx application*

Car dealership Arnold Clark suffers data breach claimed by Play* ransomware

Hackers have stolen the data of 240,000 Planet Ice Skating customers*

Rogue Crypto Apps Infiltrate Apple App Store and Google Play Store*

BlackCat ransomware gang claims attack on Solar Industries, a manufacturer of industrial explosives*

Hackers used the Google Fi data breach to launch SIM swapping attacks*

A phishing attack on the Latvian Ministry of Defense linked to the Russian hacker group*

Guildford County School Suffers Cyber ​​Attack Leading to Blackout*

US telco status notice affected by third-party data breach*

Indianapolis Housing Agency Suffers Ransomware Attack Affecting 212,910 People*

Hackers announce new Golang-based malware via Telegram channel*

Attackers stole GitHub Desktop encrypted code signing certificates for Mac and Atom apps*

Developers are struggling with a new reported vulnerability in the KeePass software*

QNAP fixes a critical vulnerability in its NAS devices*

UK retailer JD Sports suffered a data breach affecting 10 million customers*

A critical vulnerability in Lexmark printers affects more than 120 models*

Researchers found Grootkit malware with new components and obfuscation techniques*

ISC has patched several high severity DoS vulnerabilities in the DNS BIND software package*

Researchers warn of several vulnerabilities in OpenEMR* healthcare software

Researchers found attackers using portable USB storage devices to spread a new variant of PlugX malware*

Several malicious apps were found in the Google Play Store with over 5 million downloads*

Hackers use new SwiftSlicer Data Cleaner to infect Windows* operating system

CERT IN has published a high severity alert for users of Microsoft Edge*

A major Microsoft 365 outage was caused by a WAN router IP address change*

A hacker group called Sandworm attacked a Ukrainian news agency with five data drafts*

A researcher found 75,000 WordPress sites still using a vulnerable version of the LearnPress plugin*

Data breach against two healthcare organizations affected 400,000 people*

BayCare Clinic suffers a data breach due to the tracking pixel used by a third party*

Websites, administrations and organizations of the financial sector of the German airport suffer DDoS attack*

New Mimic ransomware uses "all" Windows search tools to encrypt files*

Federal Organizations CISA Violation Using Legitimate Remote Desktop Software*

Phishing campaigns use new malware Python RAT to attack Windows*

Threat actors exploit critical Realtek SDK flaw in millions of attacks*

North Korean Hackers Actively Collect Credentials in Latest Cyberattacks*

Zacks Investment Research security breach affects 820,000 clients*

Researchers found threat actors abusing Google ads to spread malware*

DragonSpark attack group uses Golang malware to evade detection*

Several Microsoft services stop responding, including Teams, Outlook, and the Store: Stopping Microsoft Probes*

Arm Mali GPU vulnerability leads to arbitrary kernel and root code execution on Pixel 6 phones*

A vulnerability in the Diksha app exposed the personal information of millions of Indian teachers and students*

Zendesk suffered a data breach after its employee was caught in a phishing attack*

Security researchers have discovered two vulnerabilities in Samsung's Galaxy Store app for Android*

Apple-backed security patches for zero-day vulnerabilities in older iPhone and iPad models*

Nunavut Energy Company Qulliq Energy Corporation suffered cyberattack*

Roaming Mantis adds a new DNS changer to its Android malware to hack WiFi routers*

Ransomware attack on Costa Rica's Ministry of Public Works and Transportation (MOPT)*

Riot Games development environment compromised through social engineering attacks*

Drupal fixes information disclosure vulnerabilities*

Chinese Hackers Use Fortinet Bug As Zero-Day Exploit To Drop Malware*

Hackers actively use OneNote attachments to spread malware*

Researchers are cracking down on massive ad fraud called "Vastflux"*

Over 19,000 Retired Cisco Routers Vulnerable to RCE Attacks*

Windows 10 Preview KB5019275 update contains 14 bug fixes*

Critical Vulnerabilities Fixed OpenText Enterprise Content Management System*

Gamaredon company uses Telegram to launch cyberattacks against Ukraine*

Hackers can abuse GitHub's Codespaces functionality to host and distribute malware*

Researchers discover a new banking Trojan hook with RAT* functions

Fast Food Brand Operator Yum! Brands attacked by ransomware attacks*

Researchers have discovered a critical RCE bug called EmojiDeploy in Microsoft Azure services*

T-Mobile announced a data breach affecting 37 million pieces of customer personal information*

Attackers hacked 34,942 PayPal user accounts in a credential stuffing attack*

Cisco has announced fixes for a high severity SQL injection vulnerability in Unified CM and CM SME*

Oracle fixes 327 vulnerabilities in its January 2023 critical patch update*

The human resources management platform Myrocket.co has revealed personal data of millions of job seekers*

CERT Coordination Center has revealed critical vulnerabilities in Netcomm and TP-Link* routers

Researchers found the NjRAT Trojan distributed through the New Earth Bogle campaign*

MailChimp suffers data breach after attackers obtained employee credentials*

CISA warns of vulnerabilities in products from Siemens, GE Digital and Contec ICS*

Researchers Warn of Critical RCE Vulnerability in Zoho ManageEngine Products*

Nissan North America suffers a data breach due to a misconfigured third-party database*

Microsoft Azure services were vulnerable to unauthorized access to cloud resources*

Git fixes two critical vulnerabilities that allow hackers to execute arbitrary code*

Threat actor "Lolip0p" uploaded three malicious packages to the PyPi platform*

The ODIN Intelligence website has been defaced and breached*

DNV ShipManager software suffers from ransomware attack affecting thousands of shipments*

The Vice Society ransomware gang leaked confidential data from the University of Duisburg-Essen*

Hackers Leak Sensitive San Francisco Transit Police Files Online*

Researchers found Android TV Box with pre-installed malware*

Cryptocurrency wallet provider MetaMask warns users of a new address poisoning scam*

Most of Cacti's servers were found to be unpatched due to a critical vulnerability leading to attacks*

Canada's largest liquor store website hacked to steal credit card information*

Researchers discovered that the CircleCI security incident was caused by information-stealing malware*

Hackers breached NortonLifeLocks* password manager accounts

Cybercriminals use Polyglot files to spread malware undetected*

WordPress plugins along with PoCs have been found to be vulnerable to critical SQL injection bugs*

Researchers have discovered that EyeSpy malware is distributed via Trojan-laden VPN droppers*

Attackers Exploit Fixed FortiOS Zero-Day SSL VPN Vulnerability Against Government Networks*

IcedID Malware Attack Compromised Active Directory Domain*

Researchers found that hackers were actively exploiting a critical flaw in the web control panel*

Cisco discovers three vulnerabilities in Asus router software *

Researchers reveal SymStealer vulnerability in Google Chrome and Chromium*-based browsers

Australia Victoria fire brigade suffers alleged data breach by Vice Society Ransomware Gang*

Gootkit Loader abuses VLC Media Player to infect Australian healthcare organizations*

Google released Chrome 109 to fix 17 vulnerabilities*

New dark pink advanced threat agent that deploys custom malware against government and military installations*

Cisco warns of critical authentication bypass vulnerability in retired routers*

Spread spider threat actors using vulnerable Intel drivers to evade detection*

Royal Mail, the UK's leading postal delivery service, suffers severe service disruptions following a cyber-attack*

CISA adds two more vulnerabilities to its catalog of known exploits*

Security researchers found cryptographic vulnerabilities in messaging app Threema*

Zoom fixes several bugs that Windows and macOS* users are discovering

Largest public school in Iowa school district Des Moines hit by cyberattack*

StrongPity hackers targeted Android users with a Trojan version of the Telegram app*

Found over 1,300 fake AnyDesk websites offering Vidar malware to steal information*

Microsoft Patchday Security Advisory: January 2023*

Auth0 project releases patch for RCE bugs in JsonWebToken library*

Scammers abuse open redirect on UK DEFRA website to redirect visitors to fake dating sites*

Hackers broke into Kubernetes clusters via PostgreSQL* database as part of a malware campaign

CISA High Severity Vulnerability Alerts Affecting Hitachi Energy Products*

Russian threat group Cold River targets three US nuclear research labs*

Attackers distribute NetSupport malware disguised as a Pokémon deck to infect users*

MedStar Mobile Healthcare Suffers Ransomware Attack Affecting 612,000 Customers*

Threat actors use CAPTCHA bypass tactics on GitHub in hacking campaign*

Hackers bypass firewall restrictions with CloudFlare tunnels*

Air France and KLM suffer data breach; Multiple customer accounts hacked*

Chick-fil-A fast food chain suffers data breach*

Rackspace customer data accessed in ransomware attack*

Microsoft releases temporary patch for ODBC* database connection issues

A new variant of Dridex malware that actively attacks Windows and macOS* systems

CircleCI launches security alert to warn users about cyberattacks*

Bluebottle hackers attacked banks with signed Windows* drivers

Cricketsocial.com Database Disclosure of Private Customer Information and Admin Credentials*

Hackers accessed Slack's private GitHub code repositories with a stolen employee*

Five Guys Burger Chain Suffers Data Breach Affecting Applicants*

Researchers noted a sudden increase in Android SpyNote* malware infection rates

New Linux malware compiled by SHC installs cryptominers and DDoS bots*

Several bug updates have been released for Qualcomm and Lenovo ThinkPad chipsets*

Zoho fixes a critical SQL injection vulnerability in its ManageEngine products*

API errors in various car brands reveal personal information of the owner*

Fortinet released patches for high severity vulnerabilities found in FortiADC and FortiTester*

LockBit Ransomware Group alleges ransomware attack on Los Angeles Housing Authority*

Royal Ransomware Group claims attack on Queensland University of Technology hit by data breach*

Threat actors use stolen Colombian bank customer information as bait in phishing emails*

Fixed Synology's critical vulnerability in VPN Plus* server software

PyTorch administrators reveal a malicious dependency in PyTorch-nightly*

Bristol Community College attacked by ransomware attack*

A Telekom Malaysia company suffers from a data breach affecting over 250,000 customer accounts*

Scripps Health agrees to pay $3.5 million to victims affected by the 2021 data breach*

Jakks Pacific Toy Production servers suffer from ransomware attack, Hive and BackCat Group lose data*

Royal Ransomware Group alega ciberataque en Iowa Public Broadcasting Network*

LockBit ransomware gang claims cyberattack on Lisbon port in Portugal*

CISA has issued a warning about vulnerabilities affecting TIBCO Software's JasperReports* product

A Canadian mining company closes a factory after being attacked by ransomware*

WordPress Sites Hit by New Linux Malware With 30 Plugin Exploits*

Cert-In Warns Indian Users About LastPass Data Exploit And NetApp OnCommandInsight Vulnerability*

Anonymous Twitter user posted 10,000 cryptocurrency trading platform API keys 3 commas*

CISA warns of multiple vulnerabilities in Rockwell Automation controllers*

Royal Ransomware Gang Takes Responsibility For Cyber ​​Attack On Telco Intrado*

NETGEAR resolves a high severity vulnerability affecting several models of its wireless routers*

Hackers moved their original infection vector to malicious Excel companion files*

Attackers abusing Google ads to spread Trojanized software products*

Hive ransomware claims Louisiana hospital attack affected 270,000 patients*

Citrix fixes Critical Severity vulnerabilities in its ADC and Gateway servers*

Sargent and Lundy Energy Firm suffered a data breach affecting the personal data of 6,900 people*

A hacker claims to have stolen data from 30 million Indian Railways users*

New YouTube bot malware discovered stealing sensitive data*

North Korean Lazarus APT Group Targets NFT Investors With Phishing Campaign*

BlueNoroff threat actors have introduced new techniques to bypass Windows MotW* protection

Researchers found a password vulnerability in ZyXEL* indoor routers

BTC.com suffers cyberattack and loses USD 3 million in cryptocurrencies*

New GuLoader malware applying new anti-scan techniques to avoid detection*

Hackers Targeted Cryptojacking Bitkeep Wallet Users, Siphoning $8 Million In Assets*

Researchers warn of a critical Linux kernel vulnerability affecting ksmbd*-enabled SMB servers

Cincinnati State Technical Community College suffers a cybersecurity breach*

Researchers discovered a serious flaw in Kyverno's container image signature verification engine*

Researchers discover critical authentication bypass vulnerability in Ghost CMS*

Microsoft has quietly fixed the cross-tenant network bypass bug in its Azure Container service*

Researchers discover W4SP stealers in various PyPI packages with different names*

Threat actors use new intelligence-stealing malware to infect software pirates*

Hackers Actively Exploit WordPress Gift Card Plugin With 50,000 Installs*

Researchers Warn Indian Authorities About Kavach 2FA Phishing Attacks*

Widespread 2FA Bypass Attacks Affect Comcast Xfinity* Accounts

LastPass suffers a data breach exposing customer vault data*

FIN7 Hackers Use Automated Attack Platform to Crack Vulnerable Exchange Servers*

A hacker leaked BetMGM customer details on the hacker forum*

Researchers have discovered several serious flaws in the password management solution Passwordstate*

Zerobot Botnet is added with new features and exploits new vulnerabilities*

Researchers Discovered 'GodFather' Banking Trojan Targeting 400 Banks and Cryptocurrency Exchange Apps*

Hackers Profit By Hacking JFK Airport Taxi Dispatch System

Hackers Target Telecom and Government Systems with Raspberry Robin Worm*

Attackers broke into Okta Company's private GitHub repositories*

Researchers found malicious packages containing data-stealing "W4SP" malware on the PyPi platform*

Hackers attack Brazilian bank users with new Android trojan BrasDex*

Security researchers suspect that the KMSdBot botnet offers attackers DDoS services for rent*

Researchers found a new Microsoft Exchange exploit used by Play ransomware to hack servers*

Phishing sites that distribute DarkTortilla* malware

Researchers found a rogue and malicious "SentinelOne" package in the PyPi repository*

Meta Platforms shut down fake accounts operated by nearly 200 spyware vendors worldwide*

The Play ransomware gang claims responsibility for a cyberattack on the hotel chain 'H-Hotels'*

Microsoft has downgraded a Windows vulnerability to Critical Severity*

The Department of Health reports data on 254,000 patients at risk*

Colombian energy company EPM hit by BlackCat Ransomware attack*

SevenRooms CRM platform suffers a data breach, exposing customer information*

Samba releases security updates to address several high severity vulnerabilities*

After being stopped by Google, the Glupteba malware is back*

FBI warns of BEC attacks on food deliveries*

CISA adds critical Veeam security and replication vulnerabilities to its catalog of known exploits*

Microsoft warns that new Minecraft DDoS malware is infecting Windows, Linux and IoT devices*

Researchers found a new MirrorStealer malware targeting Japanese politicians*

Ukrainian government networks were attacked with Trojans using Windows 10* installers

New Phishing Campaign Uses Facebook Posts to Bypass Email Security*

Hacker posted stolen Social Blade user data in data breach on hacker forum*

Personal data of 5.7 million Gemini users leaked in a third-party data breach*

FuboTV suffers a transmission interruption due to a cyber attack*

TPG Telecom Australia suffers data breach affecting 15,000 customers*

Ransomware hackers use Microsoft-signed drivers to gain access to systems*

FBI Seizes 48 Online Booter or Stresser Platforms Used for DDoS Attacks*

Unknown threat actors have uploaded 144,000 phishing packages to open source NuGet, NPM, and PyPi package repositories*

Microsoft fixes LSASS memory leak bug affecting Windows* servers

VMware releases patches for critical vulnerabilities in ESXi and vRealize*

Microsoft Patchday Security Advisory: December 2022*

Stalkware Xnspy app found to be stealing data from thousands of iPhone and Android devices*

A new Python backdoor allows hackers to remotely access compromised VMware ESXi servers*

India Ministry of Foreign Affairs Pravasi Rishta Global Portal Reveals Passport Information*

Apple has patched a new zero-day vulnerability that is actively exploited in its security updates*

LockBit Ransomware Gang alleges ransomware attack against California Department of Treasury*

Hive Ransomware group claims attack on Knox College*

Fortinet Releases Emergency Patch For Previously Exploited FortiOS SSL VPN Vulnerability*

Information on nearly 360,000 people affected by the Ontario COVID-19 vaccine data leak*

Cryptocurrency mining campaign infects Linux users with Go-based malware dubbed CHAOS*

Uber suffers data breach after attack on its third-party provider*

Iran-backed MuddyWater campaign abuses remote administration tool Syncro*

Telstra, the Australian telecommunications company, apologizes for data breach that exposed the data of 130,000 customers*

Air-gapped PCs are highly susceptible to data theft due to radiation from the power supply*

Rackspace Issues Phishing Alert After Ransomware Incident*

Cisco Warns Enterprises of High Severity Unpatched Bug Affecting IP Phone Firmware Worldwide*

Researchers reveal a new attack method to bypass popular web application firewalls*

An updated variant of TrueBot that takes advantage of the Netwrix Auditor bug and the Raspberry Robin worm*

Researchers discover Drokbk, a new malware that uses GitHub as a deadlock resolution system*

Iranian Hackers Target Diamond Industry With Elegant Data Wiping Malware*

Formbook malware is distributed via a OneNote Document Trojan*

Hive ransomware group targeted by French sports brand Intersport*

CommonSpirit Health suffered a ransomware attack that exposed 623,000 patient data*

Cisco announces a high severity vulnerability affecting its 7800 and 8800 series IP phones*

New Zerobot Malware Exploits Over 21 Vulnerabilities in Zyxel Firewalls, F5 BIG-IP Firewalls, and D-Link Routers*

Compromised WordPress plugins redirect website visitors to push notification scams*

The attacker made over 6,000 attempts to hack the ICMR server*

The Vice Society ransomware gang attacked more than 30 schools in 2022*

Hackers broke into CloudSEK's Confluence server with stolen employee credentials*

Attackers found a vulnerability in the SiriusXM platform to remotely unlock and start cars*

Amnesty International Canada was allegedly the target of a cyber attack from Beijing*

Researchers have discovered the largest dark web "in the box"*

Antwerp's digital partner suffered a cyberattack that disrupted the city's digital services*

VTB Bank, the second largest financial institution in Russia, suffers a massive DDoS attack*

Hackers sell personal data of 150,000 patients at Sree Saran Medical Center in Tamil Nadu*

The André Mignot University Hospital in France suffers a ransomware attack*

A chain of three harmless Linux vulnerabilities could allow hackers to gain full root privileges*

A vulnerability in IBM Cloud databases for PostgreSQL allows unauthorized access*

Researchers found malicious Android apps with over two million downloads in the Google Play Store*

New Zealand health insurer Accuro suffered a cyberattack that compromised the data of 34,000 customers*

Group of North Korean hackers using new and fake crypto applications to break into networks and steal cryptocurrency*

Google patches a ninth zero-day vulnerability in its Chrome browser update*

Previously undocumented data wiper CryWiper masquerades as ransomware*

Attackers target unpatched Redis servers to exclude new Redigo* backdoors

Various platform certificates used by OEM Android device vendors to digitally sign malware*

Colombian healthcare provider Keralty suffers a ransomware attack that disrupts its operations*

Schoolyard Bully malware infected over 300,000 devices to harvest Facebook account credentials*

New malware-as-a-service DuckLogs used by thousands of cybercriminals*

Researchers have discovered that some NPM tools fail to detect security vulnerabilities*

NVIDIA fixes critical GPU display driver vulnerabilities in Windows and Linux*

North Korean attackers use new Dolphin gate to spy on South Korean targets*

Google released Chrome 108 to fix serious memory vulnerabilities*

Hackers broke into GoTo's development environment and cloud storage; Impact on your LastPass affiliate*

Researchers found outdated OpenSSL used on devices from Dell, HP, and Lenovo*

Hive ransomware claims responsibility for attacking Guilford College in North Carolina*

Attackers Using Trigona Ransomware Increase Attacks Worldwide*

Malicious Android app "Symoo" detected with 100,000 installs on Google Play Store*

Lanner has patched over a dozen vulnerabilities in BMC firmware*

Southampton County, Virginia, reported theft of people's personal information following a ransomware attack*

Acer releases patches for high severity vulnerabilities that allow you to disable Secure Boot*

Fraudsters used the FC Barcelona website domain for a third-party scam campaign*

More than 5.4 million Twitter user records are freely available on a hacking forum*

Researchers have discovered a critical remote code execution vulnerability in Windows Internet Key Exchange*

Ransomware group targets Belgian community but attacks police*

New ransomware attacks against Ukrainian organizations linked to the Russian group Sandworm*

Google patches a zero-day vulnerability in its Chrome browser update*

Vice Society Ransomware Group is responsible for the attack on Cincinnati State College

Hackers Target Windows Gamers with Miners and Information Stealers via Fake MSI Afterburner*

Researchers discovered a new stealthy variant of RansomExx ransomware developed using the Rust* programming language

Hackers have injected spyware into new variants of the SoftVPN and OpenVPN Trojan software*

Millions of Android devices require patches for ARM Mali* GPU vulnerabilities

Ducktail threat actors targeting Facebook business accounts via WhatsApp*

Security researchers have revealed a cross-tenant vulnerability in the AWS AppSync* service

Pro-Russian hackers claim responsibility for DDoS attack on European Parliament website*

AIIMS Server in Delhi Suffers Cyber ​​Attack Disrupting Patient Care*

An issue with the Sophos and McAfee scan engines causes the Cisco Secure Email Gateway filter to be bypassed*

Researchers found a sudden increase in WM-themed phishing emails*

Sharkbot Banking Trojan Distributed Via Fake Android File Managers*

Threat actors targeted discontinued Boa web servers to infiltrate powerful organizations*

Over 1,500 Mobile Apps Lose Algolia API Keys*

Google Chrome Data Stealer Extension "VenomSoftX" Used to Steal Cryptocurrency and Passwords*

Researchers have found that cybercriminals are increasingly adopting Aurora Infostealer malware into their operations*

Attackers trying to bypass 2FA of crypto exchange platforms via Team Viewer and fake support chat*

Daixin Team hacker group claims to have stolen 5 million AirAsia passenger and staff data*

DraftKings Clients Suffer Credential Stuffing Attack and Lose $300,000*

New AXLocker ransomware group steals Discord accounts of infected users*

Attackers use Google Ads to spread Royal* ransomware

New variants of LodaRAT malware are deployed alongside other sophisticated malware*

Hackers exploit Windows zero-day vulnerability to deploy QBot* malware

Indian Central Depository Services Limited announces that its network has been compromised by malware*

More than 22,000 students targeted by credential phishing attacks impersonating Instagram*

Critical Omron PLC vulnerability exploited by sophisticated malware targeting industrial control systems*

Atlassian fixes critical vulnerabilities in Crowd Server and Bitbucket Server*

Samba fixes vulnerability that leads to DoS attacks and remote code execution*

Chinese hackers deliver custom malware to government organizations via Google Drive*

The previously unknown ARCrypter ransomware is expanding its attacks around the world*

Researchers discovered a new version of RapperBot malware targeting game servers*

Investigators discovered a phishing kit posing as well-known brands to target US consumers*

Attackers exploit a DLL hijacking bug in the Windows 10 Control Panel to infect systems*

Disneyland Cybercrime Group uses Punycode to counterfeit popular bank brands.

F5 fixes various vulnerabilities and security issues in its products*

CISA revealed that the federal agency was hacked by Iranian hackers using the Log4Shell exploit*

Pro-Russian Hackers Claim Responsibility For DDoS Attack On FBI Websites*

Mozilla announced the release of Firefox 107 with high-impact vulnerability patches*

Hundreds of Amazon RDS instances expose users' personal information*

PCspooF vulnerability in TTE affecting network technology used in aircraft and spacecraft*

State-sponsored Chinese hacker group that targets government and defense organizations in Asian countries*

Security researchers revealed details of vulnerabilities in Zendesk Analytics Service*

Spotify's backstage developer platform is vulnerable to a critical RCE bug*

Researchers discover a new version of DTrack Backdoor aimed at European organizations*

Researchers discover new malware KmsdBot that mines cryptocurrency and launches DDoS attacks*

Malicious for-profit group "Fangxiao" uses 42,000 websites for brand identity fraud*

Researchers have identified an information disclosure vulnerability in Aiphone* intercom products

Russian hackers infected Ukrainian organizations with new Somnia ransomware*

New phishing campaign targets taxpayers in Spain to steal bank information*

Cisco fixes 33 security vulnerabilities in its enterprise firewall products*

Foxit fixes four code execution vulnerabilities in its PDF reader*

A new blackmail scam threatens to leak confidential information from websites around the world*

A 24 hour outage made Royal Mail tracking unavailable*

Rise Up, a Canadian grocery retail giant affected by Black Basta Ransomware*

New BadBazaar Android Spyware Linked to Chinese Cyberspies*

Two malicious Android apps distributing the Xenomorph* banking Trojan have been detected

US seizes 18 domains used to recruit money mules*

New version of IceXLoader malware released by phishing emails*

Workok Threat Group hides new data-stealing malware in PNG files*

Spymax RAT Android Malware Targets Indian Armed Forces*

Lenovo fixes high severity vulnerabilities that allow attackers to disable UEFI Secure Boot*

New StrelaStealer data-stealing malware targets Outlook and Thunderbird* accounts

Intel and AMD address multiple security vulnerabilities in their Tuesday updates*

SAP has released patches for critical vulnerabilities in BusinessObjects and SAPUI5*

Massive Google SEO Poisoning Campaign Hacks 15,000 Websites*

LockBit 3.0 Ransomware spreads Amadey Bot malware via phishing emails*

Cloud9 Chrome Botnet uses malicious extensions to remotely control victims' browsers*

Citrix fixes a critical authentication bypass vulnerability in its ADC and Gateway products*

VMware fixes three critical vulnerabilities in Workspace ONE Assist*

Siemens and Schneider Electric fix multiple security vulnerabilities in their products*

SocGholish Operators expands its malware preparation infrastructure for counter-defenders*

Researchers found that Security Scanner URLScan accidentally exposes URLs and sensitive data*

Cyberattack on PNORS technology leads to breach of Victorian schoolboy's medical records*

The largest Canadian food company, Maple Leaf Foods, was exposed to a cyberattack*

Robin Banks Phishing-as-a-Service (PhaaS) platform is back to steal bank accounts*

Hackers use Microsoft Dynamic 365 voice of customer for phishing attack*

CISA warns of critical vulnerabilities in three ICS* software

Apple releases Xcode update to fix Git* vulnerabilities

Verified Twitter users point to a new phishing attack*

New Crimson Kingsnake Group Poses as Law Firm in BEC Attacks Against Commercial Email Compromise*

Indian government officials are the target of a new malware campaign*

Users around the world are having trouble accessing Twitter*

RomCom RAT malware distributed via websites mimics SolarWinds NPM, KeePass, Veeam Software*

LockBit ransomware gang claims cyberattack on German manufacturer Continental*

Cisco has patched high-severity vulnerabilities in email, identity, and web security products*

The ALMA radio telescope suffers a cyberattack that forces it to shut down all its operations*

Splunk fixes 9 major vulnerabilities in its enterprise product*

Fortinet has patched 6 high-severity vulnerabilities across its various products*

Researchers have discovered multiple vulnerabilities in Checkmk's IT infrastructure monitoring software*

Threat actor distributing malware to hundreds of US news sites*

Malicious PyPI packets found to drop "W4SP" information-stealing malware *

The infamous Emotet malware has resumed operations after a five-month hiatus*

Vodafone Italy has announced a data breach after its retailer FourB suffered a cyberattack*

Hacker steals 130 GitHub repos from Dropbox in data breach*

Malicious VPN app infects Android users with SandStrike* spyware

Malicious Android apps downloaded over a million times and detected in the Google Play Store*

OpenSSL releases patches to fix two serious vulnerabilities in the open source library*

Microsoft has patched a critical RCE vulnerability found in Azure Cosmos DB Jupyter notebooks*

Air New Zealand hack compromises multiple user accounts*

Threat actors abusing antivirus software to spread LODEINFO malware targeting Japanese organizations*

Australian defense company suffers ransomware attack*

Researchers have discovered a vulnerability in the Galaxy Store app for Samsung*

Label Printing Giant Multi-Color Corporation confirms data breach*

Bed Bath & Beyond Inc suffers a data breach*

US bank exposes data breach affecting 11,000 customers*

Veja Tickets suffers a major card data breach that lasts 2.5 years*

Michigan Medicine suffered a data breach affecting 33,000 patients*

ConnectWise fixes RCE bug that left thousands of servers vulnerable to attack*

Twilio, a cloud communications company, announces another data breach*

Google patches the seventh zero-day vulnerability in its Chrome browser*

Cyberattack on Aurubis forces shutdown of IT systems*

Researchers discover Android Malware Dropper on Google Play with 130,000 installations*

Threat actors using Clop ransomware to encrypt devices previously infected with the Raspberry Robin worm*

The latest Fodcha ransomware botnet has appeared*

Drinik Android malware masquerades as an official tax administration tool, targeting users from 18 Indian banks*

Australian Clinical Labs has announced a data breach after months of data leaks*

Microsoft fixed sync issue in vulnerable drivers blacklist*

Medibank confirms that hackers accessed customer personal information during a ransomware attack*

New version of FurBall Android malware to spy on Iranian citizens*

Aurora Health (AAH) Lawyer Suffers a Data Breach That Exposed the Data of 3 Million Patients*

Ursnif malware goes from stealing bank accounts to accessing computers*

Hackers Exploit Microsoft Azure SFX Vulnerability to Hijack Service Fabric* Clusters

Apache has fixed the RCE vulnerability in its Commons* open source text library

WordPress patched 16 vulnerabilities with security update 6.0.3*

Researchers have discovered a previously undetected PowerShell backdoor that infected more than 60 users*

Microsoft suffers a data breach due to a misconfigured server exposing customer information online*

Cobalt Strike Releases Out-of-Band Security Update for Critical RCE Vulnerability*

DiceyF attackers use GamePlayerFramework in attacks on Asian casinos*

Hong Kong government agency network targeted by hackers in year-long campaign*

Ransom Cartel Ransomware has similar features to Notorious REvil Ransomware*

Black Basta Ransomware Gang Empregando Qakbot para eliminar Brute Ratel C4 Framework*

MyDeal suffers from a data breach in which 2.2 million personal customer details were stolen*

Australia's largest health insurer, Medibank, suffers ransomware attack*

A zero-day vulnerability in Windows Mark of the Web gets a free unofficial patch*

End of Life of 45,000+ VMware ESXi Servers*

Venus ransomware encrypts Windows devices through publicly accessible remote desktop services*

New PHP version of Ducktail malware targets business Facebook accounts*

Zimbra zero-day vulnerability used to compromise more than 900 servers*

Microsoft researchers discovered a new prestigious ransomware targeting organizations in Ukraine and Poland*

Colombian government suffers data breach exposing undercover Australian police officers*

Tata Power, the largest electricity company in India, affected by a cyber attack*

Microsoft Office 365 may disclose message content due to vulnerable email encryption mode*

Hackers Distribute Copybara Android Banking Malware Using TOAD Tactics*

Magniber Ransomware targets Windows users via fake antivirus and security updates*

A critical flaw in Siemens SIMATIC PLCs allows hackers to steal cryptographic keys*

Cloudflare Mitigates Largest DDoS Attack on Minecraft* Gaming Platform Server

Windows, macOS and Linux systems targeted by the new Alchemist Attack Framework*

Scammers misuse Google Forms in new Covid-19-themed phishing campaign

Unofficial WhatsApp application "YoWhatsApp" steals user account*

Hackers create font clone packs to trick developers into attacking the supply chain*

Aruba fixed critical authentication bypass and RCE errors in its EdgeConnect Enterprise Orchestrator*

POLONIUM Threat Group Uses Creepy Malware in Cyber ​​Espionage Against Israeli Organizations*

Microsoft Exchange servers targeted to remove Lockbit ransomware*

Researchers warn of a critical RCE vulnerability in the VM2* sandbox library

Adobe fixes critical bugs in ColdFusion, Adobe Commerce and other products*

Microsoft Patch Tuesday Security Advisory: Late 2022*

Caffeine, a phishing platform as a service, makes it easy to launch phishing attacks*

Researchers discover new Emotet* delivery and evasion techniques

Toyota Passkey falsely disclosed on GitHub and customer details exposed*

Pro-Russian Hackers Take Down US Airport Websites With Large-Scale DDoS Attacks*

Android security updates for October patches Critical vulnerabilities*

Hackers Target Solana Cryptocurrency Holders Through Fake Ghost Security Update

Dark Web Carding Market BidenCash publishes details of 1.2 million stolen credit cards*

Intel Alder Lake* UEFI Firmware Source Code Leaked

Callback scammers amplify their social engineering techniques*

Taiwanese chipmaker 'ADATA' dismisses recent RansomHouse data breach claims*

Fortinet fixes critical authentication bypass bug in FortiGate firewalls and FortiProxy* web proxies

Threat actors actively exploiting a zero-day RCE vulnerability in Zimbra Collaboration Suite*

Eternity Hackers Group offers new LilithBot Malware-as-a-Service through Telegram Channel*

Details of newly patched macOS* Archive Utility Vulnerability

Telstra's third-party platform suffers a breach exposing its employees' information*

A new bug in Linux kernel 5.19.12 that crashes the screens of Intel* laptops

Hackers break into the City of Tucson's network and steal information from more than 125,000 people*

Researchers discover a new "Maggie" backdoor targeting multiple Microsoft SQL* servers

Consumer bank Chase Bank suffers outage affecting UK customers*

Trojanized Comm100 live chat app to spread malware in supply chain attacks*

US Alert: Hackers use new custom malware to steal data from US defense organization*

Hackers inject malicious JavaScript into scammers' crypto websites to steal crypto funds*

Popular Chinese-language YouTube channel distributing malicious Tor browser installer*

A high severity vulnerability in the Packagist PHP repository could lead to a supply chain attack*

Cheerscrypt, a Linux-based ransomware associated with Chinese hackers*

Researchers warn that Microsoft Exchange zero-day mitigation can be bypassed for on-premises servers*

Hackers trying to exploit exploits use Microsoft Exchange ProxyNotShell, not GitHub*

BlackCat added NJVC to its data leak site*

Threat actors abusing web browser application mode to create desktop phishing pages*

After Data Breach, "DNS" Retail Chain Confirms Data Breach*

CISA adds critical vulnerabilities in Bitbucket Server and Microsoft Exchange to the Known Exploited Vulnerability (KEV) catalog*

Hackers exploit vulnerable WordPress sites to inject SolarMarker* malware

An unidentified attacker has hacked into Shangri-La Hotel Group's customer database*

Investigators uncovered several fake LinkedIn profiles for CISOs from large organizations*

Cisco has patched several high severity vulnerabilities in its network software*

Lazarus attackers use new BYOVD technique in cyber attacks*

Scammers launch cobalt attack flares through fake US government job ads*

Microsoft confirms that new zero-day bugs in Exchange are being exploited wildly*

Microsoft Spots Lazarus Hackers Using Open Source Software*

Indian government platform in Swachh city suffers data breach*

Researchers have discovered new zero-day vulnerabilities in Microsoft Exchange that are being actively exploited for attacks*

Hackers Use New Malware to Defraud VMware ESXi Servers*

Hackers exploit vulnerabilities in Ethernet VLAN stacking to launch DoS and MiTM* attacks

Investigators Uncover New Covert Attack Campaign Targeting Military Companies*

World's Leading Business Media Brand Fast Company Under Attack by Attackers*

New Chaos malware launches DDoS attacks on Windows and Linux* devices

The Internal Revenue Service has warned Americans about the huge increase in smishing attacks*

Cybercriminals distribute macOS malware through lucrative job offers posing as Crypto.com*

Optus suffers a data breach resulting in the publication of 10,200 customer records*

NullMixer malware distributed via malicious websites posing as cracked software*

Hackers spread Graphite malware using a new code execution technique*

New information-stealing malware, Erbium, targets popular video games with fake cracks and cheats*

Tibetan companies attacked by Chinese hackers with new LOWZERO* backdoor

WhatsApp fixed 2 major zero-day bugs affecting iOS and Android versions*

Researchers found the "Scylla" ad fraud campaign on the Google Play Store and Apple Store*

Attack on Universities, Telecom Companies and ISPs Discovered by Researchers*

Android users attacked by malware that steals information about bogus rewards apps for Indian banks*

Several npm packages released by crypto exchanges were compromised*

Microsoft Endpoint Configuration Manager phishing vulnerability fixed by Microsoft*

Microsoft SQL Server targeted by new TargetCompany* ransomware attacks

A new RCE firewall bug exploited by attackers in Sophos Firewall; Repair available*

A global blackout affects YouTube live broadcasts*

GitHub users target a new phishing campaign*

Threat actors actively exploiting critical Magento vulnerabilities*

Threat actor hacked into Microsoft Exchange servers to implement a phishing campaign*

CISA adds a critical RCE bug in ManageEngine to its catalog of known exploited vulnerabilities*

Threat actors use LinkedIn smart links to avoid detection in a phishing campaign*

More than 39,000 unauthenticated Redis servers are exposed to the Internet*

CISA Warns of Several Vulnerabilities Discovered in Dataprobe Power Distribution Units*

15-year-old Python vulnerability affects more than 350,000 open source repositories*

Oracle fixed a critical vulnerability in its cloud infrastructure*

Hackers steal $162 million in digital assets from cryptocurrency trading firm Wintermute*

Attackers broke into the 2K gaming support platform to infect gamers with malware*

Security company Imperva stopped a long-running DDoS attack with 25.3 billion requests*

Hive ransomware claimed responsibility for the attack on the New York Racing Association*

Attack on fintech Revolut reveals data of 50,000 users*

Microsoft and VMware Alert on Chromeloader* Malware Campaign

US government agencies targeted by sophisticated lures in phishing attacks*

American Airlines suffered a data breach that exposed employee and customer information*

Uber Sues Contractors For Non-Compliance, Claims Threat Group Lapsus$ Was Behind Cyberattack*

LastPass development systems were accessed for four days in a data breach*

A hacker claims to have stolen the source code and assets of GTA 5 and 6*

Security researchers have discovered new attacks by the notorious hacker group TeamTNT*

North Korean attackers targeted media companies with the malicious putty ssh client*

BlackCat and Quantum ransomware groups use Emotet malware to deliver payloads*

A ransomware attack causes a data breach at the New York Ambulance Service*

A hacker is selling the personal information of 219,000 Starbucks customers in Singapore*

Organizations must patch Stuxnet vulnerabilities, says CISA*

Uber's internal systems were breached, revealing vulnerability reports*

Threat actors spread a new malware package via YouTube*

Akamai mitigates another record DDoS attack in Europe*

Hive ransomware takes responsibility for attack on Bell Tech Solutions*

Phishing campaign targeting Greek taxpayers to steal victims' passwords*

Scammers use Queen's Death to steal users' Microsoft credentials in phishing attacks*

Lenovo has fixed several BIOS vulnerabilities in the September 2022 security updates*

FBI Warns of Hackers Targeting Healthcare Payment Processors*

Hackers target nuclear and genomics researchers through multi-person phishing techniques*

Hackers Compromise Software Vendor Magento in Supply Chain Attack*

Cyber ​​espionage attacks on Asian governments and organizations*

WPGateway Zero-Day Vulnerability Actively Exploited in the Wild*

Actively Exploited Apex One RCE Vulnerability, Warns Trend Micro*

Microsoft Patchday Security Advisory: September 2022*

Lorenz Ransomware Gang Exploits Vulnerability in Mitel MiVoice VOIP* Device

GhostSec hacktivist gang claims responsibility for compromising 55 PLC Berghof in Israel*

Researchers Discover New “Zanubis” Android Banking Trojan Targeting Peruvian Banks*

Steam Community Accounts Get Hacked by New Browser-in-Browser Attacks*

Apple has patched the actively exploited zero-day vulnerability in its security updates*

US Rental Company U-Haul Confirms Data Breach, Customer's Driver's License Information Revealed*

Ransomware developers use a new encryption technique to evade detection*

Six major HP firmware vulnerabilities fixed in over a year*

Administrators Urged to Patch High Severity Vulnerability in ConnectWise Automate Tool*

Lantern malware abuses WeTransfer file-sharing service for phishing attacks*

Albania suffers another cyberattack attributed to Iran*

5 Million Zero-Day Attacks Blocked in BackupBuddy WordPress Plugin*

Bumblebee malware now uses a new stealth infection technique*

New GIFShell attack technique to create a reverse shell with Microsoft Teams GIFs*

North Korean group APT Lazarus targets US energy sector*

Iranian threat group DEV-0270 abuses BitLocker functionality to encrypt Windows* systems

Agency of the General Staff of the Portuguese Armed Forces suffers cyber attack*

Threat actors found after initial compromise with PowerShell Empire*

New Moisha ransomware actively targets multiple organizations*

Attackers Hack 200,000 The North Face Accounts in Credential Stuffing Attack*

APT42 threat group distributing custom Android spyware via SMS phishing campaigns*

Cisco refuses to patch zero-day vulnerability in EoL routers*

HP fixes a fatal error in its Support Assistant tool*

New Shikitega Linux malware avoids detection with multi-stage deployment*

Ransomware Attack Hits Second Largest US School District Unified Los Angeles*

Mirai Variant Moobot Botnet Targets Vulnerable D-Link Routers*

InterContinental Hotels Group affected by a cyber attack that disrupts IT systems*

Zyxel has patched a new critical RCE vulnerability in NAS firmware security updates*

Ransomware attacks abuse Genshin Impact Game's anti-cheat driver to kill antivirus*

EvilProxy phishing toolkit allows hackers to steal authentication tokens to bypass MFA*

TikTok denies security breach claims and says leaked data has nothing to do with it*

QNAP Fixes Photo Station Zero-Day Vulnerability Exploited in Ransomware Attacks* Deadbolt

Italy's energy sector affected by BlackCat Ransomware Group*

NFL San Francisco 49ers acknowledge data breach; Information stolen from 20,000 people*

French clothing store Damart attacked by Hive ransomware; $2 million ransom demanded*

SharkBot malware strikes back to steal credentials*

Threat actors stole victim data using Prynt Stealer Backdoor*

The IRS accidentally leaked personal information of 120,000 taxpayers*

Google Chrome emergency update fixes a new zero-day vulnerability*

Samsung suffers a data breach; Personal data of leaked users*

Chilean government agency hit by new ransomware attack*

New Instagram Phishing Campaign Targets Thousands of Accounts With Blue Badge Offer*

More than 1,000 iOS apps detected with AWS credential leaks*

Famous social networking platform Twitter suffers outage, thousands of users reported connection problems*

Ragnar Locker ransomware gang claims cyberattack against airline TAP Air Portugal*

Malicious Google Chrome browser extensions downloaded by 1.4 million users*

A vulnerability in the Android app TikTok allows hackers to hijack accounts*

A new bug in Google Chrome allows websites to write to the clipboard without user consent*

Apple has patched an iOS zero-day vulnerability that is actively exploited in older iPhone models*

Microsoft Azure outage takes Ubuntu virtual machines offline worldwide*

Russian streaming platform START announces a data breach*

Threat actors hide malware in images from the James Webb telescope*

Chinese threat actors are actively targeting the Australian government via ScanBox malware*

New Golang-based 'Agenda' ransomware targeting educational and healthcare institutions*

Vodafone Idea denies data breach and reveals call details of 20 million customers*

Baker & Taylor, the largest provider of library solutions affected by ransomware attacks*

2.5M US Student Loan Account Details Exposed in Nelnet Data Breach*

Akasa Air data breach exposes passengers' personal information*

Russian attackers use new malware to hijack ADFS*

Iranian Hackers Use Log4j 2 Vulnerabilities to Attack Israeli Companies*

CISA has added 10 new actively exploited vulnerabilities to its catalog*

Threat actors extracted LastPass source code using a compromised developer account*

DoorDash service reveals new data breach related to Twilio hack*

Threat actors use fake Cthulhu World P2E project to distribute data-stealing malware*

A critical RCE vulnerability discovered in Atlassian Bitbucket Server*

India database leak reveals bank and federal police details*

Researchers found that more than 130 entities were affected by the Okta* phishing attack

Canadian manufacturer Bombardier Recreational Products (BRP) suffers a cyberattack*

Phishing campaign targets PyPI maintainers and leads to hijacking of PyPI packages*

Cisco is patching two high-severity vulnerabilities affecting its Nexus* Enterprise Series switches

Mozilla fixes various vulnerabilities in Firefox and Thunderbird* products

New SPS Malicious Attack Weaponizes SPS for Hacking Enterprise and OT Networks*

Researchers found a new BEC campaign that uses the MITM attack to monitor Microsoft 365 accounts*

Plex warns users to reset passwords after detecting a data breach*

IBM fixes high severity vulnerabilities in its MQ* messaging middleware

Dominican Republic government agency suffers Quantum* ransomware attack

Researchers reveal 8-year-old DirtyCred vulnerability in Linux kernel*

Google researchers have identified Iranian hackers using a new tool to steal victims' email data*

A hospital affected by a ransomware attack in France demands a ransom of 10 million dollars*

Attackers targeted hotels and travel companies with phishing campaigns*

Greek natural gas operator DESFA suffers a cyberattack*

GitLab fixes a critical RCE vulnerability affecting its Community and Enterprise edition*

Researchers find RTLS systems vulnerable to MiTM attacks and location manipulation*

Scammers used a compromised PayPal account to send phishing invoices to PayPal users*

Novant Health Privacy Breach Disclosed; Affects 1.3 million patient records*

Researchers discover new "Escanor" malware weaponized in Microsoft Office documents and Adobe PDF*

Grandoreiro detected banking malware targeting employees of Spanish and Mexican manufacturers*

CISA warned of a critical SAP vulnerability being exploited in the wild*

Researchers discovered 241 NPM and Python packages that Cryptominer dropped on Linux* systems

Attackers infect vulnerable WordPress sites to distribute RAT and Trojan malware*

FBI Alert: Attackers Use Proxy and Configurations in Credential Stuffing Attacks*

Attackers compromised full-byte Bitcoin ATM servers with a zero-day bug*

Chinese group APT41 will target 13 companies worldwide in 2021*

Amazon fixes a critical bug in its Ring app*

Cozy Bear attackers actively target Microsoft 365 users*

Researchers describe elusive DarkTortilla Crypter used to spread malware*

Threat actors using the Bumblebee Malware Loader to compromise Active Directory*

Cisco Patches High Severity Vulnerability in Secure Web Appliance*

Google blocked the largest HTTPS DDoS attack in history*

A new MailChimp data breach exposes the email addresses of DigitalOcean customers*

North Korean attackers infect candidates with macOS* malware

Malicious browser extensions downloaded by over 7 million people since 2020*

Google released a security update to fix a zero-day bug in Chrome browser*

Apple fixes two actively exploited vulnerabilities in security updates for iPhone, iPad, and macOS*

Clop ransomware gang damages UK water company, but wrongly attributes victims*

BharatPay suffers a data breach, exposing personal information and transaction data of 37,000 online users*

Hacker loots 20,000 items worth $6 million from CS:GO* trading site

Researchers discovered AEPIC leaks and SQUIP bugs in Intel and AMD processors*

Twilio data breach exposed the phone numbers of 1,900 Signal users*

Behavioral Health Group Notifies Clients of Data Breach Affecting 198,000 Patients*

Malicious PyPi packages targeting Counter-Strike servers with DDOS attacks*

Judiciary of Córdoba suffers ransomware attack by Play*

Security researchers have discovered a vulnerability in UEFI bootloaders signed by Microsoft*

New SOVA malware variant now encrypts Android files*

Realtek eCos SDK vulnerability exposes multiple routers to remote attacks*

CISA and FBI Alerts on Zeppelin* Ransomware Attacks

VLC Media Player Banned in India, Banned Website and Download Link*

A malicious MiMi chat application launches a new rshell backdoor on Mac and Linux systems*

Researchers have discovered vulnerabilities in Xiaomi smartphones with MediaTek chips*

Scammers abusing Google and Microsoft Azure web app websites to steal cryptocurrency wallets*

Zimbra Authentication Bypass Vulnerability Actively Exploited to Break Over 1000+ Mail Servers*

Security researchers identify critical flaws in Device42's IT asset management platform*

Threat actor deploys new RAT malware in Cuba ransomware operation*

Cisco confirms that Yanluowang Ransomware Group hacked its network in May 2022*

Cybersecurity firm discovers vulnerabilities in Indian insurance policy bazaar*

Cisco fixed a vulnerability that allowed RSA private keys to be stolen on ASA and FTD devices*

Service Outage Linked Microsoft to Cisco Meraki Firewall IDR False Positive Alert*

Palo Alto Networks has patched a vulnerability discovered in the PAN-OS* firewall configuration

IBM patches multiple vulnerabilities in cloud, voice and other security products*

CheckPoint researchers discovered 10 malicious Python packages that steal developer credentials*

CISA Warns Administrators About UnRAR and Windows Vulnerabilities Exploited in the Wild*

Cloudflare is also affected by the threat actors responsible for the Twilio data leaks*

New "Dracarys" Android Spyware Is Distributed Via Fake Signal Messaging App*

Microsoft Patchday Security Advisory: August 2022*

Chinese attackers used new malware to sneak behind the doors of government and defense organizations*

Cloud communications company Twilio announces data breach*

New Orchard Botnet used Bitcoin founder's account information to create malicious domains*

Email marketing company Klaviyo suffers data breach*

A cyber attack forces the multinational retailer 7-Eleven to close all its stores in Denmark*

Threat actors abuse Hostinger's domain preview feature in phishing attacks*

F5 fixes 21 vulnerabilities in its quarterly security updates*

North Korean attackers are posing as the world's largest cryptocurrency company, Coinbase, to target the fintech industry*

Hackers abuse Snapchat and American Express websites in phishing attacks*

New "GwisinLocker" ransomware encrypts vulnerable ESXi servers*

Slack resets user passwords after bug reveals encrypted passwords*

Akamai reports largest DDoS attack in history with 659.6 million packets per second*

Cyberattack on UK managed service provider causes NHS disruption*

A zero-day bug exposes 5.4 million Twitter accounts*

The Association of German Chambers of Industry and Commerce (DIHK) affected by a cyber attack*

More than 280 million sensitive data of Indian citizens exposed online*

CISA urges users to patch vulnerable Zimbra email suites*

First Choice Community Health Care affected by a data breach*

New phishing campaign targets Microsoft email services to launch BEC* attacks

Researchers discovered a critical vulnerability affecting 29 models of DrayTek Vigor* routers

Fixed vulnerability in WordPress Download Manager plugin hosted on 100,000+ websites*

Researchers discovered a new "ParseThru" bug affecting Golang-based applications*

NVIDIA fixed several security vulnerabilities in the GeForce security update*

Google Patched Multiple Vulnerabilities in Chrome Browser Updates*

Cisco fixes critical security vulnerabilities in its VPN routers*

CERT-In identifies high severity vulnerabilities in Mac, iPhone, iPad, ChromeOS and Firefox* browsers

Attackers stole Wiseasy employees' passwords to access nearly 140,000 Wiseasy payment terminals*

VMware has patched a critical authentication bypass vulnerability that affects multiple products*

Taiwanese websites suffer from DDoS attacks ahead of House Speaker Nancy Pelosis's visit*

Google published its security bulletin for Android operating systems in August 2022*

Semikron, the leading German semiconductor manufacturer, suffers a ransomware attack*

GitHub's vulnerability actions workflow allows you to run commands*

More than 3,200 apps are losing Twitter API keys that allow hackers to hijack users' Twitter accounts*

Security researchers have discovered a random file deletion bug in Directory Traversal in CompleteFTP software*

Cybersecurity Firm Halborn Warns of New MetaMask* Phishing Campaign

Microsoft reports Outlook errors when reading Uber receipt emails*

European pipeline operator “Creos Luxembourg” affected by BlackCat* ransomware attack

Subzero malware exploiting vulnerabilities in Windows and Adobe*

North Korean threat actor uses malicious browser extensions to spy on email accounts*

A security researcher discovered XSS bugs in Google Cloud, DevSite and Google Play*

LockBit ransomware hackers abuse Windows Defender to upload Cobalt Strike*

Investigators uncover a massive network of 11,000 fake investment sites targeting Europe*

OneTouchPoint suffers a data breach that affects 30 health centers*

Android adware apps are promoted by Facebook Ads*

The Federal Communications Commission has warned Americans about the increase in smishing attacks*

Malicious Android apps deliver banking malware to users' devices via the Google Play Store*.

LibreOffice fixes various security vulnerabilities*

Microsoft 365 is experiencing an outage impacting the North America admin center*

Threat actors using hacked Microsoft SQL servers as proxy servers to steal bandwidth*

Hackers steal payment card information from Discord users with malicious npm packages*

Cloud services shut down by a Kansas MSP to prevent cyberattacks*

Hackers exploit vulnerabilities in Nuki Smart Lock to open ports*

New "Robin Banks" phishing service targeting clients of financial organizations*

Threat Agents Hacking Microsoft Exchange Servers Using IIS* Backdoors

New "Ducktail" Phishing Campaign for LinkedIn Experts*

Hackers use malware and adware to infect 28 apps from the Google Play Store*

Threat Actors Hack Blockchain Music Platform "Audius"; $6 million stolen*

Hackers using WebAssembly-encoded cryptominers to evade detection*

New version of Amadey malware distributed through software cracks in SmokeLoader* campaign

Hackers use GoMet backdoor to attack Ukrainian software company*

FileWave MDM vulnerabilities expose 1,000 organizations to remote attacks*

Researchers found CosmicStrand UEFI malware on Gigabyte and ASUS* motherboards

A zero-day vulnerability in PrestaShop is actively exploited to steal customer payment information*

Policybazaar confirms a network breach in its IT systems*

Critical bug fixed by Atlassian allows hackers to log into unpatched Confluence and Data Center servers*

Attackers use DLL sideloading technique to drop QBot malware onto user systems*

Zyxel releases security patches to address vulnerabilities in its firewall products*

Scammers Target Punjab State Power Corporation Limited (PSPCL) Consumers in New Online Scam*

An 'evil' threat actor claimed to have stolen the account details of 5.4 million Twitter users*

Russian attackers break into Ukrainian news outlet TAVR Media to spread fake news about President Volodymyr Zelenskyy*

Konni RAT malware used by North Korean hackers to attack European nations*

SonicWall Instantly Fixes Critical SQL Injection Vulnerability*

Hackers target new Linux "Lightning Framework" malware to install backdoors and rootkits*

Hackers exploited fatal Google Chrome bug to infect journalists*

'8220 Gang' Crypto Mining Group Targets Vulnerabilities in Linux* and Cloud Applications

Google Rouge "YouTube" Ad Redirects Users to Windows Support Scam*

Oracle fixes 349 new vulnerabilities in its July 2022 critical patch update*

Apple has patched multiple vulnerabilities across all of its devices*

A new CloudMensis spyware aimed at Apple macOS users*

A new cryptocurrency scam tricks users with a fake offer from Nvidia*

Russian SVR attackers use Google Drive cloud services to evade detection*

Belgium claims Chinese threat groups are targets of its defense and interior ministries*

Attackers steal 50,000 payment card details from 300 US restaurants in web cloning campaigns*

Knauf, a giant German building materials manufacturer hit by Black Basta* ransomware attack

FBI alerts on fraudulent cryptocurrency apps used to deceive US investors*

Cleartrip, owned by Flipkart, suffers a data breach*

Albanian government suffers massive cyberattack and is forced to shut down websites and online services*

Windows Network File System vulnerability leads to arbitrary code execution*

Notorious Pegasus spyware infected smartphones of pro-democracy activists in Thailand*

Threat actors compromised popular NFT site Premint and stole nearly $375,000 worth of NFTs*

Cyberattacked Israel Ministry of Health website blocked access to users from abroad*

Microsoft 365 service outage affects Outlook and Exchange Online*

Qakbot Trojan malware increased its infection rate with new techniques*

Juniper fixes critical vulnerabilities in Junos OS and Contrail* network products

Attackers impersonating GitHub leak metadata to mask malicious GitHub repositories*

Colorado Springs Utilities notified customers after detecting a data breach*

Researchers discovered a new Netwrix Auditor bug that allows hackers to compromise the Active Directory environment*

Researchers reveal terms of service after publication on Google Chrome WebGPU*

Threat actors using Digium Phone software to actively exploit VoIP servers*

Threat actors actively exploit vulnerability in modern WPBakery page builder plugins*

Threat actors targeting industrial operators using Trojan malware and a password cracking ecosystem*

Mantis Botnet DDoS Attacks Affect Hundreds of Cloudflare Users*

Microsoft has attributed the Holy Ghost ransomware to North Korean attackers*

Pakistani Hackers Target Indian Students in New Phishing Email Campaign*

Hackers Target PayPal Users Using Phishing Kits Installed on Hacked WordPress Websites*

Nation-state hacker groups target journalists in spying and malware campaigns*

New Retbleed Speculative Execution Attacks Affect Intel and AMD* Processors

Popular social networking site Twitter suffers outage; Users blocked from posting tweets*

SAP fixed several vulnerabilities in its Security Patch Day in July 2022*

Lenovo fixes three UEFI firmware vulnerabilities affecting more than 70 product models*

Bandai Namco confirmed the cyberattack and is investigating the data leak*

Lithuanian energy company “Ignitis Group” hit by DDOS* attack

Researchers discovered new Android malware "Autolycos" in the Google Play Store, downloaded 3 million times*

Uniswap lost $8 million worth of Ethereum cryptocurrencies in a large-scale phishing attack*

Microsoft has discovered an exploit code for the MacOS Sandbox* Escape vulnerability

New “Luna Moth” Data Extortion Group Harms Organizations Through Fake Subscription Renewals*

Microsoft has uncovered an AiTM phishing campaign targeting over 10,000 businesses since 2021*

Malaysian and Indonesian Hackers Launch Cyber ​​War Against Indian Businesses Over Nupur Sharma's Controversial Comments*

The New York City Department of Motor Vehicles (DMV) warned of landslide attacks*

Siemens and Schneider Electric have fixed several bugs in their ICS* products

VMware Patches Eight Month High Severity Vulnerability in vCenter Server*

CISA urges federal agencies to patch a new high-severity vulnerability in Windows*

Adobe fixes critical vulnerabilities in its Acrobat, Reader and Photoshop* products

Microsoft Patchday Security Advisory: July 2022*

North Korean hackers stole $620 million from Axie Infinity in a spear phishing attack*

India's Central Public Works Department (CPWD) Faces Cyber ​​Attacks Targeting Its Offices*

Scammers launched a phishing campaign targeting everyday Amazon Prime shoppers*

Attackers use Azure virtual machines and GitHub shares for cloud-based cryptocurrency mining*

An ongoing PWN vulnerability allows attackers to remotely start Honda vehicles*

Hackers pose as cybersecurity companies to trick victims into installing malware*

Attackers compromised Goa Water Resources Department (WRD) server and demanded cryptocurrency as ransom*

New 0-mega ransomware gang targets organizations in dual ransomware attacks*

A new phishing campaign that uses the Follina vulnerability to implement the Rozena backdoor*

Hackers target Russian users using a malicious browser extension*

Cisco fixes a critical vulnerability in its enterprise communications solutions*

Fortinet has fixed multiple vulnerabilities in its various products*

Mangatoon data leak revealed information on 23 million accounts*

Microsoft fixed a bug that caused Office apps to crash when opened with cloud documents*

Canadian communications company Rogers experiences a major outage affecting cellular service*

New Stealthy OrBit malware collecting information from Linux* systems

Hackers Send Fake Copyright Claim Emails to Deploy IcedID* Banking Malware

Hackers can exploit online coding learning sites to launch remote cyberattacks*

CuteBoi Threat Group Deploys 1,200+ Malicious NPM Packages in Large-Scale Crypto Mining Campaign*

Checkmate ransomware attacks on QNAP NAS devices connected to the Internet*

Hacker and ransomware groups move from Cobalt Strike to Brute Ratel Post-Exploitation Toolkit*

Fierce APT Threat Group Keeps Targeting Bangladeshi Military Units*

Federal authorities warned of Maui ransomware attacks on healthcare facilities*

OpenSSL fixes a high severity vulnerability in the cryptographic library*

Huge US IT service provider "SHI" hit by potential malware attack*

Marriott hotels suffer from a data breach that exposed 20 GB of guest data*

A US professional finance firm experiences a data breach affecting the patients of 650 healthcare professionals*

Microsoft is quietly patching Windows ShadowCoerce* NTLM Relay Vulnerability

The NPM supply chain attack used the typosquatting technique to launch the supply chain attack*

New RedAlert ransomware ring targets Windows and Linux VMware ESXi* servers

British Army YouTube and Twitter account hacked to promote cryptocurrency scams*

Google fixes a new actively exploited zero-day vulnerability in Chrome*

Django fixes a high severity SQL injection vulnerability in its new version*

Hackers sell stolen data of 1 billion Chinese for bitcoins*

Jenkins has discovered several zero-day vulnerabilities in its various plugins*

Multiple Brocade SANnav Storage Area Network (SAN) Faults Affecting Multiple Large Drives*

Evilnum APT Group returns with updated TTPs aimed at Fintech companies*

Microsoft warns that the Raspberry Robin worm is infecting hundreds of Windows networks via infected USB drives*

A cyberattack on Geographical Solutions Inc. (GSI) shut down US unemployment benefits*

Hackers sent fake ban notifications to verified Twitter accounts*

Google warns users about the theft of photos, audio logs and call logs by the Slice Payments app*

RCE Vulnerability Discovered in Zoho Manage Engine AD Audit Plus Bug*

Information-stealing XFiles malware now exploits Follina* cyberattack vulnerability

Toll fraud malware targets Android devices by automatically subscribing to premium services*

NFT giant OpenSea reports data breach and warns users of phishing attacks*

Macmillan Publishers Suffers Ransomware Attack; Forced network shutdown*

Norwegian government websites suffer multiple DDoS attacks*

Attackers stealthily deploy new malware to penetrate Microsoft Exchange servers around the world through backdoors*

A new information stealer "YTStealer" targets YouTube content creators to steal authentication tokens*

MITRE has published the list of the 25 most dangerous software errors of 2022*

Walmart previene el ransomware Yanluowang*

CISA urged administrators to patch high-level Linux PwnKit vulnerability*

Microsoft patches Azure FabricScape vulnerability that allows hackers to hijack vulnerable Linux clusters*

Amazon fixes a serious vulnerability in its Android Photos app*

A notorious raccoon-stealing malware is back with new malicious abilities*

Researchers found over 900,000 Internet-exposed Kubernetes instances vulnerable to data-exposed cyberattacks*

Hackers reused the same compromised Zola website account credentials to gain access to user accounts*

Threat actors install new "ZuoRAT" malware on unpatched SOHO routers*

The cumulative update released by Microsoft for Windows 10 KB5014666 contains various bug fixes and new printing features*

AMD, the famous American semiconductor company, investigates the allegations of data theft from RansomHouse*

Unidentified attacker installed credit card readers in West Bank ATMs*

The new banking malware for Android "Revive" masks the BBVA Bank's 2FA application*

Chinese APT group compromises building automation systems by exploiting Microsoft ProxyLogon* vulnerability

The National Institute of Standards and Technology (NIST) publishes new guidelines to protect macOS* systems

A cyberattack hit Iran's major steel mills, forcing production at factories*

Vice Society ransomware group claims responsibility for attack on Innsbruck Medical University*

A new phishing technique uses Microsoft WebView2 applications to bypass multi-factor authentication*

LockBit ransomware gang infects users via fake copyright infringement emails*

The US Federal Trade Commission warns against extortionists targeting the LGBTQ+ community

Microsoft mitigates high-severity vulnerabilities in Edge web browser, affecting more than 150 million users*

Fast Shop, a Brazilian retailer, has announced a blackmail cyberattack*

Cybercriminals use Mitel Zero Day to raise suspicion of a ransomware attack*

Malicious PyPi Python packages sending stolen AWS keys to insecure websites*

A Japan-based automotive fabric distributor, TB Kawashima, has been confirmed in a cyberattack*

Hackers encrypt ISGEC Heavy Engineering Limited data and need Bitcoin to decrypt it*

US subsidiary of automotive hose maker Nichirin suffers ransomware attack*

CISA Warns of Threat Actors Exploiting Log4Shell Vulnerability to Hack VMware Servers*

New Quantum Builder allows attackers to easily launch malicious Windows* 'LNK' attacks

A new phishing campaign targets Microsoft 365 users to steal Metamask recovery phrases*

Vulnerable QNAP NAS devices become targets of DeadBolt ransomware* attacks

Italian Spyware Vendor Infects Android and iOS Users Through Internet Service Providers*

SMA Technologies' OpCon UNIX Agent Critical Vulnerability Receives Patch*

Chinese hacker group disguises cyber-espionage operations as ransomware attacks*

The Lithuanian NCSC warned of an increase in DDoS attacks on government websites*

Google fixed 14 vulnerabilities with the release of Chrome version 103*

Chinese hackers distribute the 'Nimbda' loader included in the 'SMS Bomber' tool to install the information-stealing Trojan payload*

MEGA fixes several critical vulnerabilities in the encryption algorithm*

Cloudflare experiences massive outage due to network configuration error*

Icefall 56 vulnerabilities affect operating system devices used in various industries*

New APT group ToddyCat targets Microsoft Exchange servers*

Yodel parcel company suffers cyber attack that interrupts delivery services*

Microsoft 365 service outage affects Microsoft Exchange Online and Teams*

A new phishing campaign steals Microsoft 365 credentials via fake voicemail*

New DFSCoerce NTLM Relay Attack Allows Attackers to Take Control of Windows* Domain

Global HR Firm RobertHalf Warns Users About Credential Stuffing Attacks*

BRATA Banking Trojan for Android is Now Evolving into an Advanced Persistence Threat*

Another increase in ECh0raix ransomware attacks detected on QNAP NAS devices*

Hackers Drop Malicious Cobalt Attack Beacons in New Phishing Campaign*

Cisco has confirmed that it will not fix RCE errors on legacy VPN routers*

A new Android banking malware "MaliBot" distributed as a cryptomining app or Chrome browser*

Researchers identify dozens of flaws in Siemens' industrial network management system*

The US Department of Justice dismantled Russia's RSocks* botnet infrastructure

A vulnerability in Cisco devices allows hackers to bypass authentication*

Ninja Forms plugin patch forcibly updated on millions of sites*

Chinese hackers exploited the Sophos Firewall zero-day bug weeks before the official patch release*

Africa's largest supermarket, Shoprite Holdings, hit by ransomware attack*

Critical ADM vulnerability fixed by Citrix in its security updates*

Panchan's new peer-to-peer botnet compromises multiple Linux servers in education*

Travis CI Public API registries exposed to thousands of GitHub, AWS and Docker tokens*

A new "Hertzbleed" side-channel attack affects Intel and AMD* processors

Cloudflare detects and mitigates the largest HTTPS DDoS attack*

Microsoft patched the actively exploited Windows MSDT zero-day vulnerability in its June 2022 security updates*

ALPHV Ransomware Group has developed a new extortion technique*

An unknown threat group hacked over 500 Indian websites and demanded an apology from Muslims around the world*

Android adware and data-stealing malware downloaded over 2 million times from the Google Play Store*

Nonprofit healthcare company Kaiser Permanente confirms data breach affecting more than 69,000 people*

Microsoft Patchday Security Advisory: June 2022*

Gallium Hackers Target Financial and Government Organizations Using New “PingPull” Malware*

Attackers Deploying BlackCat Ransomware on Compromised Microsoft Exchange Servers*

Threat actors using a new Linux rootkit malware "Syslogk" in cyberattacks*

A stealthy Linux "Symbiote" malware targeting financial firms in Latin America*

Malicious PyPI package "keep" contains password stealing due to typos*

Hello XD Ransomware Group now removes a backdoor when encrypting systems*

New PACMAN hardware attack can bypass Pointer Authentication (PAC) on Mac systems*

AvosLocker and Cerber2021 Ransomware Gang are actively targeting unpatched Atlassian Confluence servers*

Google Patched Multiple Vulnerabilities in Chrome Browser Updates*

Iranian Hackers Use DNS Backdoor to Attack Energy Sector*

Hackers spread new information-stealing malware via hacked software CCleaner Pro*

Several botnets are now exploiting the critical Atlassian Confluence RCE vulnerability to deploy cryptominers*

Researchers identify a new China-linked APT group that has been spying on organizations for 10 years*

New advanced malware "Symbiote" infects all Linux processes and steals account credentials*

Threat Actors have compromised online gun stores in the US to steal customers' credit card details*

Emotet malware now collects credit card information from the Google Chrome browser*

Medical provider Shields Health Care Group suffers data breach, data of more than 2,000,000 people exposed*

Google fixed several critical Android bugs in the June 2022 security updates*

Hackers abused Facebook Messenger in a large-scale phishing campaign to steal victims' credentials*

Two Critical U-Boot Vulnerabilities Revealed in Linux*-Based Embedded Systems

Black Basta ransomware targets vulnerable VMware ESXi servers*

Threat actors deploying the new "SVCReady" malware via phishing campaigns*

Chinese government hackers compromise US telcos to spy on network traffic*

Black Basta Ransomware Group deploys QBot malware into its operations*

The Italian city of Palermo was hit by a cyberattack that affected a variety of operations and services*

LockBit Ransomware Group claims to have infiltrated Mandiant Company's network*

Hackers are actively exploiting a critical zero-day vulnerability in Windows in a phishing campaign*

Sensitive data from pharmaceutical giant Novartis exposed in recent cyberattack*

Hacking group WatchDog mines cryptocurrency in newly launched cryptojacking campaign*

Android malware "SMSFactory" discreetly enrolls users in premium services*

Hackers stole NFTs from Bored Ape Yacht Club via Yuga Lab Discord server hack*

GitLab fixes a critical account takeover vulnerability in its Enterprise Edition*

Malware identified by researchers controlling thousands of websites on the Parrot TDS network*

Chinese threat group LuoYu uses WinDealer malware in man-on-the-side attacks*

Foxconn Mexico manufacturing plant affected by ransomware attack*

Microsoft Banned Malicious OneDrive Apps Used in Polonium* Attacks

A new Clipminer malware brought its operators $1.7 million through transaction hijacking*

Hackers are actively exploiting the new Atlassian Confluence zero-day vulnerability in the wild*

Attackers targeted hundreds of insecure Elasticsearch databases in a ransomware attack*

SideWinder APT Group creates a fake VPN app for Android on the official Google Play store*

RuneScape phishing campaign steals game account details and banking PIN*

A zero-day vulnerability in Windows Microsoft Office gets a free unofficial patch*

Researchers found that more than 3.6 million MySQL servers are publicly accessible*

Costa Rican public health network affected by Hive* ransomware attack

Attackers can hijack WhatsApp accounts using the call forwarding method*

Chinese APT Hackers Are Actively Exploiting New Microsoft Office RCE Vulnerability in the Wild*

A new variant of the XLoader botnet hides its C2 servers using the probability method*

Zoom has released security patches to address four critical vulnerabilities in its video conferencing application*

Cisco researchers discovered multiple vulnerabilities in the open automation software platform*

Hackers use a new Microsoft Office zero-day bug to run PowerShell commands*

The Austrian state of Carinthia attacked by the BlackCat* ransomware gang

Attackers use new WSL-based malware to steal web browser cookies*

EnemyBot malware includes new exploits for critical web servers and vulnerabilities in content management systems*

FBI: Attackers Trade on Hacker Forums with Access Data to US Educational Institutions*

Security researchers released a proof-of-concept (PoC) exploit for the critical VMware bug*

Microsoft has discovered several vulnerabilities in Android applications*

Threat actors stole nearly 100,000 NPM user account credentials in GitHub OAuth Breach*

Zyxel has fixed several security vulnerabilities in its products*

Windows 11 KB5014019 patch affects Trend Micro UMH drivers and breaks ransomware protection*

Scammers pose as the QuickBooks support team in a phishing attack*

Threat actor uses stealthy BPFDoor malware to infect Linux and Solaris* systems

Microsoft has published a guide to mitigate KrbRelayUp LPE attacks on Windows* systems

New Linux-based "Cheers" ransomware targets vulnerable VMware ESXi servers*

Researchers have noticed an increase in the rate of ChromeLoader malware infections targeting Windows and Mac* systems

The developers have warned users to stop using Linux Tails 5.0 distributions until the next release*

Popular Python and PHP Libraries Compromised to Steal Users' Amazon AWS Keys and Credentials*

Russian government agencies targeted by fake Windows update campaign*

Researchers have discovered a new variant of Chaos* ransomware

Trend Micro has patched a DLL hijacking vulnerability in its security solution*

Mozilla has patched zero-day vulnerabilities in its various products*

Indian airline SpiceJet suffers a ransomware attack that affects departures*

Hackers attacked security researchers with fake Windows PoC* exploits

US automaker General Motors (GM) suffers Credential Stuffing attack and discloses customer information*

Chinese Twisted Panda APT Group Targets Russian Defense Institutes With Spy Attacks*

A new unpatched vulnerability in PayPal allows hackers to steal funds from PayPal users*

Issues with the Microsoft Store app have been fixed with Emergency Updates for Windows 10*

Russian IoT botnet fronton to launch disinformation campaigns on social media*

Chicago Public Schools Suffers Major Data Breach After Ransomware Attack*

Predator spyware actively infects Android users in zero-day attacks*

Hackers use PDF documents to remove Snake Keylogger* malware

Threat actors promote a new cryptocurrency scam with fake Elon Musk YouTube videos*

Cisco has patched a zero-day vulnerability in IOS XR router software*

Vidar malware is distributed via fake Windows 11 downloads*

PyPI Releases Malicious Backdoor Package Targeting Windows, Linux, and Mac OS*

North Korean hacker group Lazarus uses Log4J vulnerability to infect VMware* servers

QNAP Warned Customers About New DeadBolt Ransomware* Attack

Media giant's Nikkei unit in Singapore suffers ransomware attack*

Microsoft is noticing a massive increase in XorDDoS malware activity targeting Linux* devices

The most sophisticated BlackCat (ALPHV) ransomware gang targeting various organizations*

NVIDIA fixes ten bugs in Windows* GPU display drivers

Microsoft warns against brute force attacks on MSSQL* database servers

Vulnerabilidades críticas corregidas por VMware en sus diversos productos*

WordPress fixed critical vulnerabilities in Jupiter theme and core Jupiter plugins*

Over 200 apps found distributing Facestealer spyware via the Google Play Store*

Millions of attacks exploiting the vulnerable WordPress Tatsu Builder plugin*

Various third-party web crawlers steal user-entered data before sending it*

CISA Alerts on Actively Exploited Spring and Zyxel Vulnerabilities*

A custom PowerShell RAT for German users looking for information on the Ukraine crisis*

Apple fixes a zero-day vulnerability in its macOS and Watch* devices

Manufacturing company Parker-Hannifin announces data breach following ransomware attack*

HTML attachments are still used in phishing emails as they evade detection*

Sophos fixes antivirus driver crash BSOD that was triggered after Windows update KB5013943*

CISA warns about Windows updates on domain controllers*

Fake Pixelmon NFT website infects users with password-stealing malware*

Attackers promoted fake Binance NFT Mystery Box bots on YouTube to install RedLine* malware

SonicWall fixes new vulnerabilities in its SSLVPN SMA1000 devices*

Pro-Russian hackers Italian government DDoS websites via "slow HTTP" technique*

The Sysrv botnet variant is now exploiting new vulnerabilities to deploy cryptomining malware*

Massive WordPress JavaScript Injection Campaign Redirecting Visitors to Malicious Websites*

Zyxel closes critical vulnerability in its firewall products*

Cobalt Mirage attackers use BitLocker and DiskCryptor in ransomware attacks*

A Stealthy BPFdoor Backdoor Targeting Linux and Solaris* Systems

FBI and CISA warn of supply chain attacks on MSPs*

Bitter Hacking Group targets Bangladesh government agencies with spear phishing campaigns*

HP fixes high severity BIOS vulnerabilities by enabling kernel privileges*

Hackers use IceApple's new post-exploit framework on Microsoft Exchange servers*

Attackers spread another set of malicious apps through the Google Play Store*

Researchers Warn Against DCRat Backdoor Selling On Russian Hacker Forums*

Costa Rica declares a national emergency after cyberattacks by Grupo Conti Ransomware*

Fraudsters Distribute Jester Stealer Malware in Phishing Attacks*

Microsoft Patches Actively Exploited Windows LSA Spoofing Zero-Day Bug*

Hackers Use Critical F5 BIG-IP Vulnerability for Destructive Attacks*

FluBot Android malware targets Finland with new SMS phishing campaign*

German auto industry targets month-long malware campaign*

Microsoft Patchday Security Advisory: May 2022*

Microsoft fixes a bug in Azure Synapse and Azure Data Factory pipelines*

QNAP fixed a critical vulnerability affecting remote command execution in QVR*

New Windows worm spreads from infected USB drives*

The American manufacturer of agricultural machinery "AGCO" suffers a ransomware attack*

Google Docs crashes when "E.E.E.E.E."*

Attackers hijacked Ferrari subdomain to host fake NFT scam*

New NetDooka malware framework distributed via PrivateLoader* malware distribution service

Insecure ElasticSearch server instance exposed thousands of borrower data*

New Chinese threat group Moshen Dragon targets Asian telcos*

Security researchers reveal years of bugs in Avast and AVG* antivirus solution

Google fixes an actively exploited Linux kernel vulnerability in its Android security updates*

North Korean hacker group 'APT38' linked to new ransomware strains*

Threat actors targeting Microsoft logins from compromised UK NHS email accounts*

Cisco fixes NFVIS vulnerabilities that allow access with root privileges*

Q5 Warns Users of a Critical Vulnerability in BIG-IP RCE that Allows Device Acquisition*

Hackers target Pixiv and DeviantArt artists to send malware to steal information*

Pro-Ukrainian Hackers Are Actively Using Docker Images For Russian DDoS Sites*

Threat actors distribute Magniber ransomware in a fake Windows 10* upgrade campaign

Over Millions of Routers and IoT Devices Vulnerable to Unpatched DNS Vulnerability*

Aruba and Avaya network switches are highly vulnerable to "TLStorm 2.0"* vulnerabilities

Threat actors abusing Google's SMTP relay service to distribute phishing emails*

Car rental giant Sixt suffers cyberattack and business interruption*

Threat actors use Bumblebee malware instead of BazarLoader malware in cyberattacks*

Attackers target Ukrainian sites from WordPress sites compromised by DDoS attacks*

Synology Warns Customers About Critical Netatalk Bugs Affecting Its Various Products*

Russian threat group attacked Romanian government websites with a DDoS attack*

Austin Peay State University ransomware attack*

A YouTuber encourages his followers to DDoS attacks against Russia*

Popular social media app Whatsapp stops working, users report connection issues*

An NPM flaw allows attackers to add other developers to their malicious packages*

Critical vulnerabilities that Microsoft en Azure Database for PostgreSQL Flexible Server fixes*

The RIG Exploit Kit exploits a bug in Internet Explorer to spread RedLine malware*

China-linked Mustang Panda threat group now targets Russian state officials*

Hive0117 Threat group targeting Eastern European organizations in phishing campaign*

QNAP has warned customers to disable AFP until critical bugs are fixed*

Microsoft has disclosed a new "Nimbuspwn" vulnerability in the Linux* operating system

Threat actors actively exploiting a critical vulnerability in VMware RCE to implement backdoors*

Threat actors actively proliferating Emotet malware via Windows* shortcut files

The multinational beverage company Coca-Cola suffers a network breach*

Confidential American Dental Association data stolen by Black Basta ransomware*

North Korean APT group attacks journalists with "Goldbackdoor" malware*

French hospital group suffers cyber attack; Administrative data and exposed patients*

Critical flaw in Ever Surf Wallet allows attackers to steal victim's cryptocurrency*

Atlassian fixed a critical authentication bypass bug in Jira Seraph*

Hackers insert "More Eggs" malware into resumes sent to corporate hiring managers*

Critical flaw in Cisco Umbrella's default SSH key allows credential theft*

UPI suffers non-compliance, social media flooded with non-payment claims*

T-Mobile confirms that its internal network was invaded by the Lapsus$* threat group

Several critical bugs discovered in SmartPTT and SmartICS* industrial products

QNAP urges users to mitigate critical Apache HTTP server outages*

LemonDuck and TeamTNT hack Docker servers in cryptomining malware campaigns*

A critical vulnerability in the Android chipset allows attackers to access users' media files*

New variant of BotenaGo botnet targeting Lilin Security Camera DVR devices*

Amazon Web Services fixes container leak in Log4Shell hotfix*

Russian threat group uses new Ptered variants to infect selected Ukrainian units*

Hive Ransomware Group targets vulnerable Microsoft Exchange servers*

The Emotet botnet increased its infection rate in March 2022*

CISA Warns of Actively Exploited Vulnerability in Windows* Print Spooler

QNAP warned customers to protect NAS devices from cyber attacks*

Lenovo has disclosed vulnerabilities in UEFI firmware drivers affecting more than 100 notebook models*

Israeli group NSO uses a new iOS bug to release spyware on iPhone devices*

CISA Warns of North Korean Hacking Group Targeting Cryptocurrency Industry*

A threat actor stole $655,388 in cryptocurrency from Apple's iCloud*

Hackers use fake Windows 11 update campaign to infect users*

Decentralized finance project Beanstalk lost $182 million in quick lending attack*

Cisco patches a critical authentication bypass vulnerability in its WLC software*

JekyllBot: 5 Mistakes Lead Hackers to Compromise Aethon TUG Hospital Robots*

Hackers accessed several private GitHub repositories using stolen OAuth tokens*

Scammers targeting T-Mobile customers in SMS phishing attacks*

A vulnerability in the Rarible NFT Marketplace allows attackers to steal users' crypto assets*

Wind turbine manufacturer Nordex suffers Conti ransomware attack*

Oil India Limited (OIL) suffers a ransomware attack*

Threat actors targeting Ukrainian government agencies with IcedID malware and Zimbra* exploits

OldGremlin ransomware group returns with new malware targeting Russian companies*

CISA Warns of Actively Exploited Windows Local Privilege Escalation Vulnerability*

Google patches an actively exploited vulnerability in its Chrome browser*

Malware campaigns targeting African bank employees using RemcosRAT* malware

Russian hackers use Industroyer2 malware to attack Ukraine's power grid*

Federal Agencies Issue Joint Advisory on APT Groups Targeting ICS/SCADA Devices*

Hackers are actively exploiting a critically patched VMware vulnerability*

WordPress developers fix critical bug in Elementor plugin*

New Tarrask malware hides scheduled tasks using Windows* vulnerability

HP fixes critical bugs affecting 15 million endpoints in Teradici PCoIP software*

Hashnode blog platform reported with critical LFI vulnerability*

Microsoft Patch Tuesday Security Advisory: April 2022*

Italian luxury fashion house 'Ermenegildo Zegna' confirms ransomware attack*

Threat actors use Spring4Shell exploits to install Mirai* malware

US manufacturer Snap-on suffers a data breach*

Researchers warn of FFDroider and Lightning* data-stealing malware

Qbot operators now distribute malware via MSI Windows Installer Packages*

Android banking Trojan mimics bank customer service calls*

Atlassian's current outage may be extended by an additional two weeks*

Threat Actors Distribute New META-Malware in Spam Campaigns*

Chinese threat actors are actively targeting Indian power grid organizations*

New Octo malware allows attackers to remotely take control of Android devices*

A new "Parrot" traffic control system infects 16,500 websites to deploy malware*

New “Denonia” Malware Targets Serverless AWS Lambda with Crypto Miners*

Hackers collect data on malicious Android apps with millions of downloads*

Threat actors use new "FFDroider" malware to steal social media accounts*

An ongoing Atlassian outage impacts Jira and Confluence customers*

OpenSSL Loop Vulnerability Affects Palo Alto Networks Firewalls and VPNs*

Scammers use malicious shopping apps to steal banking information from Malaysian customers*

British retail chain The Works suffers a cyberattack*

VMware fixes critical vulnerabilities in its various products*

CISA Issues Warning About Active Exploitation of Critical Spring4Shell Vulnerability*

Researchers Link Chinese Threat Group 'Cicada' to Widespread Spying Attacks*

Hackers hijack email marketing company Mailchimp for phishing attacks*

FIN7 hacker group using stolen credentials and software supply chain attacks*

Various hacker groups use the war between Russia and Ukraine to spread malware*

Threat actors trade new and sophisticated malware on Russian hacker forums*

Beastmode DDoS Botnet Takes Advantage of New TOTOLINK Bugs to Enslave Routers*

New RAT malware "Borat" appears on hacker forums and offers various resources*

Hacking a broken cable could allow attackers to remotely stop EV charging*

VMware fixes critical vulnerability in Spring4Shell RCE in multiple products*

A 15-year-old bug in the PHP Pear repository could lead to a supply chain attack*

Vulnerability actively exploited by Trend Micro patches in its Apex Central product*

Threat actors deploy new Android spyware to collect sensitive user data*

American Express suffers a massive outage affecting payment services*

Threat actors abusing static Microsoft Azure web pages for phishing attacks*

Hackers use fake Trezor privacy breach emails to steal users' cryptocurrency assets*

CISA advises federal agencies to fix critical vulnerability in Sophos* firewall

Critical vulnerability in GitLab allows hackers to take over user accounts*

Palo Alto Networks Bug Leak Customer Support Case Attachments*

Apple fixes two zero days on its iPhones, iPads and Macs*

Zyxel fixes critical authentication bypass vulnerability in its firewall and VPN products*

Vulnerable Wyze Cam devices allow hackers to view video streams*

Chinese Hackers Install New "Fire Chili" Rootkit on Vulnerable VMware Horizon Servers*

Viasat confirmed that satellite modems were compromised with AcidRain malware*

Developers release a fix for a zero-day vulnerability in the Spring Java Framework*

A new zero-day vulnerability in the Spring Java Framework allows remote code execution*

OpenSSL Fatal Error Affects Most QNAP NAS Devices*

IT and Software Company Globant Suffers Data Breach; 70 GB of data is stolen*

Viasat's KA-SAT satellite service suffers a cyberattack*

A new spear phishing campaign targets opponents of the Russian government with Cobalt Strike*

Russian phishing attacks target European and NATO forces*

FBI Warns Election Officials About Credential Phishing Campaigns*

Transparent Tribes Hackers Attack Indian Government Officials With Modified MFA Tool*

Mars Stealer malware spreads via Google OpenOffice ads*

New "Verblecon" Malware Infects PCs Hacked With Cryptocurrency Miners*

CISA wants attacks on Internet-connected UPS devices*

Shutterfly announces data breach following Conti* ransomware attack

Threat actors using infected WordPress sites to launch DDoS* attacks

The Honda vehicle's remote keyless system is vulnerable to repeated attacks*

Threat actors target vulnerable Microsoft Exchange servers via response-chain hijacking attacks*

Purple Fox Hackers Are Actively Using a New Variant of FatalRAT* in Recent Malware Attacks

The Muhstik botnet targeting Redis servers recently disclosed a vulnerability via a newly disclosed vulnerability*

An emergency update for Google Chrome fixes the zero-day bug used in attacks*

A critical vulnerability in Sophos Firewall allows remote code execution*

The Chinese hacker group “Scarab” was seen attacking Ukraine amid the invasion of Russia*

Threat actors distribute a Vidar Infostealer via malicious email attachments*

Hackers attack Azure developers through more than 200 malicious NPM packages*

Social engineering attacks put Morgan Stanley client accounts at risk*

Western Digital Updates My Cloud OS to Fix Critical Vulnerability*

Threat actors spread the new version of JSS Loader RAT via malicious Microsoft Excel add-ins*

North Korean hackers are actively exploiting the recently patched zero-day bug in Chrome*

VMware Releases Patches for Carbon Black* Application Control Vulnerabilities

New vulnerabilities in WPS Office give hackers access to bookmakers*

Threatening China-linked actor "Mustang Panda" targets European diplomats and ISPs*

Thousands of MikroTik routers abused in Glupteba and TrickBot campaigns*

Microsoft Confirms LAPSUS$ Blackmail Group Hack, 37GB of Source Code Leaked*

New Dell BIOS bugs affect millions of Inspiron, Vostro, XPS and Alienware systems*

Several models of HP printers are vulnerable to remote code execution attacks*

Greece's public postal service "ELTA" suffers a ransomware attack*

Researchers Reveal Custom MacOS Malware Created by Chinese Hackers*

A new crypto scam called "CryptoRom" abuses iPhone resources to target mobile users*

New "Snake" backdoor targets French companies via open source package installer*

Hackers attack banking networks with a new rootkit to compromise ATMs*

Threat actors distributing BitRAT malware as a Windows 10 license activator*

Hackers impersonating legitimate domains with a new browser-in-browser (BITB) attack*

Opatch releases unofficial patch for Windows zero-day bug that grants administrator privileges*

Hackers infect Android users with password-stealing malware "FaceStealer"*

Internet Systems Consortium (ISC) fixes fatal errors in BIND* server

A new Cyclops Blink botnet variant actively targeting ASUS routers*

Europe warns of plane GPS glitches linked to Russian invasion*

Unprotected Microsoft SQL and MySQL servers targeted by Gh0stCringe* malware

SolarWinds warns about attacks on web help desk instances*

More than hundreds of websites hosted by GoDaddy were attacked through backdoors in a single day*

CISA added 15 known vulnerabilities exploited in attacks*

OpenSSL fixes a high severity DoS vulnerability*

Hackers use Log4j exploits to infect Linux* machines

A massive phishing campaign uses more than 500 domains to steal credentials*

Automotive giant DENSO suffers data breach*

QNAP Warned About Linux "Dirty Pipe" Vulnerability Affecting Its NAS Devices*

Threat actors used CaddyWiper data to clean malware in Ukraine attacks*

New Linux vulnerability allows hackers to elevate privileges*

Researchers have found new evidence linking Kwampirs operators to the Shamoon malware*

Bridgestone Americas suffers data breach after ransomware attack*

Vulnerable package managers allow attackers to infect developer systems*

Giant video game developer Ubisoft revealed a cyber attack, services interrupted*

New variant of Google Authenticator MFA codes for Aberebot Trojan Harvest users*

Attackers use the YouTube platform to infect gamers with malware*

Threat actors use custom hacking tools in cyberattacks*

Emotet botnet with more than 100,000 bots to carry out cyberattacks*

Iranian threat group targets Turkey and Arabian Peninsula in malware attack*

Threat actors using Mitel devices to launch DDoS attacks Reflection*

Websites of Russian federal agencies compromised in a supply chain attack*

CISA Conti ransomware alert updated with 100 domains used in cyberattacks*

Chinese threat actors target European diplomatic institutions in phishing attacks*

Scammers posing as government officials and law enforcement agencies in fraudulent scams*

Coinbase Blocks Over 25,000 Blockchain Addresses Linked to Russian Individuals*

A new Linux vulnerability allows hackers to access the root of vulnerable systems*

Microsoft fixes a critical Azure bug that exposes data from other customers*

Rompetrol gas station chain in Romania suffers Hive* ransomware attack

Ukraine's Computer Emergency Response Team warns of new phishing attacks*

TerraMaster fixes critical vulnerabilities in its NAS (Network-Attached Storage) devices*

Researchers identify SharkBot malware masquerading as Android antivirus on the Google Play Store*

Threat actors use stolen NVIDIA code signing certificates in cyberattacks*

The Russian government shares the list of DDoSing IP addresses of Russian organizations*

Vulnerable versions of the Linux kernel allow hackers to execute arbitrary commands*

A new security bug affects thousands of self-managed GitLab instances*

Mozilla security updates fix two critical zero-day vulnerabilities in Firefox*

Lapsus$ Hacking Group Allegedly Shares Samsung Electronics' Sensitive Data*

Cisco Releases Patches for Expressway Series and TelePresence VCS* Products

Researchers propose a new side-channel attack on homomorphic cryptography*

New York State Attorney General Warns Users Affected by T-Mobile Data Breach*

More than 71,000 NVIDIA employee credentials compromised as a result of a data breach*

Researchers uncover malware campaign impersonating venture capital firm using phishing emails*

Developers fix critical vulnerabilities in popular PJSIP* media library

Researchers reveal critical vulnerabilities in surveillance software VoIPmonitor*

Threat actors using Log4Shell vulnerabilities to launch DDoS attacks and cryptomining*

Belarus National Threat Group Actively Attacks European Government Agencies*

TrickBot operators upgrade their AnchorDNS backdoor to AnchorMail*

Threat actors abuse Google ads to send hundreds of e-bike phishing sites*

China-linked Daxin malware actively targets various government infrastructures in espionage attacks*

TeaBot malware reappears on Google Play as a QR code scanning app*

Insurance giant “AON” suffered a cyberattack over the weekend*

Second new "IsaacWiper" malware hits Ukraine amid Russian invasion*

Auto giant Toyota shuts down production after cyberattack on supplier*

Video surveillance Giant Axis Communications suffers massive network outages*

Threat actors abusing content filtering devices in DDoS amplification attacks*

An Infostealer malware "Jester Stealer" updated with new malicious features*

Threat actors use ransomware as bait in cyberattacks in Ukraine*

Vulnerability in Visual Voice Mail Android app allows attackers to steal users' passwords*

NHS Urges Users to Patch Okta Advanced Server Client RCE Vulnerability*

The American multinational technology “Nvidia” suffers a cyberattack*

Targeted Citibank customers are phished with fake suspension alerts*

UNC2596 Threat Group exploits vulnerabilities in Microsoft Exchange to install ransomware payload*

Hackers use the official Microsoft store to inject malware into victim systems*

Threat Actor Group “APT27” Hits US Defense Firms With Stealthy SockDetour Backdoor*

Deadbolt ransomware operators actively target ASUSTOR NAS devices*

Researchers identify new destructive cleaner malware used in attacks in Ukraine*

CISA Warns of Actively Exploited Vulnerability in Zabbix* Network Monitoring Platform

Researchers reveal a new "small sieve" of malware used by MuddyWater hackers*

Researchers warn of a new Russian botnet created from hacked firewall devices*

25 Malicious JavaScript Libraries Allow Hackers To Steal Discord Tokens And User Environment Variables*

Threat actors using Dridex bots to deploy ransomware payloads to infected networks*

Chinese Researchers Discover Details About Equation Group's Bvp47 Backdoor

Researchers discover a 9-year-old bug in Horde Webmail software*

Massive DDoS attacks hit Ukrainian authorities and banks again*

Researchers reveal a new phishing technique that bypasses multi-factor authentication*

Chinese threat group 'APT10' targets Taiwanese companies in supply chain attack*

Hancom Office software vulnerable to code execution attacks and memory corruption*

Scammers stole $1.7 million worth of NFTs from OpenSea users in a phishing attack*

Threat actors actively scan vulnerable MS SQL servers to implement Cobalt* attack indicators

A new Android banking Trojan targeting Europeans detected in the Google Play Store*

The American logistics company “Expeditors International” suffers a massive cyber attack*

Major cookware distributor 'Meyer Corporation' suffers data breach after ransomware attack*

Islamic Republic of Iran Broadcasting (IRIB) affected by cyberattack*

WordPress Force Update UpdatePlus plugin patch on millions of websites*

Iranian Threat Group Exploits Log4j Vulnerabilities to Compromise VMware Horizon* Servers

PseudoManuscrypt Botnet has been following CryptBot techniques since May 2021*

Monzo Online Banking users are the target of a new phishing attack*

Popular online store for e-cigarettes in jeopardy for loading Credit Card Skimmer*

Adobe has updated its security advisory for critical vulnerabilities*

High Severity Vulnerability Patched by Cisco Affects Cisco Email Security Appliance*

Hackers use Microsoft Teams chats to spread malware*

Researchers Warn of Golang-Based Kraken Botnet Targeting Windows* Systems

Cyber ​​Threat Group “Team Moses” Targets Israeli Organizations*

The Red Cross blamed the attack on the state-sponsored hacker group*

BEC scammers pose as CEOs in virtual meetings*

Trickbot malware targets companies known to steal user data*

Researchers have revealed a high severity vulnerability in Apache Cassandra*

High Severity Vulnerabilities Resolved by VMware Affecting Multiple Products*

BlackCat Ransomware Group reivindica ataque Swissport Ransomware*

Ukraine's defense and two banking sectors affected by a massive DDOS attack*

Threat actors using Mylobot malware to send cyber bullying emails*

Researchers attribute ShadowPad malware attacks to Chinese threat groups*

Japanese sportswear company Mizuno suffers ransomware attack*

Moxa fixes 5 critical vulnerabilities in its MXview* software

Ukraine Suffers Massive Ongoing Hybrid War*

NFL team San Francisco 49ers attacked by Blackbyte* ransomware

Google is rolling out a Chrome update to fix zero-day in its Chrome browser*

Adobe Patched Critical Zero-Day Vulnerability Affects Adobe Commerce and Magento Users*

Croatian mobile operator 'A1 Hrvatska' suffers data breach*

Researchers have identified a sophisticated new rust-based ransomware attack*

CISA added 16 new vulnerabilities to its catalog of known exploits*

Elephant Modified by Threat Group Installed Fake Digital Evidence for Indian Activists*

Apple fixes an actively exploited zero-day bug in its security updates*

Threat actor group 'APT29' targets European diplomats with phishing emails related to COVID-19*

FritzFrog botnet infects 1500 hosts in one month*

Research reveals stealthy operating strategies modified by a group of advanced threats*

Vulnerable PHP Everywhere plugin poses high risk for thousands of WordPress sites*

Iranian Threat Group Uses Backdoor Called Marlin In New Spy Campaign*

Hackers Infected Hundreds of Magento Sites in MageCart Attacks*

FBI warns users of growing number of victims of SIM swap fraud and hijacking*

Advance Threat Group uses a new implant to infect companies in the Middle East*

Threat actors target European Android users with Smishing attacks*

Kimsuki Hacker Group uses commodity RATs with custom Gold Dragon malware*

Google fixes two critical bugs until February 2022 Android security updates*

Vulnerable Mimosa wireless broadband products face remote attack*

SAP fixes several security vulnerabilities in February 2022 Security Patch Day*

Vodafone Portugal suffers a massive cyberattack*

Microsoft Patchday Security Advisory: February 2022*

Politically motivated threat group targeting Indian military and diplomatic assets*

Medusa malware targets Android users in Smishing* campaigns

Leading sportswear manufacturer Puma suffers data breach after ransomware attack*

Errors in DPD Group package tracking can reveal personal customer data*

Vulnerable Argo-CD exposes sensitive data from Kubernetes applications*

US media giant News Corp hit by persistent cyberattack*

Researchers have identified a new ransomware-as-a-service (RaaS) operation in cyberattacks*

Israeli company QuaDream exploits iPhone vulnerability to deploy spyware*

Swiss airline Swissport affected by ransomware attack*

Chinese threat actors are actively exploiting a Zimbra zero-day vulnerability to steal email*

Cisco Fixes Several Bugs Discovered in Small Business RV* Series Routers

Intuit warns of a phishing campaign that sends blocked emails from fake accounts*

Antlion Hackers Target Manufacturing and Financial Institutions Through Customized Backdoors*

Threat actor group "Moses Team" uses new StrifeWater RAT in ransomware attacks*

Vulnerabilities in UEFI firmware affect at least 25 PC vendors*

Threat actors use SEO poisoning techniques to install malware bundles*

New malware used by SolarWinds hackers went unnoticed for years*

Software de ataque de Kenyon Produce (KP) Snacks Company contra ransomware*

Morley Companies Inc. Reveals Ransomware Attack After Data Breach*

ESET fixes high severity vulnerability affecting its various products*

Cute Kitty Threat Actor Group Uses New PowerShell Backdoor in Cyber ​​Espionage Attacks*

SolarMarker malware uses new techniques to survive on compromised systems*

Researchers Reveal New Iranian Hacking Campaign Targeting Turkish Users*

Researchers have found a new variant of Oski malware called "Mars Stealer" in cyberattacks*

Phishing scammers use malicious CSV files to drop malware*

German mineral oil company Oiltanking severely affected by cyber attack*

British Council suffers data breach, 144,000 records exposed*

Gamaredon Threat Group uses new malicious files in a phishing attack*

Samba patched a critical vulnerability that allowed hackers to gain root access*

Hackers misuse UPnP routers for malicious activities*

WordPress fixes a critical vulnerability in a plugin with over a million downloads*

Russian threat actors use stealthy malware in cyber-espionage campaign dubbed StellarParticle*

Taiwanese Electronics Manufacturer Delta Hit by Conti Ransomware*

Hackers take over CEO accounts with rogue OAuth apps*

Phishing operators using a Windows update to install malware*

Researchers discover more than 20,000 DCIM systems vulnerable to attacks*

Mobile phones of Finnish diplomats infected with Pegasus* spyware

Windows vulnerability patched with new public exploits allows hackers to become administrators*

Linux version of LockBit ransomware targeting VMware ESXi* servers

Discord suffers major outage due to API and database issues*

Chaes banking Trojan hijacks Chrome with malicious extensions*

New FluBot and TeaBot campaigns abuse Android devices around the world*

Phishing attack impersonates shipping giant “Maersk” to deploy malware*

Video game company BANDAI NAMCO shuts down servers to prevent cyberattacks*

Apple patches a new zero-day exploit to hack macOS and iOS devices*

Federal government warns against backdooring of networks of companies of the APT27 group*

Linux system service error allows rooting on all major distributions*

DazzleSpy malware targets macOS users in a watering hole attack*

Threat actors using compromised accounts to send mass phishing emails*

Premium Subscription-Based Scam Targeting Android* Users

TrickBot malware operators added new techniques to evade detection*

Russian threat group targeting defense and government industries*

New DeadBolt ransomware targets QNAP devices and demands 50 BTC for master key*

Primer ataque a VMware Horizon Server Access Broker en ataques Log4Shell*

Canadian government hit by cyberattack, some services disrupted*

Threat actors broke into the Segway store to steal customers' credit card details*

Emotet spam campaign using an unconventional IP address to avoid security detections*

Phishing campaign that uses malicious PowerPoint files to spread malware*

Threat actors are now actively targeting a critical fix for SonicWall RCE*

Two CWP bugs allow code to run as root on Linux* servers

BRATA Android malware strikes back with enhanced capabilities and wipes device after data theft*

Hackers encrypt the internal servers of the Belarusian railway * in protest

Researchers identified a new UEFI firmware implant in cyberattacks*

Hackers Opened the Doors to Over 90 WordPress Themes and Plugins in Supply Chain Attacks*

Researchers discover 2 bugs in Zoom software leading to zero-click attack*

SonicWall provides a temporary solution for firewall stuck in reboot loop*

CISA reveals 17 new vulnerabilities exploited in attacks*

Cyber ​​espionage campaign of the Molerats threat group in the Middle East*

McAfee Agent update fixes two high severity vulnerabilities*

F5 fixes 24 vulnerabilities in its BIG-IP, BIG-IQ and NGINX Controller API* products

The Netherlands National Cybersecurity Center warns of ongoing Log4j threats*

WordPress plugin flaw puts users of 20,000 sites at risk of phishing and code injection*

Various spyware campaigns to steal login details from industrial companies*

DoNot hacking group targeting government and military installations in South Asia*

Indonesia central bank launches ransomware attack, Conti data leaks*

Cisco bugs grant remote attackers root privileges via debugging mode*

Red Cross cyberattack leaks data of 515,000 people*

SolarWinds Patches Serv-U Vulnerability Exploited by Log4j* Attacks

Russian attackers use signature-based malware service to deploy malware*

Scammers posing as the US Department of Labor in a phishing campaign*

A new stealthy malware targets users' cryptocurrency wallets and passwords*

Researchers reveal a critical bug in the SAP NetWeaver AS ABAP and ABAP* platforms

A critical flaw in IDEMIA's biometric identification devices allows unauthorized access*

Large-scale phishing campaign targeting renewable energy companies*

Researchers link new White Rabbit ransomware to hacker group FIN8*

Earth Lusca hackers target high-value government and private sectors*

Microsoft releases emergency patches for Windows Server and VPN bugs*

Fashion giant Moncler announces data breach after ransomware attack*

Microsoft warns of fake ransomware targeting Ukraine in data wipe attacks*

High severity CSRF errors in 3 WordPress plugins affecting 84,000 sites*

Nintendo Warns of Fake Websites Offering Fake Switch Discounts*

eNom Data Center Migration Process Takes Websites Offline*

Zoho fixes a critical vulnerability in Desktop Central*

An unknown npm dependency error affected the Create React Facebook app*

Vulnerable Apple Safari Browser Allows Hackers to Track User Activity*

Cybercriminals abuse public cloud infrastructure to distribute multiple RATs*

Goodwill's ShopGoodwill e-commerce platform suffers a data breach*

Cisco fixes a critical bug affecting Unified CCMP and Unified CCDM*

Qlocker Ransomware returns to attack QNAP NAS devices worldwide*

Defense firm Hensoldt announces ransomware attack*

Massive cyberattack paralyzes several Ukrainian government websites*

North Korean Hackers Are Stealing Millions From Cryptocurrency Startups Worldwide*

Group of financially motivated hackers targeting cryptocurrency startups*

Threat actors have compromised FIFA 22 accounts using social engineering techniques*

Vulnerabilities Patched by AWS That Exposed AWS Customer Information*

Sentinel LABS has released an unofficial patch for the privilege escalation vulnerability that affects all Windows* devices

OceanLotus Threat Group uses web files to install backdoors*

Magniber Ransomware Gang now uses signed APPX files in attacks*

Critical bug that Microsoft is fixing in the Windows* HTTP protocol stack

Apple fixed a persistent Denial of Service (DoS) bug called "doorLock"*

Ransomware operators use Log4Shell exploit to infect VMware Horizon* systems

Microsoft Patchday Security Advisory: January 2022*

New SysJoker backdoor actively targeting Windows, macOS and Linux* users

Threat Actors Deploying New RedLine Malware Via Omicron Statistics Counter Fake App*

KCodes NetUSB Kernel Module Bug Affects Millions of Routers Worldwide*

CISA warns federal agencies about old bugs that are still being exploited*

Threat Actor Group 'Patchwork' infects users with Ragnatela* malware

Researchers link 'Abcbot' botnet operation to cryptomining botnet operators Xanthe*

Threat actors targeting cybersecurity researchers and developers in a malware campaign*

Government Hackers Use New PowerShell Backdoor in Log4j* Attacks

Vulnerable open source NPM libraries "Cores" and "Forgers" break thousands of applications*

Linux version of AvosLocker ransomware that encrypts VMware ESXi* servers

Researchers discover a vulnerability like Log4Shell in the H2* database console

A new "Night Sky" ransomware targeting businesses*

Microsoft Warns of Continued Attacks Exploiting Bugs in Apache Log4j*

Y2K22 bug affects SonicWall email security and firewall products*

Hackers use BadUSB to attack defense companies with ransomware*

NHS warns of unknown hacker group exploiting Log4Shell on VMware Horizon*

FluBot malware operators targeting Europe posing as Flash Player application*

FinalSite affected by a ransomware attack that disrupted thousands of schools*

QNAP warns of attacks on NAS devices exposed to the Internet*

North Korean hacker group "Konni" attacks Russian Foreign Ministry*

Credential stuffing attacks affect 1.1 million users in 17 organizations*

US Online Pharmacy "Ravkoo" Suffers Data Leak After AWS Portal Hack*

Hackers abuse Google Docs commenting feature to plant malware*

FBI Warns of Ongoing Google Voice Authentication Scams*

Microsoft is releasing an emergency update to address Windows* Remote Desktop issues

Threat actors injecting Web Skimmer code to steal sensitive information*

US. Cellular announces data breach after hacking billing system*

McMenamins Hotel Chain Suffers Data Breach After Ransowmare Attack*

Apple iOS vulnerable to "DoorLock" denial-of-service errors*

Broward Health Company Announces Data Breach Affecting 1.3 Million People*

Threat actors deploying Purple Fox malware via malicious Telegram droppers*

Microsoft Releases Workaround to Resolve Exchange Server Outage*

Kyoto University loses 77TB of research data due to backup failure*

NETGEAR leaves six major vulnerabilities unpatched in its Nighthawk router*

PulseTV reveals data breach on 200,000 credit cards*

Researcher discovers vulnerability in Uber's email system*

New iLOBleed rootkit wipes data from compromised HP Enterprise servers*

AvosLocker Ransomware Group Releases Post-Decryptor Breaching US Police Force*

Firmware attack can leave persistent malware in hidden SSD area*

Chinese APT hackers use Log4Shell flaws to attack an academic institution*

Popular Cryptocurrency Trading Platform ONUS Suffers Ransomware Attack Via Log4j Hack*

Storage devices from different vendors affected by encryption software bugs*

Norwegian media giant Amedia suffers blackouts due to cyber attack*

Researchers reveal new automated cryptomining malware attacks with updated evasion tactics*

Apache releases Log4j 2.17.1 to fix remote code execution bugs*

RedLine malware steals passwords saved in Chromium*-based web browsers

BlackTech Cyberespionage APT targets Japanese companies using Flagpro* malware

Threat actors have attempted to compromise Master Passwords of LastPass users*

Researchers identify Riskware app infiltration in Samsung Galaxy Store*

Threat actors actively abusing MSBuild to run indicators of Cobalt attacks*

Photo service giant Shutterfly attacked by Conti* ransomware

The Ech0raix ransomware group is actively scanning for vulnerable QNAP NAS devices*

„Spider-Man: No Way Home“-Película-Torrent liefert Crypto-Mining-Malware*

Multiple vulnerabilities in Garrett metal detectors allow hackers to change settings*

Global IT service provider Inetum suffers ransomware attack*

Android banking Trojan spreads via fake Google Play Store page*

Blackmagic fixes critical execution bugs in daVinci code*

Dridex Operators Target Covid-19 Victims Through Omicron Phishing Spoofs*

Monangalia health system suffers from email breach affecting 400,000 people*

NVIDIA and HPE fix Apache Log4j library vulnerabilities in their products*

Researchers discover a new variant of Babuk* ransomware

Dell's new BIOS updates cause laptops and desktops to have trouble booting*

Apple fixes macOS vulnerability behind Gatekeeper bypass*

Researchers uncover a new phishing campaign targeting cryptocurrency exchange CoinSpot*

Threat actors delivering stealthy BLISTER malware to Windows* devices

Pro Wrestling Tees Announces Data Breach, 31,000 Customer Information Compromised*

Apache fixes two serious vulnerabilities in its HTTP* server

Bug in Microsoft Azure App Service exposes client source code repository*

CISA, FBI and NSA Launch Joint Scanner and Advisor for Log4j Vulnerabilities*

Chinese-language espionage group targeting the government and transportation sectors*

Researchers discover secret backdoors in the firmware of Auerswald's COMPACT 5500R phone system*

All generations of mobile phones, from vulnerable 2G to newly identified cellular network vulnerabilities*

FBI: Threat Actors Actively Using New Zoho Zero-Day* Since October 2021

Over 820,000 vulnerable WordPress sites under attack*

The PYSA ransomware group was behind the major attacks in November 2021*

Scammers impersonate pharmaceutical company “Pfizer” in phishing attacks*

Sony Life Insurance employee arrested for stealing $154 million

Hackers Take Over Vulnerable Windows Domains Through Elevation of Privilege Vulnerabilities*

Researchers suspect 'Cytrox' is spreading 'Predator' spyware on iPhones*

Cybercriminals infected the network of the US federal agency with a backdoor*

Malicious Android app spreads new Joker malware, infecting over 500,000 Android users*

Hackers distribute new Stealthy DarkWatchman malware via phishing emails*

Threat actors have revived TellYouThePass ransomware in Linux and Windows Log4j* attacks

Threat Actors Exploiting Log4j Vulnerability to Deploy Dridex* Banking Malware

Western Digital asks users to update their My Cloud devices*

Logistics company "Hellmann" warns users of BEC emails after ransomware attack*

Threat actors infected over 35,000 computers with the new PseudoManuscrypt* malware in 2021

Threat Actors Targeting Fans of the Spider-Man Franchise with Credit Card Harvest*

VMware fixes critical bug in Workspace ONE UEM*

Phorpiex Botnet resurfaces with a more sophisticated twist*

Khonsari Ransomware Group Targeting Self-Hosted Minecraft Servers*

Apache releases a new patch to fix the third Log4j vulnerability*

Researchers suspect that a new attack vector identified in Log4j exploits could expand the attack surface*

State-sponsored Iranian hacker abused Slack API to steal data from Asian airlines*

Leading US brewery and hotel chain "McMenamins" hit by Conti* ransomware attack

Log4j hackers move on to injecting Monero miners via RMI*

Credit card skimmers target the e-commerce industry through Magecart attacks*

DDoS mitigation service provider "Cloudflare" experiences widespread latency and wait times*

A new spy campaign targeting telecommunications companies in the Middle East and Asia*

Hackers steal Microsoft Exchange credentials using "Owowa"* backdoor

Threat actors start exploiting second Log4j vulnerability as third bug emerges*

Apple releases iOS update for remote jailbreak exploitation*

PyPi removes 3 Python packages suspected of installing a Trojan horse on victim systems*

Virginia IT Agency Suffers Ransomware Attack*

Kronos, Provider of Workforce Management Solutions, Suffers Ransomware Attack*

Over 300,000 MikroTik devices remain vulnerable to remote hacking exploits*

AWS suffers a second outage this month, affecting Twitch, Zoom, PSN, Hulu and others*

Vulnerabilities in Wi-Fi and Bluetooth chips allow hackers to steal passwords*

Researchers identify "ALPHV" as the most sophisticated ransomware of 2021*

Threat actors actively exploiting the Log4Shell vulnerability to distribute malware to vulnerable computers*

Partially Patched Dell Computer Drivers Still Vulnerable to Windows* Kernel-Level Attacks

Threat actors target German online banking users with new phishing campaigns*

Volvo Cars Suffers Ransomware Attack, R&D Information Revealed*

Investigators link 'XE Group' to eight years of credit card theft*

Apache Foundation releases security patch for second Log4j* vulnerability

Microsoft Patchday Security Advisory: December 2021*

Mojang Studios Releases Emergency Minecraft Update Amid Critical Log4j Vulnerabilities*

Threat actors launching Agent Tesla malware using PowerPoint macros in ongoing phishing campaigns*

Hackers Deploy Notorious "TinyNuke" Information Stealing Malware Targeting French Users*

Researchers Reveal the Building Blocks of the Widespread Banking Trojan Qakbot*

AWS announces the cause of a recent massive outage*

Research shows an active campaign exploiting over 1.6 million vulnerable WordPress sites*

17 Malicious NPM Packages Let Attackers Steal Discord Tokens*

Google releases an emergency Chrome update to fix zero-day for its Chrome browser*

South Australian government data breach reveals information on over 80,000 employees*

Threat Agents Targeting Enterprises Using New Zero-Day Exploit for Log4j* Java Library

StrongPity Hacker Group Ships Malware Containing Malicious Notepad++ Installers

Dark Mirai Botnet actively targets unpatched TP-Link routers*

Hackers Target US Universities Through Office 365 Phishing Campaigns*

Hikvision IoT devices vulnerable to attack by the Moobot botnet*

Emotet Malware now installs Cobalt Strike directly on infected devices*

Fujitsu Cites Violation of Japanese Ministries for Credential Theft by ProjectWEB*

Cox Communications Publishes Data Breach Post, Hacker Poses as Support Agent*

SanDisk SecureAccess bug allows brute force attacks on vault passwords*

Google fixes high severity Use-After-Free vulnerabilities in its Chrome browser*

SolarWinds Hackers Target Government and Corporate Organizations Worldwide*

Fake KMSPico software steals victims' cryptocurrency wallets*

Hackers use fake "spam notification" phishing emails to steal Microsoft* credentials

SonicWall fixes multiple security vulnerabilities in its SMA 100 series devices*

Grafana fixes zero-day bug after exploits spread via Twitter*

Popular Cloud Service Providers Affected by Multiple Eltima SDK Vulnerabilities*

AWS suffers outage affecting shipments from Ring, Netflix and Amazon*

QNAP warns users to protect NAS devices from Bitcoin miners*

Conti ransomware targets Scandinavian hotel group Nordic Choice*

Hundreds of SPAR stores experience major disruption in the North of England*

BitMart Crypto Exchange Loses $200 Million in Crypto Tokens After Hack*

Microsoft seizes domains used by Chinese state hacking group APT15*

Research reveals 17 malicious frameworks used to attack air-gapped networks*

Pakistani “SideCopy” Threat Actor Targeting Indian and Afghan Governments*

Malicious ad campaigns Proliferation of malicious Chrome extensions and backdoors*

Threat Actors Deliver "BRATA" Android Banking Malware Via SMS Phishing Campaign*

Researchers Reveal 14 New XS Leaks Attacks on Popular Web Browsers*

Finland's National Cyber ​​Security Center Warns of New Banking Malware Campaigns for Android*

Threat actors using the RTF template injection method in phishing campaigns*

Phishing actors are actively exploiting users through an Omicron* phishing campaign

Zoho fixes a critical ManageEngine bug that was exploited in the wild*

Spyware Pegasus is said to have hacked iPhones of the State Department and US diplomats*

Scammer convicted of stealing millions of dollars in crypto through SIM hijacking*

Threat actors promoting malicious Android apps to steal Malaysian banking credentials and MFA codes*

BlackByte Ransomware Group exploits proxy shell bugs to deploy web shells on vulnerable Microsoft Exchange servers*

New "NginRAT" Malware Actively Targeting E-Commerce Servers*

Planned Parenthood LA announces data breach following ransomware attack*

Threat actors proliferate Emotet via fake installation packages for Adobe Windows* applications

Four Android banking Trojans infected more than 300,000 Android devices in 2021*

Mozilla fixes a critical bug in its cross-platform cryptographic library*

TrickBot malware authors adopt new ways to evade detection*

Russian threat actors use Babadeda Crypter to avoid detection*

Hardware giant "HP" fixes critical bugs from 8 years ago in its multifunction printers*

Ohio-based DNA testing company, DNA Diagnostics Center, reveals data breach affecting 2.1 million people*

“Sabbath” ransomware operators target critical infrastructure in the US and Canada*

North Korean defectors and journalists targeted by new Chinotto malware*

Threat actors using compromised Google Cloud instances to mine cryptocurrency*

Maritime service provider "Swire Pacific Offshore" suffers ransomware attack*

Threat actors hide new Linux malware payload in cron jobs to steal credit card data*

Stealthy hacker group “WIRTE” targets Middle Eastern governments*

Researchers Warn of Attacks on Recently Patched Apache HTTP Server Vulnerability Exploited in the Wild*

Japanese multinational conglomerate Panasonic announces network attack after data breach*

Furniture retail giant IKEA's email systems affected by a cyber attack*

Researchers publish a new zero-day vulnerability in the Windows 10 Mobile Device Management service*

APT C-23 Hackers Target Middle Eastern Users With New Android Spyware Variant*

Researchers discover a new stealthy JavaScript malware that launches multiple Windows-based RATs*

Iranian Threat Actors Exploit Microsoft's MSHTML RCE Flaws to Steal Google and Instagram Credentials*

Group of advanced hackers targeting the bio-industry with a new strain of malware*

Researchers have linked North Korean attackers to multiple credential theft campaigns*

Malicious Python libraries steal Discord tokens and install reverse shells*

PHP deserialization error on CloudLinux Immunity360 can lead to remote code execution*

Corporate Cyber ​​Espionage Threat Group 'RedCurl' Strikes With New Hacking Tools*

Cisco fixes a critical bug in its Cisco ASA and FTD* firewalls

MediaTek chip failures affect 37% of all smartphones and IoT worldwide*

VMware fixes multiple vulnerabilities in vCenter Server and Cloud Foundation*

More than 6 million Sky routers vulnerable to takeover attacks for 17 months*

New "SharkBot" Android Banking Malware Hits Targets in US, UK and Italy*

US wind turbine giant Vestas suffers data breach*

Iran Airlines “Mahan Air” hit by cyberattack*

Threat actors actively exploiting the new Windows* installer zero-day flaw

US SEC Warns Investors About Ongoing Phishing Attacks*

Utah Medical Center suffers a data breach; 582,000 patient records stolen*

Threat actors hacking into vulnerable Microsoft Exchange servers to hijack internal email chains*

GoDaddy suffers a data breach affecting 1.2 million customers*

Android malware BrazKing returns with new stealth techniques*

Threat actors abusing the Glitch Cloud service to host ephemeral phishing sites*

APT Group has been using FatPipe VPN Zero Day Bug since May 2021*

Vulnerable e-commerce sites are allowing hackers to deploy new Linux* backdoors

Attackers using domain spoofing techniques to bypass malicious traffic*

Attackers distribute Emotet malware in new spam campaigns*

NETGEAR fixes pre-authentication buffer overflow bug affecting multiple products*

New TikTok phishing attack on influencer accounts*

Emotet Botnet returns with TrickBot* malware

Microsoft has released emergency updates to address Windows Server authentication issues*

Fixed NPM private package name leak and authorization fatal error*

The new version of Google Chrome 96 destroys the web applications of Twitter and Discord*

WordPress sites seeking to display fake ransomware notes*

Fatal errors detected in BIOS firmware affect multiple Intel* processors

Hackers actively target Alibaba ECS instances to deploy encryption malware*

Lazarus attackers target security researchers using the IDA Pro* Trojan application

The attackers hacked into FBI email servers to spread a spam campaign*

US retail giant Costco exposes data breach after identifying credit card skimmers*

A zero-day bug in the Windows User Profile service gets a free unofficial patch*

BotenaGo malware targets millions of routers and IoT devices with 33 exploits*

TrickBot hackers abused Microsoft's app installer in spam campaigns*

WP Reset PRO plugin allows attackers to hijack websites*

Netflix, Instagram and Twitter users target new Android malware*

TeamTNT Cybercrime Group actively targets vulnerable Docker servers*

German medical software company Medatixx suffers ransomware attack*

Palo Alto fixes several vulnerabilities in PAN-OS*

Clop Ransomware Gang now uses SolarWinds Serv-U vulnerability to attack*

Zombie-themed phishing emails infecting users with MirCop ransomware*

New Variant of Mekotio* Banking Trojan Discovered in the Wild

Microsoft Patchday Security Advisory: November 2021*

Microsoft has warned administrators to fix vulnerabilities in Exchange Server*

Cisco fixes issues with encrypted credentials and default SSH keys on its Catalyst PON switches*

Researchers reveal a critical RCE vulnerability in the TIPC module of the Linux kernel*

Scammers harvesting Microsoft O365 and Google logins via fake confirmation emails*

Researchers reveal two critical SQL injection bugs in Philips Healthcare IT solution*

Prominent stock trading platform "Robinhood" suffers data breach *

Electronics giant "MediaMarkt" hit by Hive* ransomware attack

Threat actors actively targeting Sitecore XP RCE bug fixed*

Central Depository Services (India) Limited announces data breach*

Babuk ransomware delivered via Microsoft Exchange ProxyShell* vulnerabilities

New Android rooting malware "AbstractEmu" takes control of mobile phones with root access*

CISA publishes catalog of known exploited vulnerabilities for various products*

UK Labor Party reveals ransomware attack following data breach*

Critical bug in Cisco Policy Suite Encrypted SSH key allows remote hackers to access root*

US defense contractor Electronic Warfare Associates (EWA) suffers data breach*

Google fixes actively exploited kernel bugs in its November Android patch*

Microsoft suffers outage and blocks access to Onedrive and Sharepoint files*

More than 30,000 unpatched GitLab servers vulnerable to critical RCE bugs have already been patched*

More than 1.6 million devices infected with Pink Botnet in China*

Investigators discovered several critical bugs in Pentaho Business Analytics software*

Threat actors used Amazon SES token stolen by Kaspersky in Office 365 phishing campaigns*

Threat actors distribute Chaos Ransomware via fake Minecraft "Alt List" text files*

Threat actors deploying Snake Infostealer malware via phishing emails*

Iranian Hackers Attack Israeli Web Hosting Provider Cyberserve*

Health system of a Canadian province affected by cyberattack*

Researchers Reveal New Spook Ransomware Engineered in Prometheus Code, All Victims Reveal*

Pirate sports broadcaster hacked into major US sports leagues and attempted to extort $150,000 from MLB*

Hive Ransomware Group releases new variants capable of encrypting Linux and FreeBSD devices*

Israeli internet company hit by ransomware attack led by Iranian hackers*

UMass Memorial Health Care Center suffers data breach*

Google fixes bug that caused Chromebooks to fail to enroll devices*

Google fixes two zero-day bugs in Chrome browser*

MacOS bug allows hackers to use rootkits*

OptinMonster Flaw WordPress plugin allows website hijacking*

Threat actors targeting YouTubers in phishing campaigns*

Cybercriminals deliver ransomware via malicious NPM packages*

Apple fixes 22 vulnerabilities in iOS and iPadOS* devices

Iranian gas station attacked by cyberattack*

Hackers use new Squirrelwaffle malware in spam campaigns*

Attackers used a new Yanluowang* ransomware in targeted attacks

Russian attackers deliver malicious documents in phishing campaign*

WordPress plugin bug can lead to outright takeover of vulnerable sites*

South Korean telecommunications company 'KT Corporation' suffers nationwide blackout*

CISA is recommended to fix a critical bug in the language software*

NPM library hijacked by an attacker to compromise Windows and Linux* devices

MacOS malware uses new evasion techniques*

The new PurpleFox backdoor uses WebSockets for C2 communication*

SCUF Gaming International suffers data breach: 32,000 customers affected*

Attackers spreading malware via Korean webhard and torrent sites*

New threat group targeting organizations in South Asia using custom malware*

Chinese attackers exploited Windows zero-day vulnerability in cyberattacks*

FBI Alerts on Fake Government Websites Used to Steal Sensitive Information*

The telecommunications company "Sinclair Broadcast Group" affected by a ransomware attack*

The University of Sunderland suffers a cyberattack*

Olympus US systems affected by a cyber attack*

Ecuador's largest bank "Banco Pichincha" hit by cyberattack*

Microsoft fixed compatibility issues in cumulative update KB5006674 for Windows 11*

Attackers use mathematical symbols in phishing campaigns*

Microsoft Azure customer affected by a large DDoS attack*

Microsoft Patchday Security Advisory: October 2021*

Apple fixes a zero-day bug in an emergency update to iOS 15.0.2*

Google fixes four serious bugs in its Chrome browser*

American Pacific City Bank attacked by AvosLocker* ransomware

Threat Actors Targeting Linux Devices With New FontOnLake* Rootkit

FIN12 Ransomware Group Aggressively Attacks Healthcare*

Cox Media Group announces ransomware attack following data breach*

Threat actors posing as "QuickBooks" in ongoing phishing campaigns*

Global beer company BrewDog reveals confidential information of 200,000 customers*

Researchers reveal new Android malware infecting Android phones*

Telco 'Syniverse' announces database breach *

Vulnerability patched by Microsoft prevents security updates for Azure Virtual Desktops*

Apache emergency update patched with incomplete fix for actively exploited bug*

Researchers reveal the UEFI bootkit that has been using Windows systems since 2012*

Live streaming platform "Twitch" suffers a massive data leak*

APT "ChamelGang" group targeting the fuel, energy and aviation industries*

Researchers reveal several critical deficiencies in Honeywell Experion PKS and ACE controllers*

Apache patches a zero-day vulnerability in its web server*

The Telegraph suffers a major data breach; Leaked 10TB database*

Researchers link different malware attacks to Chinese cyber-espionage group*

Unknown ransomware group encrypting VMware ESXi servers using Python script*

Industry publication Sandhills globally impacted by ransomware attack*

Misconfigured Apache Airflow servers lose credentials*

New Atom Silo Ransomware Group Targets Unpatched Confluence Servers*

Unpatched bug allows contactless payments from locked iPhones*

Threat actors target Commerzbank customers through new malware campaign*

Hackers Steal Crypto From Coinbase Clients With MFA Bug*

The "GhostEmperor" threat actor group backdoors Windows 10 systems with a rootkit*

WhatsApp, Instagram and Facebook suffer massive outage due to configuration error*

Google fixes two zero-day bugs in its Chrome browser*

Hackers distribute Flubot Android malware via fake security updates*

QNAP Fixes 3 Fatal XSS (Stored Cross-Site Scripting) Bugs Affecting NAS Devices*

MoneyLion Announces Credential Stuffing Attacks After Data Breach*

Neiman Marcus announces massive data breach; 4.3 million users affected*

Amnesty International's Pegasus rogue antivirus affects Windows* systems

JVCKenwood attacked by CONTI* ransomware

Threat actors hijack the Windows bootloader using the UEFI Bootkit*

Microsoft Warns of Cyber ​​Attacks on Active Directory FS* Servers

Hackers steal bank accounts of users of the PIX do Brasil payment system*

Researchers link new Tomiris backdoor to hackers behind SolarWinds* hack

The giant transport company "Forward Air" suffers a data breach*

Microsoft suffers an MFA outage; Blocked access to Microsoft 365 services*

Threat actors distribute new versions of Jupyter malware via MSI* installers

Threat actors steal financial data from 378 banking and wallet apps via "ERMAC" malware*

Various cyber attack campaigns abusing the Atlassian Confluence* RCE bug

Colossus ransomware targets a prominent US auto company*

Worldwide outage of the Twitter web client*

Threat actor targeting Indian government with commercial RATs as part of Operation Armor Piercer campaign*

QNAP fixes two critical bugs in its QVR* software

The well-known communication provider "Bandwidth.com" affected by a DDoS attack*

New "BloodyStealer" Malware Targets Popular Gaming Platforms*

Google fixes fatal zero-day bugs in its Chrome browser*

Researcher Posts Exploit Codes for 4 iOS Zero-Day Bugs on GitHub*

Microsoft Warns Organizations About Large-Scale Phishing-as-a-Service Operations*

Colombian Real Estate Company “Coninsa Ramon” Suffers Data Breach*

Scammers target users in the US and Canada with new Android malware*

SonicWall addresses a critical security vulnerability in its SMA 100* series products

Threat Actors Exposing Web Shells Through Nagios RCE Vulnerabilities*

Researchers Reveal Remote Code Execution Bugs in AWS WorkSpaces*

NETGEAR patches a vulnerability in its routers that allows remote code execution*

Threat actors using BitRAT to attack South American organizations through spam campaigns*

Cisco fixes three critical bugs in its IOS XR* software

Apple fixes a zero-day bug used to hack iPhones and Macs*

Threat Actor Group FamousSparrow is breaking into hotels around the world via ProxyLogon* exploits

Cyber ​​criminals deploy rootkit via new bug in Microsoft Windows*

Threat actors target companies in Latin America with new banking Trojan*

Threat actors deploy new malware campaigns to mine cryptocurrency*

Cring Ransomware Group is actively exploiting ColdFusion vulnerabilities patched decades ago*

Microsoft Exchange Autodiscover Flaw leaks 100,000 Windows credentials*

Russian threat actors use TinyTurla malware as a secondary backdoor*

VMware has patched a critical arbitrary file upload vulnerability in its vCenter Server*

Researchers have discovered a new zero-day vulnerability in macOS Finder*

Republican Governors Association servers breached by Microsoft Exchange cyberattack*

A US farmers' cooperative suffered a BlackMatter* ransomware attack

More than 1.4 million COVID-19 test results issued by various hospitals in Paris*

Scammers Sending Spam Emails To Promote Elon Musk-Themed Cryptocurrency Scams*

VoIP.ms affected by a DDoS attack; Multiple services affected*

AMD fixes an information disclosure bug in its chipset driver*

Travis CI, a leader in integration services, fixes a critical security vulnerability*

Researchers uncover 'Operation Layover' phishing campaign targeting the airline industry*

Threat actors using new malware to compromise the Windows Subsystem for Linux* environment

Tamil Nadu public administration affected by ransomware attack*

NETGEAR fixes third critical bug in its smart switches*

Microsoft fixes a critical open management infrastructure bug affecting Azure cloud services*

Adobe fixes 36 critical security vulnerabilities in its products*

Threat actors pose as the US Department of Transportation to steal Microsoft* credentials

South African Department of Justice Suffers Ransomware Attack*

Microsoft warns about information leaks in Azure* container instances

Cybercriminals use new Linux Cobalt attack beacons during ongoing cyberattacks*

Nitro Software fixes a remote code execution bug in its Nitro Pro PDF*

Threat actors distribute new ZLoader malware using fake TeamViewer* installer

Millions of PCs Affected by HP Omen* Privilege Escalation Bug

Microsoft Patchday Security Advisory: September 2021*

Telecom provider "MyRepublic" suffers data breach*

New Android Banking Trojan Dubbed "S.O.V.A" Emerges with Increasing Capabilities*

TeamTNT Hacker Group steals credentials using new open source tools*

Apple Fixes Zero-Click iPhone Exploit Using Pegasus Spyware*

Google fixes 2 zero-day bugs in its Chrome browser*

"FudCo" Spam Empire is affiliated with a software company based in Pakistan*

Howard University Suffers Ransomware Attack Shutting Down Network*

Threat actors targeting Kurdish ethnic groups through mobile spyware attacks*

New Windows Day 0 attack targeting users via weaponized Office documents*

Meri's botnet launches a DDoS attack with 22 million RPS*

Cisco is fixing several critical bugs in its IOS XR software*

Threat actors leaked 500,000 Fortinet VPN credentials on Hacker Forum*

Zoho fixes critical vulnerability in its ManageEngine ADSelfService Plus* solution

Critical bug in HAProxy leads to HTTP request smuggling attack*

FIN7 group provides a backdoor into Windows 11 alpha-themed Word documents*

Bug in Ribbonsoft's dxflib library allows attackers to remotely execute commands*

New malware family uses CLFS log files to evade detection*

Threat actors hacked into the Jenkins project's Confluence server to install Monero miners*

NPM, Package Manager fixes a critical bug in the Package Pac resolver*

Microsoft links SolarWinds Serv-U SSH zero-day attack to Chinese hackers*

NETGEAR fixes critical bugs in its smart switches*

Threat actors take advantage of the confluence bug to install cryptocurrency miners*

Billions of multi-vendor Bluetooth devices remain highly vulnerable to BrakTooth bugs*

Dallas Public School suffers data breach*

Immigration Canada is accepting an additional 7,300 applications in the TR-to-PR program due to a technical error*

Cisco Fixes Critical Authentication Bypass Bug in NFV Infrastructure Software (NFVIS)*

More than 60,000 parked domains were vulnerable to domain hijacking attacks*

Autodesk Attacked by SolarWinds Hackers Using Sunburst Backdoor*

LockFile Ransomware Bypasses protection through intermittent file encryption*

Microsoft Exchange ProxyToken flaw allows attackers to access users' email messages*

Multiple Vulnerabilities Identified in Fortress S03 Wi-Fi Home Security Systems*

Threat actors selling GPU-based malware via hacker forums*

Annke fixes a stack-based buffer overflow bug in its video surveillance product*

Synology announces Open SSL vulnerabilities affecting its NAS devices*

Attackers abusing proxy applications to monetize malware campaigns*

QNAP announces OpenSSL bugs affecting its NAS devices*

New York Credit Union Announces Insider Threat; 21 GB of sensitive data destroyed*

Google app bug prevents users from making and receiving calls*

Attackers distribute phishing emails via open redirect links*

Researchers warn users of four emerging ransomware clusters*

FIN8 Threat Group Attacks Financial Institutions With Sardonic Backdoor*

US computer retailer in the crosshairs of new SideWalk* backdoor

Critical F5 BIG-IP vulnerability affects customers in sensitive industries*

VMware fixes four major bugs in the vRealize Operations Manager API*

Microsoft Power App loses 38 million sensitive data records due to misconfigured tables*

Threat actors are actively exploiting 15 vulnerabilities to hack Linux systems*

Microsoft Warns Customers About Azure Critical Cosmos DB Vulnerability*

Cisco fixed a critical bug in its APIC software*

The Boston Public Library experiences a system-wide outage*

Cyber ​​criminals using BazaLoader malware via fake DDoS notifications*

Emsisoft Releases Free Decryptor for SynAck* Ransomware Victims

Compromised WhatsApp mod delivering malicious payloads via supply chain attacks*

Threat actors share ShadowPad malware among Chinese spy groups*

NSO Group Deploys Pegasus Spyware Through New Zero-Click iPhone Exploit*

OpenSSL vulnerabilities can be exploited for various cyberattacks*

ACROS Security releases a micropatch to fix the PetitPotam bug*

Mozi, an IoT botnet, targets network gateways and IoT devices*

Threat actors actively exploiting newly disclosed vulnerabilities in the Realtek SDK*

AT&T denies data breach after hackers auctioned off 70 million user databases*

Google publishes information about Windows AppContainer vulnerabilities without patches*

Cloudflare foils the largest DDOS attack ever recorded*

Microsoft Exchange servers attacked by the new LockFile* ransomware

SAC Wireless, a subsidiary of Nokia, reveals a data breach after the Conti* ransomware attack

Phishing campaign used XSS flaw on UPS website to spread malware*

Vulnerable Microsoft Exchange servers are targeted by ProxyShell* vulnerabilities

Attackers used the Citrix* vulnerability to access US Census Bureau servers.

Critical vulnerability discovered in the Universal Plug-and-Play (UPnP) service of several Cisco routers*

BadAlloc Bug Affects BlackBerry QNX Real-Time Operating System (RTOS)*

Chase Bank suffers data breach due to technical failure*

Data exfiltration attacks can bypass Cisco security products*

Ransomware Attacks Affect Rural Maine Wastewater Treatment Plants*

Memorial Health System, Florida, Suffers Ransomware Attack*

Attackers targeting multiple users in Mexico via the Neurevt* Trojan

Adobe fixes critical vulnerabilities in Photoshop*

Critical bug in ThroughTek peer-to-peer (P2P) SDKs affecting millions of IoT devices*

Fortinet delays fix of zero-day bug in its Web Application Firewall (WAF)*

Various Realtek related bugs affecting their Wi-Fi SDKs; Impact on nearly a million IoT devices*

Tokyo Navy Branch in Singapore Suffers Ransomware Attack*

Threat actors selling Ficker's information-stealing malware as malware-as-a-service (MaaS)*

Iranian government-affiliated hacker groups conducting cyber-espionage activities in Israel*

Attackers use "CAPTCHA" images to trick users into ignoring browser warnings*

Brazilian State Treasury suffers ransomware attack*

Threat actors can exploit Middlebox-related bugs for reflected TCP augmentation*

Threat actors spread WarzoneRAT via compromised WordPress sites*

TA505 Threat Group Installation of ServHelper RAT with new techniques*

Various STARTTLS related bugs found in popular email clients*

Trend Micro fixes wild zero-day vulnerabilities*

T-Mobile Suffers Massive Data Breach; Data theft of 100 million customers*

The infamous AlphaBay Darknet marketplace has reopened*

Microsoft has detected hackers using Morse code in phishing campaigns to evade detection*

Threat actors using CAPTCHA-protected phishing campaigns*

Scammers posing as FINRA in an ongoing phishing campaign*

Various flaws in the Wodify Fitness platform allow hackers to take control*

New AdLoad malware variant evades Apple's XProtect defenses*

Ford breakdown reveals sensitive information from internal systems*

Attackers can now eavesdrop on DNS traffic through flaws in managed DNS services*

Intel Releases Patches for Critical Bugs in NUC 9 Extreme Laptops and Linux* Ethernet Drivers

Cinobi Banking Trojan Targets Cryptocurrency Exchange Users Through Malvertising*

One Million Stolen Credit Card Details Leaked on Carding Marketplace*

Gigabyte suffers a RansomEXX* ransomware attack

Microsoft confirms another zero-day error in the Windows print spooler*

Accenture hit by LockBit* ransomware attack

Attackers stole $600 million worth of cryptocurrency*

Researchers revealed eCh0raix ransomware targeting NAP and Synology NAS devices*

Microsoft Patchday Security Advisory: August 2021*

Adobe has patched several critical vulnerabilities in its products*

Russian federal officials targeted by Chinese threat actors*

Chinese threat actors target prominent Southeast Asian telcos*

The city of Joplin suffers a ransomware attack*

FatalRAT Trojan uses Telegram*

New FlyTrap malware puts thousands of Facebook accounts at risk*

New Chinese Spyware Used in Widespread Cyber ​​Espionage Attacks*

VMware parchea las vulnerabilidades de Access and Identity Manager de Workspace ONE*

INFRA:HALT errors affect the built-in TCP/IP stack, widely used in OT devices*

Cisco: Firewall Manager RCE error is a zero-day entry patch*

Go & Rust languages ​​affected by critical IP address validation flaw in "net" library*

Leak in New York Public Schools; confirm employees*

Threat actors are actively exploiting vulnerable home routers*

Sun marker malware targeting the healthcare and education sectors*

The attacker scans Microsoft Exchange servers for a ProxyShell vulnerability*

New APT Threat Group Targeting Microsoft IIS* Servers

Google has patched several serious vulnerabilities in the Android operating system*

BlackMatter ransomware Linux variant that encrypts VMware ESXi* machines

New Vultur Android malware abuses accessibility services*

Energy Group ERG reports minor outages after ransomware attack*

Google fixes various Chrome vulnerabilities*

New Cobalt Strike DoS Vulnerability Allows Attackers to Shut Down Servers*

Advanced Technology Ventures reveals a data robot attack*

Cisco fixes pre-authentication vulnerabilities in its VPN routers*

Romanian Cryptojacking Attackers Target Linux* Devices

Multiple TransLogic Firmware Vulnerabilities Discovered; Major Impact on North American Hospitals*

The Lazio region of Italy suffers a ransomware attack*

New Meteor malware in Iranian rail attack*

Fixed various vulnerabilities in WordPress Download Manager*

Fixed a serious HTTP vulnerability in Node.js*

Russian attackers compromised email accounts of the Federal Prosecutor's Office*

New vulnerabilities could allow attackers to compromise Zimbra's server via email*

Researchers discover new Haron* ransomware gang

A new removal of .Stolen ransomware from disk snapshots Post-disk encryption*

LockBit 2.0 Ransomware uses Group Policy to encrypt Windows domains*

Attackers compromised Chipotle's marketing account to send phishing emails*

Multiple bugs discovered in 3 open source software*

DarkSide Ransomware Gang returns as a new BlackMatter Ransomware*

Attackers install PlugX malware variant on compromised MS Exchange servers*

Northern Ireland suspends post-COVID data breach certificate service*

Attackers posing as aerobics trainers to attack employees*

Android Trojan distributed by APT attackers via Syrian e-government portal*

UC San Diego Health suffers data breach after phishing attack*

Oracle fixes critical bugs in its products*

LemonDuck malware targeting Windows and Linux* systems

Signal fixes a critical bug in its Android versions*

Apple fixes a zero-day exploit exploited in the wild*

XCSSET malware for MacOS targets Telegram accounts and Google Chrome data*

Researchers announce 3 zero-day failures in Kaseya Unitrends backup solution*

Kaseya Receives Universal Decryptor Tool to Help Victims*

Critical vulnerabilities reported in Etherpad*

The Campbell Conroy & O'Neil law firm suffered a ransomware attack*

Malicious NPM package steals Chrome passwords on Windows via recovery tool*

China raped dozens of pipeline companies between 2011 and 2013, federal authorities say*

Akamai suffers a DNS failure; Known websites and online services affected worldwide*

Dell patches 3 critical vulnerabilities in OpenManage Enterprise Service*

Atlassian fixes a critical vulnerability in its Jira Data Center and Jira Service Management Data Center products*

Ecuador's state-owned CNT Telco suffers a ransomware attack*

Juniper fixed several bugs in its products*

Attackers using Remco's RAT via Visual Basic*

Microsoft seizes homoglyphic domains used in BEC* campaign

Saudi Aramco Suffers Data Breach; 1TB of stolen data for sale*

A 16-year bug affects millions of HP, Samsung and Xerox printers*

Bug discovered in Fortinet allows attackers to run code as root*

WIFIDemon leads to remote code execution attacks on iOS devices*

Card attackers use unique techniques to evade detection*

Cisco fixes major bugs in its ASA and FTD* software releases

Pegasus Spyware infects the mobile devices of prominent employees around the world*

WildPressure APT targets Windows and macOS systems via a new malware variant*

Google fixes zero-day vulnerability in its Chrome browser*

D-Link fixes several security vulnerabilities in its router version v1.13B03* DIR-3040*

Scammers Target Comparis Group Users After Ransomware Attack*

Multiple vulnerabilities in NuGet packages affect the .NET* platform

Windows Hello Authentication Bypass Vulnerability Patched by Microsoft*

Recent ZLoader malware attacks use a new macro-related delivery method*

Sage X3 fixes several security vulnerabilities in its Enterprise Resource Planning (ERP) product*

Attackers spread BazarBackdoor malware via nested RAR and ZIP archives*

SonicWall warns of impending ransomware attacks on SMA 100 and SRA* VPN devices

VMware fixed crashes in ESXi and ThinApp applications*

Chinese hackers use SolarWinds Zero-Day to attack US defense companies*

The new victim's computer screen shows a live feed of the BIOPASS RAT*

Passwords generated by Kaspersky Password Manager used in brute force attacks*

Adobe Patch Tuesday - July 2021 Security Notice*

Microsoft Patchday Security Advisory: July 2021*

Kaseya fixed several VSA bugs exploited in REvil* ransomware attack

Flaws in Cisco BPA and WSA can lead to privilege escalation attacks*

Mitsubishi Electric corrected bugs in air conditioning control systems*

A fashion retailer suspected of a data breach after a ransomware attack*

SolarWinds fixes a zero-day bug that was exploited in the wild*

Insurance company CNA suffers data breach after ransomware attack*

Mint Mobile Suffers Data Breach; Hackers Porting Victims' Phone Numbers*

Morgan Stanley reports data breach after provider reported Accellion hack

Nobelium Hacking Group allegedly accessed Microsoft* customer support tools

Cryptomining scam targeting victims via rogue Android apps*

Malspam campaign delivering Cobalt Strike payloads masquerading as Kaseya VSA Security Update*

Microsoft fixes a critical edge bug that leads to UXSS* attacks

CISA announces 15 vulnerabilities affecting Philips Vue Healthcare products*

Pro-Trump social media site GETTR suffers data breach*

QNAP fixes critical bug in NAS backup and disaster recovery solution*

Insurance giant AJG reports data leak after ransomware attack*

Wizard Spider Threat Actor Group Linked to New Diavol* Ransomware

NETGEAR Fixes 3 Critical Bugs in DGN-2200v1 Series Routers*

Microsoft urges Azure users to update their PowerShell tool*

Threat actors hacked Mongolian certificate authority to deploy backdoors*

Threat Actors Targeting Unpatched Cisco ASA Devices Aggressively Launch PoC*

Kaseya Suffers Massive Ransomware Attack; Hundreds of businesses affected worldwide*

Giant Retailer Closes 500 Stores After Kaseya Ransomware Attack*

Microsoft Releases Emergency Patch for Windows Zero-Day PrintNightmare* Vulnerability

Attackers target Microsoft Halo development servers through dependency hijacking*

Law Enforcement Seizes Servers for DoubleVPN Service*

WD storage devices vulnerable to ongoing cyberattacks*

LinkedIn suffers data breach, data of 700 million users exposed*

DarkRadiation Ransomware Group targets Linux and Docker instances*

Threat actors using WIM files to bypass security solutions via phishing emails*

Microsoft signs rootkit malware disguised as Windows* drivers

Unpatched bugs in PlingStore applications can lead to supply chain attacks*

Scammers pose as FINRA support in new phishing campaign*

Fortinet parchea 2 vulnerabilidades en su Web Application Firewall (WAF)*

High Severity Vulnerabilities Detected in Vulnerable NVIDIA Jetson Chipsets*

Spam campaign hides 'handwritten' links in Tinder profile pictures*

Pakistani Hackers Target Indian Energy Company With ReverseRat*

Mercedes-Benz suffers data breach*

Multiple errors in Dell SupportAssist; Affects 30 million PCs*

Researchers discover a vulnerability in the 2G* mobile data encryption standard

Conti Ransomware Gang leaked subpoena documents from the City of Tulsa Police Department*

MassNotify Covid-19 tracking app will automatically install on Android phones in Massachusetts*

Fixed a critical vulnerability in the VMware Carbon Black application control*

A partially fixed bug in SonicWall affecting 800,000 firewalls*

Open Design Alliance SDK Vulnerabilities Affecting Multiple Vendors*

South Korea's nuclear research agency was hacked with a VPN bug*

Multiple vulnerabilities discovered in Schneider PowerLogic* devices

Zephyr RTOS fixed several bugs in its Bluetooth LE stack*

Health giant Fleury Group suffers ransomware attack*

Palo Alto Networks has patched a critical vulnerability in Cortex XSOAR*

Fixed Microsoft high noise bug on Windows 10*

Threat actors send fake blackmail emails posing as the DarkSide Gang*

Wegman's supermarket chain suffers a data breach*

Andariel Hacking Group Targets South Korean Industry With New Malware Campaign*

Polish officials in the crosshairs of Russian cyberattacks*

Russian Consumer Watch bans VyprVPN and Opera VPN services*

Gelsemium hackers target NoxPlayer with supply chain attack*

Reproductive Biology Associates Clinic Sofre Ataque de Ransomware*

Critical bug in ThroughTek allows spying on millions of cameras*

Newly discovered iPhone bug may disable iPhone Wi-Fi functionality*

Researchers Warn of SolarMarker Malware Deployed Via SEO Poisoning*

Attackers circumvent Office 365 MFA in BEC* attacks

Attackers can access victim information through a vulnerability in Microsoft Power Apps*

Instagram bug allows attackers to see user's private account details*

Propane service provider AmeriGas announces a data breach*

Cake Box suffers a data breach; Customer credit card numbers disclosed*

Clop ransomware gang suspects arrested in Ukraine*

Fixed Google zero-day bug in Chrome web browser*

Scammers send fake billing devices to steal cryptocurrency*

Thousands of VMWare vCenter servers remain vulnerable to remote code execution attacks*

Apple fixed 2 zero-day crashes on iOS devices*

Hackers can spy on Samsung Mobile users with pre-installed apps*

Interpol took down several fake online pharmaceutical websites*

The Spanish Ministry of Labor and Social Economy suffers a cyberattack*

Shutdown of the Avaddon Ransomware group*

Grocery store giant Edward Don temporarily closes due to ransomware attack*

7 Year Privilege Escalation Polkit Bug Affecting Linux* Devices

McDonald's announces data breach; Customer and Employee Information Disclosed*

Audi and Volkswagen Suffer Data Breach; 3.3 million customers affected*

Supermarket giant JBS pays $11 million to REvil Ransomware Group*

The famous video game company Electronic Arts suffers a data breach*

WAGO controller failures can cause interruptions in the industrial process*

Stolen Slilpp credentials seized by police*

Rapid CDN outage affected multiple sites*

The latest Necro Python malware has new exploits and cryptomining capabilities*

Phishing campaign targeting the United States Financial Services Commission (FINRA)*

Memory and Storage Vendor ADATA Suffers Ransomware Attack*

Vulnerability patched by Microsoft in the MSGraph* component

PuzzleMaker Threat Actors Targeting Windows 10 Systems with Chrome-day zero*

STUN servers abused by DDoS attacks*

New Siloscape malware targets Windows containers to access vulnerable Kubernetes clusters*

Attackers actively target vulnerable VMware vCenter servers*

Google fixed several critical bugs in the latest Android security updates*

Adobe fixes 41 vulnerabilities in 10 products*

Intel patches 73 vulnerabilities*

Microsoft Patchday Security Advisory: June 2021*

EvilCorp cybercriminals impersonate PayloadBIN to evade US sanctions*

US truck manufacturer Navistar announces data breach*

Cisco fixes high-risk vulnerabilities in various products*

Open Source Stolen Credentials Disclosure App Have I Been Pwned*

Software de ataque de ransomware Nantucket Steamship Authority*

Researchers reveal a critical bug in Realtek's Wi-Fi module*

Threat actors using SkinnyBoy malware with malicious MS Word documents*

Threat actors bypass ransomware defenses in antivirus solutions through whitelisted apps*

Huawei fixed privilege escalation bug on its USB LTE dongle*

FUJIFILM suffers a ransomware attack*

North Korean hacking operation against South Korean government entities*

Various Cisco, Akamai, and Linux Products Affected by Lasso* Library Vulnerability

Multiple vulnerabilities reported in industrial switches from multiple vendors*

Swedish health authority shuts down SmiNet database after multiple hacking attempts*

Attackers exploit critical zero-day bug in WordPress* plugin

Researchers have revealed two new attack techniques that alter the content of the certified PDF document*

New phishing campaign detected targeting Walmart users*

Two domains used in Nobelium* phishing campaign seized

Food giant JBS temporarily shuts down due to cyber attack*

BazaLoader campaign distributes phishing emails to compromise users' Windows systems*

FBI Reports Attackers Exploiting Unpatched Fortinet Devices*

Researchers warn of Facefish backdoor infecting Linux* devices

A new bug in VSCode extensions may lead to supply chain attacks*

Siemens fixes a high-severity memory protection bypass in its PLCs*

Canada Post reports data breach following vendor ransomware attack*

Threat actors distribute the AnyDesk Trojan installer through a malicious advertising campaign*

SolarWinds Hackers Deploy New "NativeZone" Backdoor Through New Supply Chain Attack*

Technical error in the Klarna mobile app reveals user data*

New Epsilon Red ransomware abuses unpatched Microsoft Exchange servers*

Threat actors actively exploiting a command injection flaw in on-premises SonicWall NSM products*

TPG shuts down legacy TrustedCloud service after data breach*

Threat actors using Data Wiper malware disguised as ransomware*

Checkbox poll fixes arbitrary code execution bug exploited in the wild*

Attackers impersonate devices via recently discovered Bluetooth bugs*

HPE fixes critical zero-day bugs in Systems Insight Manager (SIM)*

Office 365 error when sending email from Exchange Online and Outlook to the spam folder*

Malware attack paralyzes Siegfried Group's network*

Multiple Japanese authorities suffer data breaches in a supply chain attack*

Hackers Sent Racist Registration Emails Pretending To Be From Walmart*

Zeppelin ransomware is back in action with updated malware*

Apple fixes a zero-day bug in the TCC Framework*

Japan dating app omiai data breach; Data from more than 2 million exposed users*

VMware fixes critical remote code execution bug in vCenter*

CryptoCore campaign to hack cryptocurrency exchanges around the world*

Scheme flood vulnerability allows hackers to identify users*

Florida Water Treatment Plant Suffered Cyber ​​Incident Before Poison Attack*

Ivanti fixes a high severity vulnerability in Pulse Connect Secure VPN*

Electronics giant Bose reports data leak after ransomware attack*

Trend Micro Patches 3 Vulnerabilities in Home Network Security Appliances*

Menacing Actor Behind Infamous UPMC Breach Convicted; He faces 7 years in prison*

Apple 3 Days Zero patches affect macOS and tvOS* devices

Microsoft releases mock tool for attack scenarios*

23 Misconfigured Android Apps That Leak Users' Personal Information*

Google fixes Chrome browser crash on Windows 10 and Linux* platforms

Google fixes heap-based buffer overflow vulnerability in Chrome*

CNA Financial paid a $40 million ransom to Evil Corporation*

FBI Warns Organizations About Conti* Ransomware

E-commerce giant Mercari suffers massive data breach in Codecov* incident

QNAP warns organizations about the impact of Qlocker ransomware on vulnerable HBS devices*

Stolen Dominos India data for sale on the Dark Web*

Air India hacked; Leaked information on 4.5 million passengers*

Android releases fixes for 4 new zero-day vulnerabilities*

New malware campaign offers fake ransomware*

Slack messaging app experiences major outage*

WP Statistics plugin vulnerability affected over 600,000 WordPress sites*

Magecart hackers using a PHP-based backdoor via website favicons*

New Bizzaro Banking Trojan Targets European and South American Banks*

Experts Warn of Continued AutoHotkey-Based Malware Attacks*

FBI Warns of Targeted Phishing Campaign Spreading Advanced Malware*

Student insurance provider Guard[.]me suffers a data breach*

Insurance giant AXA hit by ransomware attack*

Threat actors deploying Lizar malware under the guise of an ethical hacking tool*

APT36 group imitates legitimate Indian military and defense organizations*

Monday[.]com source code accessed by Codecov hackers*

Toshiba subsidiary hit by DarkSide Ransomware Group*

Cisco behebt Zero-Day-Bug im Cisco AnyConnect Client*

Access to Rapid7 source code in Codecov Supply Chain Attack*

AMD fixes two bugs that bypass AMD's SEV protection system*

Snip3 Crypter Service providing multiple RAT types*

Hackers deliver malware via Microsoft Build Engine files*

Citrix Patch Vulnerability in Workspace app for Windows*

New Phishing Scam Using Cryptocurrency Recovery Phrases Via Twitter*

Hacking of the colonial oil pipeline; $5 million ransom paid*

QNAP warns of zero-day error on Roon servers*

Herff Jones suffers data breach*

New Lorenz ransomware affects multiple organizations around the world*

Brenntag trick; $4.4 million ransom paid*

DarkSide ransomware servers seized after postcolonial pipeline attack*

Lemon Duck Crypto Miner Strikes Again*

Irish Health Services Report Ransomware Attack; $20 million ransom demanded*

Threat Actor Reveals Stolen Data to D.C. Police after the Columbia hack*

FBI and ACSC warn of Avaddon* ransomware attacks

VideoLan fixes automatic update error in VLC Media Player*

Ransomware attack in the city of Tulsa, USA*

All WiFi devices are vulnerable to FragAttacks*

A new Qualcomm vulnerability affecting Android*-based mobile devices

Over 25% of outbound Tor relays spied on user activities on the dark web*

Fixes 19 Google bugs without Chrome 90.0.4430.212*

New Twitter feature shows sensitive information*

Cuba ransomware partners with Hancitor for spam attacks*

Jones Day Law Firm Affected by Data Breach*

Attackers Exploit Authoritative DNS Servers via TsuNAME* DNS Bug

Errors in NatWest Bank scheduled payments can cost customers money*

Russian hackers allegedly exploit 12 vulnerabilities in the wild*

New stealthy rootkit targeting high-level organizations*

Twilio and HashiCorp Report Cyber ​​Attacks Following Codecov Supply Chain Hack*

The UNC2529 threat group distributes three new malware strains via phishing emails*

Six critical unresolved bugs discovered in the remote mouse app*

Foxit Fixes Remote Code Execution (RCE) Vulnerability in Foxit Reader*

Colonial pipeline suffers alleged ransomware attack*

Microsoft Edge crashes when playing YouTube*

Scammers posing as "SNL on Elon Musk" in a cryptocurrency scam*

VMware corrige un error crítico en vRealize Business for Cloud Virtual Appliance*

HP Enterprise fixes a critical bug in the Edge Platform Tool*

New Windows "Pingback" Malware Using ICMP for C2* Operations

N3TW0RM ransomware targeting companies based in Israel*

Alaska's judicial system went offline in a cyberattack*

21Nails Exim Critical Bugs Affecting Vulnerable Linux Servers*

Network Solution and Register.com report a DNS failure*

Tesla car hacked remotely with drones*

Dell fixes 12 year old bug in DBUtil* BIOS driver

Insight Global Insider Threat publishes information on COVID-19*

Complexcodes sells basic malware based on "WeSteal"* signatures

Chinese attackers target Russia's largest nuclear submarine designer*

A new malspam campaign distributing the Rust*-based Buer malware variant

Intel and AMD chips are vulnerable to Spectre* side channel attacks

Pulse Secure Fixes VPN Zero-Day Vulnerability*

LuckyMouse is designed for multiple organizations through the system upgrade toolkit*.

Critical IP address validation vulnerability found in Python*

Mount Locker ransomware uses new tricks to evade detection*

ISC fixes various BIND vulnerabilities in DNS servers*

Researchers uncover a new Iranian state-sponsored ransomware campaign*

SolarMarket RAT uses Google SEO tactics to attract victims*

First Horizon Bank Hacked; $1 million stolen*

2 Apple fixed zero-day vulnerabilities in iOS*

Chinese hackers target military organizations in Southeast Asia*

Insidious backdoor infecting Linux* systems

FBI Shares 4 Million Email Addresses Stolen From Emotet Botnet*

PHP Composer bug ends in widespread supply chain attacks*

Hotbit Crypto Exchange Crashes After Cyber ​​Attack*

Stolen ParkMobile customer details exposed online*

Whistler Resort Town Suffers Ransomware Attack*

Microsoft discovered critical code execution bugs in IoT and OT devices*

DigitalOcean data breach reveals customer billing information*

Court of Rio Grande do Sul Suppresses Ransomware Attack*

Attackers use SonicWall zero-day for ransomware attacks*

F5 Reveals KDC Spoofing Vulnerability in BIG-IP Consoles*

UnitingCare, Queensland Systems Derrubados*

UK Merseyrail rail network affected by Lockbit ransomware*

Google fixes critical RCE vulnerability in Chrome*

Stolen MangaDex Database Leaked Online*

NTLM Relay Attack Exploits Vulnerability in Windows* RPC Protocol

Guilderland Central Schools Affected by Malware Attack*

Apple iCloud mail server failure*

Fake Microsoft DirectX 12 employing crypto-stealing malware*

DC Columbia Police Hacked; Redemption required*

Oilfield services giant Gyrodata announces data breach*

Microsoft Teams is down*

Attackers spread FluBot malware through Android devices*

Prometei botnet operators exploiting dubious Microsoft Exchange servers*

New cryptomining malware turns vulnerable Windows and Linux devices into bots*

Hacker Leaks 20 Million BigBasket Data for Free*

Critical RCE bug reported in homebrew package manager *

Hackers Leverage PulseSecure to Deploy SUPERNOVA* Malware

Qlocker malware encrypts QNAP devices with 7zip*

Twitter mistakenly sends spam emails*

ToxicEye Trojan abuses Telegram to steal data*

PasswordState is the latest victim of supply chain attack*

WhatsApp Pink Malware automatically responds to Skype, Signal and other messengers*

Idle online exchange; Microsoft 365 outage affects email delivery*

Pareto Android Botnet Attacks Smart TV Ads*

1.3 million Windows RDP Server credentials found on hacker forum*

Fixed several security vulnerabilities in Google Chrome*

Microsoft partially fixes vulnerability in Windows 7 and Server 2008 R2*

Attackers infect the Google Play Store through fake apps*

Data breach reported by Eversource Energy*

Attackers are actively exploiting vulnerabilities in 4 Pulse Secure*

Attackers Target Multiple Networks in Supply Chain Attack Following Codecov Data Breach*

Gang Revil tried to blackmail Apple through an alleged Quanta hack

Resolving zero-day vulnerabilities in SonicWall Email Security*

Remote Code Execution Vulnerabilities Discovered in Cosori Smart Air Fryer*

"Tag Barnakle" malicious ad campaign compromises 120 ad servers*

Attackers hack Android devices remotely via WhatsApp blocking*

Lazarus APT uses BMP images to distribute Trojans*

Geico suffers data breach; Stolen Insured Driver's License Numbers*

Researchers found a campaign that imitated the Microsoft store, Spotify websites and the chess app*

WordPress fixes XXE crash in PHP 8*

Domino's India database hacked; 10 lakh credit card details leaked*

Critical Remote Code Execution Vulnerability Discovered in Juniper Devices*

Attackers exploit a critical bug in Facebook's live video feature*

Multiple reported vulnerabilities in the EtherNet/IP stack for industrial systems*

spread malware through Xcode projects; Infection of Apple M1*-based Macs

Attackers steal credentials via Operation Overtrap*

Fortinet launches a new variant of FormBook*

Hackers gained access to the Capcom* ransomware attack through a vulnerable VPN device

Critical zero-day vulnerability found in Desktop Window Manager (DWM)*

Swinburne University, Australia, suffers a data breach*

Twitter suffers global blackout*

Google lanza Chrome 90*

Cyberattack at the University of Hertfordshire, UK*

Tata Communications data leaked through Route Mobile*

More than 100 million devices are vulnerable to DNS exploits*

Attackers manipulate popular app stores to distribute malicious apps*

Researchers Reveal Second Chrome Zero-Day Exploit*

SAP fixes critical bugs in SAP Commerce, NetWeaver and Business Client*

Android spy RAT "BRATA" strikes back*

New phishing campaign using fake antivirus billing alerts*

Hidden malware without Fake Browserify NPM package*

Adobe fixes 10 vulnerabilities in various products*

QBot operators use QBot and IcedID malware as final payload*

Malicious Facebook Ads Dropping Malware on Systems*

Bakker Logistics suffers a ransomware attack*

Microsoft Office 365 phishing campaign avoids detection with malicious Javascript code*

10 malicious apps in App Gallery infected with Joker malware*

Microsoft Patchday Security Advisory: April 2021*

New malware "Saint Bot" that steals user passwords*

IcedID malware distributed via contact forms*

hacked swarm store; More than 600,000 stolen records discovered*

Pharmaceutical giant "Pierre Fabre" suffers REvil* ransomware attack

Several Gigaset Android smartphones are infected with malware*

New Android malware automatically spreads to devices via WhatsApp autoresponders*

Lazarus Hacking Group contraataca con Vyveva Backdoor*

Rockwell Automation fixes 9 critical vulnerabilities in FactoryTalk AssetCentre*

VISA warns of the increase in web data theft attacks*

LinkedIn data breach; Data from 500 million users published on the dark web*

Unpatched Fortinet VPN devices are exploited by Cring ransomware*

Cisco fixes vulnerabilities in Cisco SD-WAN vManage software*

Chinese Hackers Attack Vietnam's Government and Army*

A new spear phishing campaign using malware using language-changing software*

Attackers Target Companies with New “Janeleiro” Banking Trojan*

Hackers Deploy "more_eggs" Malware Through Fake LinkedIn Job Ads*

The European Commission and EU organizations suffer from cyberattacks*

Booking.com fined $560,000 for DPA*

VMware fixes critical RCE bug in Carbon Black cloud workload*

Data from 279+ "fan-only" accounts posted online*

TU Dublin and National College of Ireland suffer ransomware attack*

Attackers actively exploit unpatched SAP applications*

Hackers Exploiting the "BITS" Component of the Windows* Operating System

$38 million gift cards sold by cybercriminals on Russian hacker forum*

Fixed Microsoft Outlook "This item cannot be sent" error*

Clop Ransomware Gang publishes sensitive data from various universities online*

Attackers Target Japanese Industries With Multiple Backdoors*

Fake jQuery plugin delivering malware to systems*

Electronics manufacturer "Asteelflash" suffers from REvil* ransomware attack

Brown University Suffers Cyber ​​Attack*

US Department of Justice Warns of Fake Phishing Campaign for Covid-19 Vaccine Research*

FBI and CISA warn of attacks on unpatched Fortinet FortiOS servers*

Threat actors attempt to blackmail Ubiquiti after data breach*

Researchers report an increase in DDoS ransomware attacks*

Fake pen testing company 'SecuriElite' targets security experts*

Facebook data breach; Data from 533 million exposed users*

Citrix fixes several hypervisor vulnerabilities*

SolarWinds fixes four vulnerabilities in the Orion platform*

Attackers hacked PHP's Git server to add backdoors*

Malicious Android "System Update" malware compromises devices*

Members of the German Bundestag are the target of a spear phishing attack*

BazarCall malware infecting systems through malicious phone calls*

New 5G vulnerability allows denial of service and data access attacks*

Detected campaigns targeting players via malware hidden in game mods and cheats*

Fat Face Announces Data Breach; Pay $2 million ransom*

VMware fixes two critical bugs in vRealize Operations Manager*

Harris Federation affected by a ransomware attack*

Slack shuts down a new feature due to security concerns*

npm fixes a critical network vulnerability in the "netmask" library*

OpenSSL fixes two high severity vulnerabilities*

Microsoft fixes Windows 10 Secure Boot vulnerability*

Weintek fixes remote code execution bugs in its product line*

Evil Corporation uses Hades ransomware to evade detection*

Fixed two critical vulnerabilities in a WordPress plugin*

FBI Alerts on Mamba Ransomware*

Mobiwik Data Breach; Data from more than 5 million exposed users*

Threat actors exploiting critical flaws in GE's Universal Relay products*

Apple fixes zero-day vulnerability in Webkit* browser engine

Backblaze reports data breach; 9245 user metadata exposed*

Cloudflare's new Page Shield feature reports malicious JavaScript dependencies*

Purple Fox operators target vulnerable Windows systems*

Two dozen malicious Chrome extensions spread malware around the world*

Microsoft fixes elevation of privilege bug in PSExec*

Multiple vulnerabilities discovered in Cisco Jabber*

Adobe fixes critical vulnerability in ColdFusion*

CISA and FBI warn of phishing attacks spreading TrickBot* malware

Colorado and Miami Universities Suffer Data Breach Due to Vulnerable FTA Accellion Servers*

High availability server maker Stratus suffers ransomware attack*

Shell suffers a data breach due to the use of vulnerable Accellion FTA servers*

Attackers exploiting vulnerable Qualcomm graphics components on Android* devices

CNA Insurance Company Suffers Ransomware Attack; New malware family used*

IoT Maker Sierra Wireless Reports Ransomware Attack; Website offline*

Attackers take control of vulnerable Apache OFBiz ERP through RCE* vulnerability

Phishing campaigns bypassing secure email gateways*

Fake COVID-19 Aid Check Phishing Emails Download Dridex Trojan*

Threat actors hacked into Windows, iOS and Android users via zero-day attacks*

Mirai Botnet exploits critical vulnerabilities in network security devices*

MangaDex closed after a cyberattack*

Black Kingdom ransomware exploits zero-day errors in Microsoft Exchange servers*

Ministry of Transport Warns Several Indian Government Organizations About Threats of Cyber ​​Attacks*

Fake Telegram desktop app downloads AZORult* malware

CISA Launches CHIRP SolarWinds* Malicious Activity Detection Tool

CopperStealer-Malware kapert Social-Media-Konten*

DDoS-as-a-Service uses Citrix devices*

New XcodeSpy malware targets iOS and macOS* developers

Acer suffers a ransomware attack; $50 million ransom demanded*

Zoom screen sharing bug exposes sensitive data to unauthorized users*

Post-error Microsoft files are missing in SharePoint*

Phishing campaign targets US taxpayers*

Pysa ransomware targets educational institutions in the US and UK*

Twitter image can be misused to hide malicious files*

Hackers leak stolen data through JPG files*

Hackers accessed SolarWinds source code, according to Mimecast*

Ransomware attack on smart city in Pune district costs project operators US$50 million*

RTM and Quoter ransomware targeting Russian financial and transportation companies*

A time zone error that crashes the iOS clock app*

Microsoft Releases Mitigation Tool for Exchange Servers Affected by ProxyLogon Hack*

WeLeakInfo Pirate Site Hacked *

Phishing domains can now detect virtual machines with JavaScript*

Blender Software Developer Reports Cyber ​​Attack*

Researchers Discover Nim-Based Malware Exploit Devices*

Microsoft suffers from failure; Multiple services affected*

Banking Trojan Metamorfo abuses AutoHotKey to steal user information*

Threat actors exploiting Avira Antivirus to spread banking Trojans via DLL sideload attacks*

New ZHtrap Botnet Malware Turns Infected Targets Into Honeypots*

Fixed three privilege escalation vulnerabilities in the Linux kernel*

Threat Agents Exploiting Linux-Based Systems With New RedXOR* Malware

A new zero-day vulnerability in WordPress allows website takeover*

Google fixes zero-day vulnerability in Chrome*

Mozilla fixes Linux bugs, Apple Silicon bugs Firefox 86.0.1*

Molson Coors reports power outage*

Windows 10 emergency updates fix printing errors*

Researchers Unveil New Powerful Version of BADHATCH PoS* Malware

The State Employment Agency suffers a ransomware attack*

New DEARCRY ransomware exploiting vulnerable Microsoft Exchange servers*

OVH data center reports massive outage*

Second cyberattack on the Norwegian Parliament*

Maryland attorney seizes fifth domain used in COVID-19 vaccine phishing attacks*

Hackers accessed Verkada's live surveillance cameras*

iPhone Call Recorder app reveals people's conversations*

F5 BIG-IP released fixes for critical remote code execution vulnerabilities*

Microsoft Releases 3 New Malware Strains That Are Not SolarWinds Hack*

Microsoft Patchday Security Advisory: March 2021*

GitHub users were forcibly logged out to fix a security bug*

9 Android app in the Google Play Store powered by Malware Dropper*

Researchers reveal side-channel attacks on vulnerable Intel CPUs*

Global aerospace technology provider "SITA" suffers massive data breach*

Apple fixes remote code execution vulnerability in WebKit*

Adobe-Corrige-Falhas para Creative Cloud, Connect y Frame-Maker*

Researchers Reveal New Tor-Based "gafgyt"* Malware

New Sarbloh ransomware encrypts victims' files for political agenda*

Flagster Bank suffers a data breach due to the use of vulnerable Accellion FTA servers*

Google Chrome blocks port 554 as a countermeasure to NAT slipstreaming attacks*

European banking authorities hacked Exchange servers*

Microsoft phishing attack stealing user credentials*

More than 15 UK schools have been affected by a cyber attack*

Several Cisco products are subject to DoS attacks due to the Snort* vulnerability

Microsoft Releases Tool to Check ProxyLogon Security on Exchange Servers*

Microsoft Outlook violated; More than 20,000 organizations affected worldwide*

Supermicro Vulnerabilities, Pulse Secure Patches in BIOS and UEFI Products*

Attackers hide ObliqueRAT Trojan in image files using steganography*

GRUB2 fixes several high severity vulnerabilities in the bootloader*

Over 6,700 VMware Servers Exposed After Exploit Code Released*

Hackers implant malware on compromised websites using SEO techniques*

More than 100 Italian banks attacked by the Ursnif Trojan*

VMware fixes remote code execution vulnerability in View Planner*

Attackers target investors through BEC* campaigns

CompuCom Suffers Malware Attack Leading to Service Outage*

Botnet campaigns abusing Bitcoin blockchains and deploying skidmap malware*

AOL phishing campaign reports stolen user credentials*

Researchers Discover DoS Vulnerability in Eclipse Jetty*

Qualys suffered a data breach due to a zero-day vulnerability in the Accellion FTA server*

PrismHR experiences major outages*

Malaysia Airlines announces data breach*

Chinese cybercriminals exploit 4 zero-day vulnerabilities in Microsoft Exchange*

Universal Health Services lost $67 million in Ryuk ransomware attack*

Google fixes zero-day vulnerability in Chrome*

Dependency Confusion Vulnerability Exploited to Steal Linux/Unix* Password Files

Ransomware attack on aviation giant Bombardier*

Dutch e-ticket platform ticket counter suffers data breach*

Chinese hackers target Indian power grids and seaports*

Global dairy leader Lactalis hit by cyberattack*

Drive corruption vulnerability in Windows 10*

LazyScripter Actors Target Airlines With Remote Access Trojans*

A new variant of Ryuk ransomware was observed to self-propagate on the local network*

Cisco Fixes Critical Severity Authentication Bypass Vulnerability in Cisco ACI MSO*

Sequoia Capital Suffers Data Breach After Failed BEC Attack*

FriarFox browser extension for Tibetan organizations*

Windows 10 BSOD issues have been fixed with Intel* wireless driver updates

Gaper online dating app vulnerable to multiple critical zero-day bugs*

The US Federal Reserve suffers a major default across the country*

Researchers reveal a possible code injection bug in the NodeJS "system information" library*

TD Bank recovery from a system-wide bank failure*

XBOX Live suffers a global outage*

Accellion vulnerability exposes pharmacy and staff data in Kroger data breach*

Keybase fixes a bug that exposes deleted sensitive media to attackers*

Threat actors deploying new variants of MINEBRIDGE RAT via Word documents*

Powerhouse Management suffers large-scale DDoS attacks*

WACUP fixes various bugs in Winamp Media Player*

More than 8 million leaked COVID-19 test results*

TietoEVRY's IT services suffer from a ransomware attack*

Microsoft begins beta testing of Windows 10 21H1*

VMware fixes critical non-vCenter* RCE bug

Python Software Foundation fixes two vulnerabilities*

US shares information about AppleJeus* malware

LinkedIn experiences two hours of global outage*

Fake Adobe Flashplayer update installs an adware bundle*

Brave Browser's "Tor Mode" filters onion queries in DNS traffic*

Giant Underwriters Laboratories (UL) certification suffers from ransomware attack*

Magecart Hackers Steal Credit Card Information Via Google Apps Script*

Attackers target Apple's M1 chip via malicious adware extension*

Cuba ransomware triggers privacy breaches in US cities and agencies*

Dutch Research Council (NWO) Victim of a cyber attack*

RIPE NCC suffers a Credential Stuffing attack*

OpenSSL Project releases a new patch for three new vulnerabilities*

VMware Patch Vulnerability in vSphere Replication Software*

Windows 10 Secure Boot Patch exposes BitLocker recovery keys*

Kia Motors USA suffers major IT outage*

EMSISOFT discloses internal log data generated by its test products*

EXMO Cryptocurrency Exchange Suffers DDoS Attack*

Researchers reveal unpatched vulnerabilities in SHAREit for Android OS*

Yandex Insider Threat Compromises 4,887 Customer Accounts*

Telegram's "Top Secret" feature makes self-destructing media files visible to attackers*

Siemens fixes various vulnerabilities in virtualization software*

PayPal fixes XSS vulnerability in currency conversion feature*

More than 30 mobile health applications that reveal records of millions of users*

Fortinet Patches Multiple Vulnerabilities in SSL, VPN, and Web Firewall Products*

Fixed critical XSS vulnerabilities in WordPress NextGen Gallery plugin*

Windows Kernel Escalation Bug Zero-Day Privilege Fixed in Microsoft Patch Tuesday*

CISA warns of serious security vulnerabilities in Fuji electrical products*

Researchers reveal multiple vulnerabilities in YouPHPTube and AVideo*

Dairy Suffers REvil* Ransomware Attack

C-level executives targeted by phishing attacks*

Over 3 Million Confidential Cook County Court Files Exposed*

Mozilla improves Firefox security against super cookies and disables support for Adobe Flash*

Role of Microsoft Azure vulnerable to privilege escalation and Docker leak*

Various iOS, iPadOS and tvOS vulnerabilities patched by Apple*

Law Enforcement Agencies Worldwide Shift Emotet Ransomware Gear*

Oscorp: Android malware to steal credentials*

Lebanese Cedar APT Targeting Telecoms, Hosting, and ISPs Worldwide*

North Korean hackers target security researchers*

Cisco reveals multiple vulnerabilities in small business routers*

Researchers reveal critical vulnerabilities in F5 BIG-IP* products

Religious services known as "The Temple" suffer a DoS attack*

Linux systems are attacked by FreakOut* malware

QNAP Warns Users About Dovecat Crypto Miner Malware*

Microsoft reveals methods used by SolarWinds Hacker Group to evade detection*

Stolen data from 1.9 million Pixlr users available on free forums*

Explicit User Data Leaked From Adult Social Media Platform*

Data of 4.1 million AnyVan users at risk of data breach*

VLC Media Player fixes multiple remote code execution vulnerabilities*

Cisco fixes PreAuth remote code execution vulnerabilities*

LiveCoin Crypto Exchange Shut Down After Cyber ​​Attack*

Microsoft is enabling full automation support for Microsoft Defender AV*

Cisco Fixes Windows DLL Injection Vulnerability in Cisco AnyConnect Secure Mobility Client*

Malware Raindrop does not observe the SolarWinds hack*

FireEye Releases Tool to Detect SolarWinds Hacking Techniques*

SolarWinds Malware "Raindrop" Hidden Unmodified 7Zip Source Code*

Oracle releases critical patches quarterly*

Multiple Twitter Accounts Hacked in "Elon Musk" Crypto Scam*

Malwarebytes attacked by SolarWinds* threat actors

Apple removes vulnerable macOS features in macOS 11.2 Beta 2*

Mistakes by cybercriminals expose stolen credentials in plain sight*

Threat actors bypassing two-factor authentication for multiple cloud service accounts*

Microsoft fixes zero-day vulnerability in Defender Antivirus*

Google bans 164 offensive Android apps from the Play Store*

Mozilla releases security updates for Thunderbird*

Scammers blackmail Coinmama users for pornographic backlinks*

Hard drive corrupted by Windows 10 error via command line *

The NSA urges organizations not to use third-party DNS resolvers*

Bitdefender Releases Free Decryptor for DarkSide Ransomware Victims*

The Scottish Environmental Protection Agency (SEPA) suffers a Conti* ransomware attack

Microsoft announces zero login errors in Windows app mode*

Threat Actors Compromising Mimecast SSL Certificates*

Investigators discover United Nations data breach*

Screensaver bypass vulnerability in Linux Mint* operating system

Nohow International UK Cloud Data Breach*

Threat actors exploiting the Windows "finger command" through a phishing campaign*

Large-scale data breaches targeting the Russian Federation in 2020*

Over 390,000 user data at risk in Capcom data breach*

DoS vulnerability in RockWell Automation's RSLinx Classic software*

Fractured COVID-19 vaccine data leaked online via hacker forums*

Fake Trump scandal video spreading QNode* malware

SolarWinds Threat Actors Access Department of Justice Email Servers*

FBI Warns Organizations About Egregor Ransomware*

Pysa ransomware hits Hackney Council, leaked data is for sale*

The FIN7 hacking group uses the JSSLoader* malware

Indian government websites reveal test results of COVID-19 patients*

Campanha Earth Wendigo exfiltrating emails through JavaScript backdoor*

British Airways plans £3bn breach-of-contract liquidation*

A group of North Korean hackers attacks the supply chain, targeting stock investors*

Multiple vulnerabilities in Fortinet FortiWeb WAF lead to arbitrary code execution*

Phone and email scammers posing as ACSC*

Ransomware attack paralyzes Funke Media Group*

ElectroRAT malware extracts funds from 6,500 digital wallets*

Lake Regional Healthcare suffers a ransomware attack*

NameSouth data breached by NetWalker* ransomware group

2017 Saber Corporation Data Breach Lawsuit Ruling*

Microsoft's Windows Core Polaris Leaked Online*

Data from 10,000 hacked American Express cardholders*

Hello from Vodafone. Mobile suffers a data breach affecting 2.5 million user records*

Hackers launch fraudulent attacks that leverage smart home devices*

SolarWinds supply chain attack led hackers to access Microsoft source code*

Secret Backdoor Account Discovered in Various Zyxel Firewall and VPN Products*

CISA Releases Sparrow.ps1 Tool for Azure/M365*

Japanese aerospace company Kawasaki warns of data breach*

Japanese game developer Koei Tecmo suffers a data breach*

FreePBX Developer Sangoma Technologies Attacked by Conti Ransomware*

Authentication Bypass Vulnerability in SolarWinds Orion API*

Whirlpool attacked by Nephilim* ransomware

Adobe Flash Player is reaching End of Life (EOL)*

Chase Bank Security Alert Email Phishing Campaign*

Cisco IP Phone TCP Packet Flood Denial-of-Service-Schwachstelle*

Smart doorbell devices easily attacked by hackers*

Bulletproof VPN service shutdown by cybercriminals*

Bouncy Castle Authentication Bypass Vulnerability*

Grupo chino APT Operation StealthyTrident*

Reported Critical Vulnerabilities in Dell Wyse Thin Clients*

Ransomware threat actors using "SystemBC" malware as a backdoor*

QNAP fixes high severity vulnerabilities in NAS devices*

CrowdStrike launches a reporting tool to check Azure AD permissions*

Chinese mobile phone giant Xiaomi records millions of private internet and phone users*

Al Jazeera journalists attacked by Pegasus* spyware

VMware Vulnerability Exploited in SolarWinds* Supply Chain Attack

Credential-stealing malware targeting financial institutions*

Clop ransomware attack detected in Symrise*

Microsoft Defender blocks known malicious SolarWinds binaries*

Mozilla releases security fixes for various vulnerabilities*

Sextortion Campaign for iOS and Android Users via Goontact Spyware*

New Windows Trojan Steals Browser Credentials and Outlook Files*

Multiple vulnerabilities discovered in 5G* network architecture

WordPress Contact Form 7 Emergency plugin released*

MoleRat APT variant steals sensitive data*

Unauthenticated command injection flaws expose D-Link VPN routers to attacks*

Android Frog Iranian Malware Spying on Instant Messaging Platforms*

Samsung fixes critical Android bugs*

Adobe releases security updates*

Leaked COVID-19 Vaccine Data*

Ransomware attack on Netgain* technologies

70 lakh Indian cardholder data leaked on the dark web*

FireEye Red Team security test and evaluation tools stolen by government-sponsored hackers*

Microsoft Patch Tuesday Security Advisory: December 2020*

Ransomware attack on a television production company – Banijay Group SAS*

Maze in Cannon ransomware attack*

DeathStalker APT Group offers hack rental service*

Security Researchers Accidentally Discover Windows Zero-Day*

Bandook malware targeting multiple industries*

Windows 10 20H2 update fixes broken in-place update feature*

Non-security updates for Microsoft Office products November 2020*

Advanced Persistent Threat Attack gegen US-Threat-Tank*

Huntsville City School District Closed Due to Ransomware Attack*

Ryuk ransomware attacks online school platform K12*

Malicious npm packages Installation of remote access trojans*

IoT Chipmaker Advantech Hit by Conti Ransomware*

Gootkit-Malware regresa con REvil Ransomware*

Novo-Malware CursedGrabber*

Delaware County Hit by DoppelPaymer Ransomware Attack*

Hackers target COVID vaccine maker AstraZeneca*

Peatix Event Management Organization - Inbox Privacy Attack*

LidarPhone Attack turns smart vacuums into microphones*

Data Breach at Mercy Iowa City Hospital*

More than 300,000 hacked Spotify accounts*

Industrial control system vendors warn of critical failures*

Cisco Webex Phantomfehler*

China-sponsored cybercriminal group targets Japan-affiliated organizations*

Cisco Webex Meetings* API Cross-Site Scripting Schwachstelle

Mozilla lanza Firefox 83*

Unprotected database exposed to scam targeting over 100,000 Facebook accounts*

Mount Locker ransomware targeting TurboTax* files

Chinese APT Group FunnyDream*

Attacking the supply chain by spreading malware in South Korea*

APT "Hackers for Hire" is aimed at financial and entertainment companies*

Multiple vulnerabilities in Cisco Security Manager Software*

New Jupyter malware phishing campaign*

Makeover technique to bypass Office 365*

Critical vulnerabilities discovered in the world's largest Android TV maker*

E-shops with a vulnerable version of Magento*

Cobalt Strike Toolkit source code shared online*

Critical remote code execution vulnerability in Oracle WebLogic Server*

Animal Jam Kids Virtual Playground suffered a data breach*

Vulnerabilities in Unity Orchestrator SD-WAN*

High severity vulnerability in Cisco IOS XR Software*

Zero-day vulnerabilities in Chrome*

Australian government warns healthcare industry of ransomware attack*

Mozilla releases security updates*

xHunt Hackers Attack Exchange Servers*

Ransomware attack on software provider Blackbaud Cloud*

Ransomware lands on X-Cart* e-commerce software platform

Ubuntu GNOME Display Manager vulnerability allows root access*

Ransomware attack on Australian media surveillance company*

Scammers posing as the IRS for payment fraud*

Adobe releases security updates*

WordPress Sites Open to Ecommerce Code Injection Attacks Bug Welcart*

Fake Microsoft Teams updates malware campaign*

Critical security updates for various Intel* products

Ghimob Banking Trojan*

Ransomware attack on the Italian brand of alcoholic beverages - Campari*

Microsoft Patchday: November 2020*

Pay2Key-Ransomware*

Real social media app revealed*

Critical vulnerabilities in the SaltStack* IT infrastructure management solution

Phishing attacks on Russian industrial companies*

Arbitrary code execution vulnerability in Cisco AnyConnect*

Multiple vulnerabilities in Google's Android operating system*

Multiple vulnerabilities in Adobe*

Folksam Data Breach*

Bigbasket suffers a data breach: the data of 2 million users is now for sale on the Dark Web*

Apple fixes iOS three zero days*

Capcom affected by Ragnar Locker Ransomware*

Dridex botnet steals bank details*

Various security updates from VMware*

Used USB drives reveal confidential information from previous owners*

Nuevo Google Drive-Phishing-Kampagne*

Cyberattack on the Vermont Health Network*

Alibaba's online store RedMart suffers a data breach*

Bank phone numbers are falsified to scam victims*

Windows Zero-Day Vulnerability Publicly Disclosed*

Massive data breach of Nitro software*

Harvest Finance Cryptocurrency Service Hacked: $24 Million Stolen*

New Emotet delivery method discovered*

Cyber ​​attacks hit schools and universities*

Patients blackmailed in Finland*

Red de bots Kashmir Black*

Multiple vulnerabilities in Fujitsu M12 servers*

IT service provider Sopra Steria attacked by Ryuk* ransomware

Fixed high severity vulnerabilities in NVIDIA GeForce Experience*

SQL injection vulnerability in Rapid7 Nexpose*

Information disclosure vulnerability in the Linux kernel*

Multiple security vulnerabilities identified in WAGO* Cloud Connectivity Controllers

Browser blocking scam campaigns*

Various security updates from VMware*

Zero-Click Vulnerabilities Identified in Linux* Bluetooth Software Stack

Browser address bar spoofing vulnerabilities in various mobile browsers*

Multiple vulnerabilities in HP Intelligent Management Center (IMC) software*

High severity router vulnerability in Cisco IOS Software XR*

Various security updates for the Google Chrome browser*

gravity rat*

Increase in scams related to QR codes*

The latest version of Chrome and Edge generates random log files*

Multiple vulnerabilities in Magento CMS*

Various vulnerabilities in SonicWALL Sonic OS*

Multiple vulnerabilities in the F2FS* toolkit

Juniper Networks releases security updates*

APT Silent Librarian*

Unprotected home security camera clips posted online*

Microsoft shuts down the TrickBot* malware network

Double extortion ransomware attack against Software AG*

Denial of Service Vulnerabilities in Allen-Bradley's Flex I/O System*

Critical Update for Adobe Flash Player* Application Patch

Microsoft Patch Tuesday: End of 2020*

Microsoft fixes critical remote code execution vulnerabilities*

Information disclosure vulnerability in Apache Tomcat*

Fitbit Spyware-Zifferblatt*

MontysThree malware used in targeted industrial espionage attacks*

Critical vulnerabilities found in QNAP Help Desk leading to device takeover*

New Kryptojacking variant: Black-T*

Vulnerability in Apple's T2 Mac Security Chips*

Google releases patches for 50 vulnerabilities in Android systems*

Trump Health Email Phishing Campaign Offers BazarLoader Trojans*

Cisco fixes several vulnerabilities*

BAHAMUT: contract hacking service*

Bugs in leading antivirus software leading to privilege escalation*

Facebook Ends China-Sponsored SilentFade Malware Campaign*

Botnetz HEH*

APT attack injects malware into Windows* error report

Ransomware reaches COVID-19 clinical trial*

Various vulnerabilities in the Google Chrome browser*

Iranian Hackers Exploit Zerologon* Vulnerability

Massive data breach by state government in India*

MosaicRegressor Malware Framework UEFI-Firmware-Bootkit*

DDoS attacks by ransomware attack groups*

Group APT XDSpy*

Backdoors do not use Microsoft 365 and Azure Active Directory or the AADInternals PowerShell module*

Vacina-Ransomware Racine*

Token de phishing para acceso OAuth a Microsoft Office 365*

Egregor-Ransomware*

Interplanetary Storm botnet infects 13,000 Mac and Android devices*

Multiple vulnerabilities in Wireshark Packet Analyzer*

Palmerworm Spy Campaign*

Swatch shuts down IT systems to prevent cyber attacks*

Operation Sidecopy launches attack against defense forces in India*

Microsoft removed 18 apps from Azure AD*

Microsoft Windows XP source code leaked online*

Multiple vulnerabilities in Apple products*

247,000 Microsoft Exchange servers vulnerable to RCE*

An error sin Windows Server 2016*

Magento credit card theft malware*

Federal agency hit by cyberattack*

Chalubo DDoS botnet targets unsecured SSH servers*

SUS hospitals affected by ransomware attack*

End of support phishing campaign for Windows 7*

Microsoft Office 365 outage reported in the US and Australia*

Joker Trojan Horse*

Taurus* malvertising campaign

Cisco fixes several security vulnerabilities*

APT-C-43 steals military secrets*

Microsoft Outlook Recruitment Campaign*

installment mode*

Instagram Heap Buffer Overflow Vulnerability*

Release of Mozilla Firefox 81*

Automated MEOW attack*

RansomExx Ransomware ataca de Tyler Technologies*

Phishing campaign targeting AT&T Global employees*

TinyCryptor-Ransomware*

Multiple vulnerabilities in the Google Chrome browser*

Mozilla-Bug – Firefox-Android*-Browser-Hijacking

Maze Attackers adopt the Ragnar Locker VM technique*

Chinese hackers attack US authorities*

Multiple vulnerabilities in Apple Safari*

Malware ZShlayer*

Chinese hacker group APT41*

Email Phishing Scam*

Malware MrbMiner*

MFA Bypass Vulnerability in Microsoft 365*

Botnet Multimodulares Prometheus*

Emotet Malware New spam campaign*

Criptominerador Lemon Duck*

Qakbot* malicious software

Glupteba Trojan