Tag: Softpedia News / Security

Google Expands End-to-End Encryption for Gmail on the Web

Google has recently announced that Gmail for the web is getting client-side encryption for more customers. Already available for some Workspace subscribers, the client-side encryption in Gmail on the web is being expanded to Workspace Enterprise Plus, Education Plus, and…

PayPal Officially Announces Support for Passkeys

PayPal has officially announced the support of passkeys, as the company wants to increase the security of user accounts and therefore provide customers with a more secure method of logging in. Stepping away from passwords is something that many tech…

PayPal Officially Announces Support for Passkeys

PayPal has officially announced the support of passkeys, as the company wants to increase the security of user accounts and therefore provide customers with a more secure method of logging in. Stepping away from passwords is something that many tech…

Revolut Hacked, User Data Exposed

Revolut has recently been the target of a cyberattack, with the company confirming in emails sent to customers that a small number of user accounts have actually been exposed. Worth knowing is that the breach didn’t result in any theft…

Revolut Hacked, User Data Exposed

Revolut has recently been the target of a cyberattack, with the company confirming in emails sent to customers that a small number of user accounts have actually been exposed. Worth knowing is that the breach didn’t result in any theft…

LastPass Confirms Security Breach, No User Data Exposed

LastPass has publicly acknowledged a security incident, revealing that a developer account was compromised, with cybercriminals managing to access portions of the source code and some proprietary technical information. The security breach took place earlier this month, LastPass says, and…

Google Chrome Gets Emergency Security Update

Google has released an emergency security update for Google Chrome, as the company is patching a 0-day vulnerability in the browser. While not too many specifics have been offered, the vulnerability is already being exploited in the wild, with Google…

Signal Says It Wasn’t Hacked, No Attack at All

This article has been indexed from Softpedia News / Security Signal has long been considered one of the most secure messaging platforms, but a few days ago, rumors circulating online indicated the service got hacked and the data of users…

Google Paid $8.7 Million in Bug Bounties Last Year

This article has been indexed from Softpedia News / Security Bug bounty programs have become an essential tool in the security arsenal of every large company out there, as researchers are therefore encouraged to submit their findings in exchange for…

Google, Microsoft To Invest $30B in Cybersecurity

This article has been indexed from Softpedia News / Security Following sophisticated cyberattacks that targeted critical infrastructure, organizations and governments around the world, Microsoft, Amazon, Apple, IBM and Google pledged to invest a total of $30 billion in cybersecurity advances…

Kaspersky: Kanye’s Upcoming Album is a Scam Magnet

This article has been indexed from Softpedia News / Security Cybercriminals are launching a new scam to take advantage of the release of Kanye West’s Donda album by distributing malicious fake downloads on the Internet, according to Tech Republic. Cybersecurity firm…

Chinese Developers Reveal Android Gamers’ Data

This article has been indexed from Softpedia News / Security A vpnMentor investigation found that a 134 GB server owned by EskyFun is exposed and user data was leaked for game titles such as Metamorph M, The Three Kingdoms Legend,…

Work from Home Increased Worldwide Phishing Attacks

This article has been indexed from Softpedia News / Security Over the course of September 2019 to April 2021, Palo Alto Network’s Unit 42 monitored firewall traffic and phishing sites detected by URL filters. The number of new phishing pages…

Top Linux Vulnerabilities Exploited by Hackers

This article has been indexed from Softpedia News / Security Linux-based machines that are directly connected to the Internet can be targets for attackers who can quickly push potentially dangerous web-based shells, ransomware, Trojans, and other malicious software, according to…

New SideWalk Backdoor Targeting U.S. Computer Retailers

This article has been indexed from Softpedia News / Security Chinese advanced persistent threat (APT) gangs have resumed their hacking activities, with one of the attacks targeting an American computer retailer using an unknown backdoor referred to as Sidewalk, according…

FluBot Malware Strikes Again

This article has been indexed from Softpedia News / Security FluBot Android malware is back and already launched several attacks outside the regular geographical region of impact, according to Cyware.  Recently conducted research into the FluBot banking malware has revealed…

38 Million Records Exposed from Microsoft Power Apps

This article has been indexed from Softpedia News / Security In an unexpected data leak, more than 38 million records from 47 organizations using Microsoft’s gateway platform Power Apps were accidentally published online, according to The Hacker News.  The unfortunate…

WhatsApp New Modified Version Installs Triada Trojan

This article has been indexed from Softpedia News / Security A customized version of the WhatsApp Messaging App for Android has been found to display full-screen advertising, register device users for unwanted premium subscriptions without their agreement and deliver dangerous…

Researchers Warn of 4 Emerging Ransomware Groups

This article has been indexed from Softpedia News / Security Researchers identified 4 new ransomware gangs that are targeting businesses and key infrastructure, according to The Hacker News.  Ransomware attacks nowadays did not only increase in frequency and intensity, but…

State Department Allegedly Hit by Cyberattack

This article has been indexed from Softpedia News / Security The Department of Defense’s Cyber Command issued warnings about a possibly significant cyberattack against the United States Department of State that may have occurred in recent weeks.   According to…

Indra Group and Iran Railway Attacks May Be Related

This article has been indexed from Softpedia News / Security The cyberattack that crippled Iranian trains last month was recently attributed to the cybercriminal group Indra. The group is known for a series of attacks on several Syrian organizations using…

Report: Cyberattacks on Education Increased by 29% Worldwide

This article has been indexed from Softpedia News / Security Cybersecurity firm Check Point discovered disturbing statistics concerning the significant growth in the weekly number of cyber attacks directed against firms and organizations in the world of education, according to…

T-Mobile Customers Sueing the Company Over Data Breach

This article has been indexed from Softpedia News / Security With each passing day, the fallout from T-Mobile’s recent data breach grows more serious. An update released Friday suggests hacking firms unlawfully obtained the personal information of another 5.3 million…

More Than 600 ICS Flaws Spotted in H1 2021

This article has been indexed from Softpedia News / Security In the first six months of this year, 600 vulnerabilities were discovered in ICS products (Industrial Control Systems), impacting 76 vendors. The number of vulnerabilities increased by 41% in the…

CISA Issues Ransomware Defense and Response Guidance

This article has been indexed from Softpedia News / Security Following a series of disruptive and headline-grabbing ransomware attacks on corporations in the United States over the past several months, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency…

Gaming, Travel and Leisure Are Top Targets for Fraud Attempts

This article has been indexed from Softpedia News / Security Despite the nature of recent cyberattacks, TransUnion’s study found that fraudsters are shifting their attention away from financial services and towards the leisure, travel, and gambling industries.  According to the…

LockBit Ransomware Is Back with a 2.0 Improved Version

This article has been indexed from Softpedia News / Security LockBit RaaS have begun fresh attacks on workers of various businesses in Taiwan, Italy, the United Kingdom and Chile, offering them millions of dollars in exchange for providing valid credentials…

New STARTTLS Flaws Spotted Affecting Popular Email Clients

This article has been indexed from Softpedia News / Security 40 different vulnerabilities related to opportunity-based encryption in email clients and servers that could allow an intruder to spoof mailbox contents and steal credentials have been identified and solved during…

Millions of IoT Devices Vulnerable to Cloud Platform Flaws

This article has been indexed from Softpedia News / Security FireEye researchers have found a significant vulnerability in Mandiant core component of the Kalay cloud platform that leaves millions of IoT devices vulnerable to remote attacks, according to Security Week. …

North Korea Hackers Spreading Malware via Browser Exploits

This article has been indexed from Softpedia News / Security InkySquid, a North Korean hacker, exploited two different vulnerabilities in Internet Explorer to infect users using custom Strategic Web Compromise (SWC) operations, according to The Hacker News. The vulnerabilities in…

Vulnerabilities in Realtek SDK Affect Dozens of IoT Vendors

This article has been indexed from Softpedia News / Security Cybersecurity researchers recently discovered security vulnerabilities in WiFi-enabled devices utilizing Realtek’s SDK, hardware used by more than 65 manufacturers of Internet of Things devices. According to researchers from the German…

Half of Cyberattacks are Launched by Repeat Offenders

This article has been indexed from Softpedia News / Security Security leaders responsible for strategic planning of cybersecurity defenses are susceptible because of a lack of awareness and knowledge gaps, leaving organizations exposed to threats, according to a Ponemon survey. …

T-Mobile Investigates Massive Data Breach Claims

This article has been indexed from Softpedia News / Security T-Mobile is investigating a forum post claiming to sell a treasure trove of personal data, according to Vice. Motherboard says the seller obtained data from over 100 million customers along…

Hackers are Scanning for Unpatched Exchange Servers Flaws

This article has been indexed from Softpedia News / Security Microsoft Exchange servers are targeted again this time via a chain of three different vulnerabilities that affect on-premises installations, according to The Hacker News. Known as ProxyShell, the three vulnerabilities…

Google Releases New Security Tool for Developers

This article has been indexed from Softpedia News / Security In the face of a rising number of attacks against open-source software, large corporations are stepping in to help developers with free services and tools improve cybersecurity, according to Dark…

Unwanted Bot Traffic Costs up to $250M a Year

This article has been indexed from Softpedia News / Security More and more businesses are infiltrated by malicious and increasingly difficult to detect bots, according to Cybernews. This is particularly affecting retailers who had to expand their online presence to meet…

DBREACH: New Attack Targeting Databases

This article has been indexed from Softpedia News / Security Infosecurity Magazine reports a new sort of database attack that may lead to data leakage and loss at the Black Hat US 2021 hybrid event on August 5. The attack…

Microsoft Warns of New Windows Print Spooler RCE Flaw

This article has been indexed from Softpedia News / Security Following the patch released just two days ago, Microsoft disclosed another vulnerability in the Windows Print Spooler component, but promised to fix the problem future security update, according to The…

1M Stolen Credit Cards Revealed on Dark Web

This article has been indexed from Softpedia News / Security A group of cybercriminals established a website that specializes in selling payment card data online, AllWorld.Cards, according to Threat Post. Threat actors leaked 1 million stolen credit cards (gathered between…

Adobe Fixes Critical Flaws Affecting Magento Shops

This article has been indexed from Softpedia News / Security In order to address numerous high severity vulnerabilities in Adobe’s e-commerce platform Magento, a significant set of security updates was released on Monday, according to The Hacker News. Magento 2.4.2,…

Reindeer Suffers Massive Data Breach Affecting 300,000 Users

This article has been indexed from Softpedia News / Security Cybersecurity experts at WizCase discovered a large-scale data breach affecting Reindeer, a collaborator of Tiffany & Co, Patrón Tequila, and other companies, according to E Hacking News.  The organization, led…

Microsoft Patches Actively Exploited Vulnerability

This article has been indexed from Softpedia News / Security Software giant Microsoft issued a series of 44 security updates yesterday, with one of them actively  exploited in the wild, according to The Hacker News.   Microsoft announced that the…

Conti Ransomware Gang Playbook Leaked by Angry Affiliate

This article has been indexed from Softpedia News / Security Key details critical to the operation of Conti Ransomware-as-a-Service have been exposed online, says Threat Post.  The page provides an archive of numerous Cobalt Strike tools, training materials and an…

FatalRAT: New Trojan Leveraging Telegram

This article has been indexed from Softpedia News / Security Malicious actors are using Telegram channels as a source of viral attacks for their targets. A new Remote Access Trojan (RAT) was spotted infecting devices via Telegram channels, according to…

Amazon Kindle Exposed to Malicious eBooks

This article has been indexed from Softpedia News / Security In February, security experts from Check Point disclosed a critical flaw to Amazon that may allow an attacker to take control of Kindle devices and collect personal information, according to…

New PayPal Credential Phishing Scam Spotted

This article has been indexed from Softpedia News / Security Since the early days of online scams, threat actors repeatedly impersonated PayPal and they are not giving up yet, as a new scam involving the payment platform has been discovered,…

SharePoint File-Shares Exploited in Phishing Campaign

This article has been indexed from Softpedia News / Security Microsoft researchers identified a new phishing campaign that is incredibly clever and can get past a variety of detections, according to Threat Post. Hackers use Microsoft SharePoint lures and spoof…

Chinese Hackers Targeting Russian Federal Agencies

This article has been indexed from Softpedia News / Security Chinese state-sponsored hackers launched a massive hacking campaign against Russian federal authorities last year using a virus called Webdav-O, says The Hacker News. Group IB revealed that the virus is…

Google Patches Critical Android Vulnerabilities

This article has been indexed from Softpedia News / Security On Monday, Google released another round of security patches for Android patching 33 vulnerabilities that left users unguarded against a variety of hacking attacks. The biggest threat comes from the…

Raccoon Stealer Spreads Malware Via Google SEO

This article has been indexed from Softpedia News / Security The enhanced version of the Raccoon stealer-as-a-service platform, found to be bundled with updated malware, is hidden in pirated software where it collects cryptocurrency coins and installs a software dropper…

Critical Vulnerabilities Found in Custom TCP/IP Stack

This article has been indexed from Softpedia News / Security Security researchers at Forescout recently published a study revealing 14 critical vulnerabilities in a widely used TCP/IP stack across millions of Operational Technology devices from 200 manufacturers, according to The…

With Remote Work Becoming the Norm, Security Stays Behind

This article has been indexed from Softpedia News / Security An investigation into enterprise IT security specialists revealed that approximately 80% felt  workers are more vulnerable to phishing efforts now that they working from home, according to Help Net Security. …

Ransomware Attacks Increased Dramatically in H1 2021

This article has been indexed from Softpedia News / Security According to the SonicWall mid-year update, ransomware attacks increased dramatically in the first half (H1) of 2021, outperforming the entire year of 2020, according to Help Net Security. The worldwide…

Amazon Fined $886M for Alleged Data Breach

This article has been indexed from Softpedia News / Security Amazon was fined $886.6 million for violating European Union data protection privacy regulations  by Luxembourg’s National Commission for Data Protection, according to BBC. Under the EU’s General Data Protection Regulation (GDPR),…

Cybercriminals Leaked Full Data Dump Stolen from EA

This article has been indexed from Softpedia News / Security Cybercriminals who successfully hacked Electronic Arts two months ago have released all the data stolen from the company after it failed to receive the demanded ransom, according to Security Affairs.…

NSA Warns Public Networks are Cybercriminals Playground

This article has been indexed from Softpedia News / Security As part of its efforts to secure corporate networks and personal devices, the National Security Agency advises corporate and consumer security professionals to follow wireless security best practices, according to…

Zoom Pays $86 Million to Settle U.S. Privacy Lawsuit

This article has been indexed from Softpedia News / Security Zoom has agreed to pay $86 million following the settlement of a class-action privacy lawsuit in the United States , says BBC. According to the complaint, Zoom has violated the privacy…

HTML Smuggling is a New Threat Targetting Browsers

This article has been indexed from Softpedia News / Security Menlo Security evaluated HTML Smuggling or ISOMorph attacks, revealing that it can transmit malicious files to users while avoiding network security technologies, such as antiquated proxies and sandboxes.  The new…