Global security & privacy leader Avast has uncovered that Pro-Russia hacktivist group NoName057(16) is conducting a campaign of Distributed Denial of Service (DDoS) attacks on Ukraine and NATO organisations, which began in the early days of the war in Ukraine. Targets have…
Category: Information Security Buzz
Threats of Quantum: The solution lies in quantum cryptography
The race in quantum cryptography is on and people from all walks of life whether academics, business or industrialists, are going to be affected by it. The centuries old approach of encryption still holds importance while communication channels has advanced…
Bulk Cacti Servers Exploited In Unpatched Vulnerabilities
The bulk of Cacti servers that are accessible via the internet has not been updated to address a severe security flaw that was just patched and is currently being actively exploited. Censys, a platform for managing attack surfaces, reports that…
$5.4 Million Slammed On TikTok By France For Cookies Privacy
Prestigious social media platform and the latest internet giant TikTok have received a warning for breaking cookie consent requirements. According to France’s data protection regulators, TikTok UK and TikTok Ireland have been fined over €5.4 million by France’s data protection…
UN Hearing on Proposed Cybercrime Treaty: Legal Measures to Tackle Cybercrimes
The United Nations is holding its first ever global cybercrime treaty this week. The 4th round of this hearing is scheduled this January from 9 – 20 January. The focus of the hearing is “state response to cybercrime ” and…
Fortinet: Hackers Exploit Zero-Day Vulnerability in VPN
Unknown attackers used a FortiOS SSL-VPN zero-day vulnerability patched last month in attacks on government organizations and government-related targets, according to Fortinet. The exploited security issue (CVE-2022-42475) is a heap-based buffer overflow vulnerability found in the FortiOS SSLVPNd that allows…
MetaMask Alerts Crypto Users About Address Poisoning Scam
MetaMask, a cryptocurrency wallet provider, is alerting customers about a new fraud known as ‘Address Poisoning,’ which involves tricking users into sending payments to a scammer rather than the intended receiver. When MetaMask users send or receive cryptocurrency, the transaction…
Royal Mail Struck By ‘Cyber-Incident’ Leading To Post Delay
It has been reported that the Royal Mail, a primary postal service in the United Kingdom, has been hit by a cyber-incident. The company has advised customers to stop sending items overseas while it works to resolve the issue. In…
NOTAM Systems Offline, All U.S. Flights Disrupted By FAA
In an unexpected turn of events, the Federal Aviation Administration (FAA) suspended all outgoing aircraft in the United States this morning. The cause of the grounding is currently unknown, with flights now resuming but with no clear explanation as to…
Royal Mail Stroke By ‘Cyber-Incident’ Leading To Post Delay
It has been reported that the Royal Mail, a primary postal service in the United Kingdom, has been hit by a cyber-incident. The company has advised customers to stop sending items overseas while it works to resolve the issue. In…
Worldwide Ransomware Attacks Trend
According to Comparitech’s worldwide ransomware tracker, 2022 saw a huge dip in the number of publicly-reported ransomware attacks. In 2022, 769 attacks were collated by the researchers, compared to 1,365 in 2021. But that’s not to say hackers have been any…
San Francisco Transit Police Confidential Files Leaked By Hackers
The recent cyber-attack on the San Francisco Transit Police Department (SFTP) has highlighted the critical need for robust cyber security measures in the public sector. The attack, which took place over the weekend, targeted the department’s computer systems. This resulted…
Kinsing Malware Hits Kubernetes Clusters By Flawed PostgreSQL
As of late, Kubernetes clusters have been actively breached by the Kinsing malware, which exploits vulnerabilities in container images and misconfigured, exposed PostgreSQL containers. While not new, the Defender for Cloud team at Microsoft has noticed a spike in recent…
Denmark Central Bank Hit By DDoS Attack and Other Private Banks
In yet another DDoS attack on financial institutions, according to the Denmark central bank and an IT business that works with the financial sector. Hackers have disabled access to the websites of seven private banks in Denmark this week. Reports…
Data Loss Prevention Capability Guide
Data Loss Prevention, or DLP, is a vital component of any business’s cybersecurity strategy. It is a set of technologies and processes that help prevent the unauthorized access, use, or transfer of sensitive or confidential data. This includes data stored…
Steps to Planning and Implementation of Data Loss Prevention
Data loss prevention (DLP) is a security strategy that aims to prevent unauthorized access, disclosure, modification, or destruction of sensitive data. Protecting sensitive data is crucial for maintaining data confidentiality, integrity, and availability and for upholding the trust of customers,…
Darknet Drug Markets Switches To Custom Android Apps
Custom Android apps are now being used by online drug and other illegal substance markets on the darknet to boost privacy and elude law enforcement. These apps enable customers of pharmacy stores to contact suppliers and give particular delivery instructions…
22,000 Projects In JsonWeb Token Library Glitched By RCE
The well-known JsonWebToken (JWT) open-source encryption project has a high-severity vulnerability (CVE-2022-23529) that attackers might exploit to get remote code execution (RCE) on a target encryption server. The JWT open standard outlines a process for securely sending data by encrypting…
Practical Risk Management – Beyond Certification
Organisations regularly invest in their information security management systems (ISMS). These investments are a cost-of-business and cover the basics of fulfilling regulatory, compliance and certification requirements. However, most organisations implement ISMS based on the ISO framework, creating policies and documentation…
Text-to-SQL Vulnerabilities Allow Data Theft and DoS Attacks
Text-to-SQL models are a type of artificial intelligence (AI) used in database applications to facilitate communication between humans and database systems. These models use natural language processing (NLP) techniques to translate human questions into SQL queries, allowing users to interact…
Malware: Pokémon NFT Games Tricks Users To Download Into PCs
A skillfully designed website for the Pokemon NFT card game is being used by threat actors to disseminate the NetSupport remote access tool and commandeer victims’ devices. The “pokemon-go[.]io” website, which is still active as of this writing, advertises a…
6 PyPI Packages Detour Firewall Using Cloudflare Tunnels
Six dangerous packages were discovered on PyPI, the Python Package Index, that used Cloudflare Tunnel to get over firewall constraints for remote access while also installing data-stealing and RAT (remote access trojan) malware. The malicious packages try to run shell…
Visual Studio Code Prone To Abuse By Malicious Extensions
With the intention of building supply chain attacks, malicious extensions could be uploaded using a new attack vector that targets the Visual Studio Code extensions marketplace. According to Ilay Goldman, a security researcher at Aqua, the method “may operate as…
Technical and Legal Risks of ChatGPT: How prepared are we with Laws on AI?
“Generative AI refers to artificial intelligence systems that are capable of generating new content, such as text, images, or audio….One potential risk is related to intellectual property. Generative AI systems may be able to create original works that are difficult…
14 UK Schools Confidential Documents Leaked By Hackers
Private information about young students was posted online as a result of a cyberattack that targeted schools across the nation. A major cyber-attack that affected 14 UK schools led to the disclosure of private student records. Hackers exposed staff contracts…
Wabtec Announces Global Data Breach In LockBit Attack
The Wabtec Corporation has finally provided information regarding a data security breach that occurred last year and resulted in the compromise of extremely sensitive personal data. The $8 billion company was the victim of a ransomware attack that was first…
Employee Tokens Stolen Through Slack GitHub Account
Users of one of the leading business communication and collaboration platforms, Slack, have been warned that hackers have stolen several of its private source code repositories. At the same time, Slack insists the damage is minimal. Slack revealed the incident…
15+ Car Manufacturers’ Exploitable in API Vulnerabilities
In a recent report, web application security researcher Sam Curry revealed serious vulnerabilities in the API (application programming interfaces) endpoints of cars from 15+ major manufacturers. These vulnerabilities allow hackers to remotely access vehicle telematics systems, activate horns and lights,…
235 Million Twitter Users Leaked In Biggest Data Leak
A well-known hacker site allegedly dumped a database containing the email addresses of over 235 million Twitter users and is being sold for roughly $200,000. According to a cyber intelligence company, this data leak has the potential to rank among…
Five Guys Breached: Burger Franchise Suffers Data Compromise
Five Guys Enterprises LLC, a chain of burger restaurants, has reported a data breach that led to the loss of personally identifiable information from job applications. The information was provided in a form letter dated December 29 that was submitted…
Is NHS The Most Impersonated UK Government “Brand”?
The National Health Service (NHS) is the most impersonated UK government organization in scams, according to a recent report. This is concerning news, as scams targeting the NHS can have serious consequences for individuals and the NHS as a whole.…
ChatGPT: An Easy Cybercrime Target For Cyberattacks
As artificial intelligence (AI) becomes more prevalent in our daily lives, it’s essential to consider new technologies’ potential risks and benefits. One such example is ChatGPT, a popular new AI chatbot that has gained significant popularity in a short period…
Chinese Students In UK Targeted By Redzei Chinese Scammers
For over a year, Chinese overseas students in the United Kingdom have been targeted by persistent Chinese-speaking scammers as part of an operation known as RedZei (aka RedThief). “The RedZei scammers meticulously select their targets, analyze them, and know it…
Steps To Planning And Implementing Identity And Access Governance
Identity and access governance is a crucial aspect of any organization’s security strategy. It involves the management of user identities and the control of access to systems and resources. Proper identity and access governance can help prevent unauthorized access, protect…
22 Ways To Protect WordPress Website From Cyber Attacks
As a website owner, it is essential to prioritize the security of your WordPress website. Cyberattacks and hacking attempts can compromise sensitive information, disrupt your website’s functionality, and damage your online reputation. To protect your website and your business, it…
22 Ways To Protect Your Website From Cyber Attacks
As a website owner, it is essential to prioritize the security of your WordPress website. Cyberattacks and hacking attempts can compromise sensitive information, disrupt your website’s functionality, and damage your online reputation. To protect your website and your business, it…
PCB’s YouTube Channel Hacked, Renamed To ‘Tesla US 24’
LAHORE, Pakistan – The official YouTube channel of the Pakistan Cricket Board (PCB) was hacked on Tuesday, causing great panic among the board’s officials and its 4.4 million subscribers. The hackers not only changed the channel’s logo but also renamed…
PCB’s YouTube Channel Hacked, Renamed to ‘Tesla US 24’
LAHORE, Pakistan – The official YouTube channel of the Pakistan Cricket Board (PCB) was hacked on Tuesday, causing great panic among the board’s officials and its 4.4 million subscribers. The hackers not only changed the channel’s logo but also renamed…
Data Breach Involves 13 Million Users Of Maybank, Astro, and EC
Fahmi Fadzil, Malaysian Communications and Digital Minister, has launched an investigation into an alleged significant data breach impacting over 13 million individuals. Fadzil directed the national cyber security to investigate and take legal action if there is a data leak…
Linux Malware Exploits 30+ Plugins Into WordPress Sites
A new strain of Linux malware is targeting WordPress sites and exploiting vulnerabilities in over two dozen plugins and themes to compromise systems. Russian security firm Doctor Web discovered the malware, which has been tracked as Linux.BackDoor.WordPressExploit.1. It targets both…
Google Pays $29.5 Million To DC, Indiana ln Tracking Lawsuit
The states of Indiana and the District of Columbia in the U.S. have settled claims against Google for its location monitoring tactics, with Google agreeing to pay a total of $29.5 million to resolve the cases. The District of Columbia…
Identity And Access Governance Capability Guide
Identity and access governance (IAG) is a critical component of modern organizations, as it helps manage users’ identities and access various resources and systems. IAG encompasses a range of processes and technologies that help to ensure that only authorized users…
Insights To Identity And Access Governance
Identity and access governance (IAG) is a critical component of modern organizations, as it helps manage users’ identities and access various resources and systems. IAG encompasses a range of processes and technologies that help to ensure that only authorized users…