Russian hackers stole 50 million passwords from popular online services such as PayPal, Amazon, Roblox, Steam and crypto wallets by deploying infostealer malware on users’ devices.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
Iranian hackers installed crypto miner on federal agency’s network after exploiting unpatched Log4Shell vulnerability on the VMWare Horizon server to gain access. The threat actors moved laterally to the domain controller, compromised credentials and implanted reverse proxies on several hosts to maintain persistence.
Researchers discovered thousands of Amazon RDS snapshots shared publicly either accidentally or deliberately that were inadvertently leaking clients’ personally identifiable information (PII).
Phishing scams by a Chinese threat actor ‘Fangxiao’ employs over 42,000 brand impersonation domains to earn advertising revenue and spread malware via WhatsApp messages.
The NSA urged developers and organizations to switch to memory-safe languages to address memory safety issues responsible for most exploitable vulnerabilities. Microsoft and Google attribute 70% of some of their product vulnerabilities to software memory safety issues.
Europol arrested a "high value" Russian-Canadian LockBit ransomware operator wanted in connection to high-profile cyber attacks on critical infrastructure and large industrial groups.
Nation-state attacks on critical infrastructure and cyberespionage, and password attacks from ordinary cybercriminals increased tremendously within a year, according to Microsoft report.
Cybersecurity researchers disclosed a GitHub vulnerability that could allow attackers to hijack and poison thousands of popular open-source packages with millions of users which can lead to supply chain attacks.
eCommerce retailers face the most significant risk from automated malicious software, with hackers deploying advanced bad bots in nearly two-thirds of account takeover attacks.
One common weakness in conventional security is the password. Your organization becomes open to attack if a user's password is compromised, or even worse if the email address used for password resets is compromised.
