Hackers recently launched a credential stuffing attack on the new Disney+ streaming service by using database of usernames and passwords from previous hacks.
Facebook terms of service, once obfuscated by complicated, legalistic language, is going to state clearly how they provide services free of charge to consumers in return for agreement to share their personal data with third parties and used for targeted advertising.
Citizen Lab reports that the new Pegasus spyware zero-click zero-day impacts the most recent version of iOS (16.6) and likely prior versions dating back to the iPhone 8. As with the prior Pegasus attack vector, victims only need to receive a iMessage to be compromised; they do not need to open the message or interact with it.
DICOM medical records systems that are commonly used to store sensitive images were found to expose billion of medical records just by scanning the server IP addresses and known ports.
It took two months for the public to learn of the Blackbaud ransomware supply chain attack, and has led to data breaches in more than a hundred universities and nonprofit organizations.
CISA says that SolarWinds hack possibly affected federal, state, and local government agencies and critical infrastructure entities dealing with gas, electricity, and manufacturing.
US and UK have dispatched cyber warfare advisors to Ukraine to prepare for potential cyber attacks. The prospect is not unprecedented, as Russia has disabled Ukrainian power stations before.
Security researchers have discovered a three-decade-old DICOM vulnerability that exposed millions of patient health records to unauthorized access and manipulation.
The FBI warned about the prevalent use of proxies and configurations to mask and automate credential stuffing attacks. Threat actors extensively leveraged residential proxies instead of those connected to data centers to avoid triggering suspicious behavior monitors.
China has added a "color code" in their national surveillance system to mark citizens according to their level of COVID-19 contagion risk and flag those with yellow and red codes for quarantine.
