CISA issues urgent alert as threat actors actively exploit ProxyShell vulnerabilities on unpatched Microsoft Exchange servers to execute LockFile ransomware attacks.
Extortion Attempt on Samsung Leads to Data Breach, Leak of Bootloader and Authentication Source Code
Samsung says that no personal information was lost in the data breach and that it does not expect customers to be impacted, but the source code could lead to serious vulnerabilities.
Social fitness apps such as Strava need to be doing more to enhance user privacy and safety. The recent snafu involving the disclosure of U.S. military personnel location data has increased awareness of the perils created by tracking apps. Learn more about how these apps are collecting data, and how they are using it.
Many organizations affected by Log4j’s zero-day vulnerability with mass internet scanning detected, suggesting the remote code execution flaw was actively targeted in the wild.
The death of a woman who needed urgent care at a German hospital is being blamed on equipment being unavailable due to a ransomware attack.
HR services company SD Worx suspended operations in UK and Ireland after a cyber attack on its hosted data centers forced it to shut down servers to contain the threat.
A disgruntled Black Basta ransomware gang member has leaked extensive chat logs containing various details, including phishing templates and cryptocurrency addresses.
Mass scanning activity targeting VMware servers with the remote code execution security bug after a Chinese researcher released proof of concept (POC) code.
The final amount of stolen crypto is still being tallied as investigations continue, but about 56 BTC (about $1.5 million) has been confirmed to be lost. General Bytes has over 15,000 bitcoin ATMs in circulation in over 100 countries.
Big Tech companies are feeling more pressure in Europe with the proposal of two new antitrust policies. Together the "Digital Markets Act" and "Digital Services Act" would limit use of personal and business data.
