GEICO Alerts Customers Hackers Stole Driver License Data for Two Months

Threat actors stole driver license numbers from customers of GEICO insurance for nearly two months earlier this year due to a security flaw on its website that has since been fixed. The second-largest auto insurance provider in the United States disclosed the vulnerability in a data breach notice...

Hackers claims to be selling 13tb of Domino’s India data

By Habiba Rashid According to IT security researcher Rajshekhar Rajaharia, "If you ever had ordered pizza online from Domino’s India your data is leaked now." This is a post from HackRead.com Read the original post: Hackers claims to be selling 13tb of Domino’s India data...

EFB Tampering 2. Device Integrity

TL;DR Electronic Flight Bag EFB integrity varies between different airlines and devices Aviation cyber security is becoming increasingly prominent with regulators EFBs often connect to unsecure networks including public Wi-Fi Security measures are not always effective and can be inconsistent Devi...

SolarWinds Hack – US officially Blames Russian Intel Agency Hackers

By Waqas The US has also revealed that 6 Russian technology firms were involved in developing tools that played a vital role in the SolarWinds hack. This is a post from HackRead.com Read the original post: SolarWinds Hack - US officially Blames Russian Intel Agency Hackers...

The FBI Is Now Securing Networks Without Their Owners’ Permission

In January, we learned about a Chinese espionage campaign that exploited four zero-days in Microsoft Exchange. One of the characteristics of the campaign, in the later days when the Chinese probably realized that the vulnerabilities would soon be fixed, was to install a web shell in compromised...

Beating security fatigue with Troy Hunt, Chloé Messdaghi, and Tanya Janca: Lock and Code S02E06

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we speak to Point3 Security chief strategist Chloé Messdaghi, HaveIBeenPwned founder Troy Hunt, and We Hack Purple founder and CEO Tanya Janca about security fatigue. Security fatigue is...

Facebook ads dropped malware posing as Clubhouse app for PC

By Deeba Ahmed Upon clicking the ad, the user is taken to a fake Clubhouse app website that looks quite authentic but its download link drops malware. Last year, in two separate incidents hackers abused Facebook ads to phish 615,000 account credentials. Then, the infamous Ragnar Locker ransomware...

Backdoor Added — But Found — in PHP

Unknown hackers attempted to add a backdoor to the PHP source code. It was two malicious commits, with the subject "fix typo" and the names of known PHP developers and maintainers. They were discovered and removed before being pushed out to any users. But since 79% of the Internets websites use...

Hackers leak data, 600k card info from Swarmshop cybercrime forum

By Habiba Rashid Swarmshop data breach took place on March 17th, 2021 when an unknown hacker group leaked the data on underground hacker forums. This is a post from HackRead.com Read the original post: Hackers leak data, 600k card info from Swarmshop cybercrime forum...

Zoom zero-day discovery makes calls safer, hackers $200,000 richer

Two Dutch white-hat security specialists entered the annual computer hacking contest Pwn2Own, managed to find a Remote Code Execution RCE flaw in Zoom and are $200,000 USD better off than they were before. Pwn2Own Pwn2Own is a high profile event organized by the Zero Day Initiative that challenge...

Hackers Are Exploiting Discord Links to Serve Up Malware

Beware of links from platforms that got big during quarantine...

Chinese Hackers Selling Intimate Stolen Camera Footage

Stolen videos captured by tens of thousands of security cameras at private properties throughout China are now for sale across social media, marketed as sex tapes. That’s according to the South China Morning Post, which reported that the cost of each “tape” varies, depending on how salacious the...

Hackers exploiting critical vulnerabilities in Fortinet VPN – FBI-CISA

By Deeba Ahmed According to CISA and the FBI, advanced persistent threat APT nation-state actors are exploiting known vulnerabilities in the Fortinet FortiOS. This is a post from HackRead.com Read the original post: Hackers exploiting critical vulnerabilities in Fortinet VPN - FBI-CISA...

533 Million Facebook Users' Phone Numbers and Personal Data Leaked Online

In what's likely to be a goldmine for bad actors, personal information associated with approximately 533 million Facebook users worldwide has been leaked on a popular cybercrime forum for free—which was harvested by hackers in 2019 using a Facebook vulnerability. The leaked data includes full...

Cops Take Down the ‘World’s Biggest' Video Game Cheat Ring

Plus: North Korean hackers, a rogue tweet, and more of the week's top security news...

Hackers Setup Fake Cyber Security firm to Target InfoSec Experts

By Waqas Google believes the hackers are backed by the North Korean government. This is a post from HackRead.com Read the original post: Hackers Setup Fake Cyber Security firm to Target InfoSec Experts...

Hackers Hosed by Google Were a Counterterrorism Operation

Plus: Fox News gets sued for its election coverage again, a record ransomware attack, and more of the week’s top security news...

Facebook removes 100s of accounts for spreading iOS, Android malware

By Waqas The hackers were using malware campaigns to target iOS and Android devices used by Uyghurs living outside China including journalists. Facebook has removed accounts of hackers possibly backed by the Chinese government for targeting Uyghur community members living abroad. According to...

Facebook Disrupts Spy Effort Aimed at Uyghurs

Facebook has taken on a group of hackers in China that target the Uyghur ethnic group with cyberespionage activity. The hacking group, known as Earth Empusa or Evil Eye, was targeting activists, dissidents and journalists involved in the Uyghur community, primarily those living abroad in Australi...

Chinese Hackers Used Facebook to Hack Uighur Muslims Living Abroad

Facebook may be banned in China, but the company on Wednesday said it has disrupted a network of bad actors using its platform to target the Uyghur community and lure them into downloading malicious software that would allow surveillance of their devices. "They targeted activists, journalists and...