Facebook links activities of OceanLotus hackers to IT firm in Vietnam

By Deeba Ahmed The social network has barred Vietnamese APT32 and a Bangladeshi group of hackers from using its platforms for their malicious purposes. This is a post from HackRead.com Read the original post: Facebook links activities of OceanLotus hackers to IT firm in Vietnam...

Malwarebytes detects leaked tools from FireEye breach

Hello folks! If you have not heard yet, the security firm FireEye has had a breach of many red team assessment tools used for identification of vulnerabilities to help protect customers. While it is not known exactly who was behind this attack, a big concern is the sharing and use of these stolen...

Norweigian researcher exposes how a US firm collected his location data

By Sudais Asif The researcher identified over 75000 data points of his phone being tracked. Here's how he found and exposed the firm behind the scenes. This is a post from HackRead.com Read the original post: Norweigian researcher exposes how a US firm collected his location data...

Hackers steal sensitive client data in Israeli insurance firm data breach

By Deeba Ahmed BlackShadow hackers took responsibility for the attack and leaked the data online belonging to Shirbit's customers. This is a post from HackRead.com Read the original post: Hackers steal sensitive client data in Israeli insurance firm data breach...

Cayman Islands Bank Records Exposed in Open Azure Blob

A Cayman Island investment firm has removed years of backups, which up until recently were easily available online thanks to a misconfigured Microsoft Azure blob. The blob’s single URL led to vast stores of files including personal banking information, passport data and even online banking PINs —...

FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

On Monday, Oct. 26, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the Unit...

Leading French IT firm Sopra Steria hit ry Ryuk ransomware

By Waqas The firm claims that the Ryuk ransomware attack was detected on 20 October, and it may take weeks to restore its systems. This is a post from HackRead.com Read the original post: Leading French IT firm Sopra Steria hit ry Ryuk ransomware...

Popular Mobile Browsers Found Vulnerable To Address Bar Spoofing Attacks

--- Graphic for illustration Cybersecurity researchers on Tuesday disclosed details about an address bar spoofing vulnerability affecting multiple mobile browsers, such as Apple Safari and Opera Touch, leaving the door open for spear-phishing attacks and delivering malware. Other impacted browser...

Cybercriminals Steal Nearly 1TB of Data from Miami-Based International Tech Firm

Hackers have stolen nearly a terabyte of data from a Miami-based tech firm, leaking a number of the pilfered files including full credit-card information, scans of sensitive documents such as passports, bank statements and financial documents, and even customer databases on a Russian hacker forum...

Ransomware attack on health tech firm disrupted COVID-19 medical trials

By Waqas Philadelphia-based Health Tech eResearchTechnology ERT Firm Suffered Ransomware Attack. This is a post from HackRead.com Read the original post: Ransomware attack on health tech firm disrupted COVID-19 medical trials...

CVE-2020-14515

CodeMeter All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file o...

Code injection

CodeMeter All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code has an issue in the license-file signature checking mechanism, which allows attackers to build arbitrary license files, including forging a valid license file as if it were a valid license file o...

CEOs Could Be Held Personally Liable for Cyberattacks that Kill

A full 75 percent of top brass at companies will be personally on the hook for cyber-physical security CSP incidents by 2024 – especially those that involve fatalities. That’s according to the Gartner research firm, which predicted this week that CEOs soon will no longer be able to hide behind...

mortgagefirmpros.com Cross Site Scripting vulnerability OBB-1300346

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

APT Hackers Exploit Autodesk 3ds Max Software for Industrial Espionage

It's one thing for APT groups to conduct cyber espionage to meet their own financial objectives. But it's an entirely different matter when they are used as "hackers for hire" by competing private companies to make away with confidential information. Bitdefender's Cyber Threat Intelligence Lab...

Malicious SDK found spying & defrauding users through iOS apps

By Deeba Ahmed The malicious SDK is distributed by China-based firm Mintegral. This is a post from HackRead.com Read the original post: Malicious SDK found spying & defrauding users through iOS apps...

AI firm exposes 2.5 million sensitive medical records online

By Zara Khan The data also includes records belonging to victims of auto-related incidents. This is a post from HackRead.com Read the original post: AI firm exposes 2.5 million sensitive medical records online...

Sensitive data of cyber security firm & other businesses leaked online

By Sudais Asif Other than the cyber security firm, the leaked data belongs to universities, an insurance firm, non-profit, and public limited firms. This is a post from HackRead.com Read the original post: Sensitive data of cyber security firm & other businesses leaked online...

US firm accused of secretly installing location tracking SDK in mobile apps

By Zara Khan AUS government contractor 'Anomaly Six' has location tracking software hidden in more than 500 mobile apps. This is a post from HackRead.com Read the original post: US firm accused of secretly installing location tracking SDK in mobile apps...

CWT Travel Agency Faces $4.5M Ransom in Cyberattack, Report

CWT, a giant in the corporate travel agency world with a global clientele, may have faced payment of $4.5 million to unknown hackers in the wake of a ransomware attack. Independent malware hunter @JAMESWT tweeted on Thursday that a malware sample used against CWT formerly known as Carlson Wagonli...