Software firm leaks 25GB worth of subscription & Ancestry.com user data

By Waqas Here's how Ancestry.com users were implacted. This is a post from HackRead.com Read the original post: Software firm leaks 25GB worth of subscription & Ancestry.com user data...

Android Apps Stealing Facebook Credentials

Google has removed 25 Android apps from its store because they steal Facebook credentials: Before being taken down, the 25 apps were collectively downloaded more than 2.34 million times. The malicious apps were developed by the same threat group and despite offering different features, under the...

REvil Ransomware Gang Adds Auction Feature for Stolen Data

The REvil ransomware gang also known as Sodinokibi has added an auction feature to its underground website that allows anonymous bidding on information stolen in its targeted ransomware campaigns. The auction capability appeared at the beginning of June, according to an analysis from Cyberint. In...

News Wrap: Ransomware Extortion Tactics, Contact-Tracing App Security Worries

Threatpost editors discuss the top news stories of the week ended May 15, including: Recent ransomware attacks, including ones targeting healthcare giant Magellan, the IT office that supports Texas appellate courts and judicial agencies, and a popular law firm that works with several A-list...

Sodinokibi drops greatest hits collection, and crime is the secret ingredient

When a group of celebrities ask to speak with their lawyer, they usually don’t have to call in a bunch of other people to go speak with their lawyer. However, in this case it may well be a thing a little down the line. A huge array of musicians including Bruce Springsteen, Lady Gaga, Madonna, Run...

REvil Ransomware Attack Hits A-List Celeb Law Firm

A popular law firm that works with several A-list celebrities, including Lady Gaga, Drake and Madonna, has been hit by a ransomware attack. Hackers are now threatening to release the 756 gigabytes of data allegedly stolen – including non-disclosure agreements, client contracts and personal...

Anubis Malware Upgrade Logs When Victims Look at Their Screens

The Anubis malware, which threat actors use to persistently attack Google’s Android-based smartphones, is set to evolve once again, this time adding a feature that allows the malware to identify if a victim is looking at his or her screen. The new feature is one of several that haven’t been...

Top celebrities data at risk after REvil ransomware hits famous law firm

By Sudais Asif Currently, 756 GB of data at risk is at risk due to the REvil ransomware attack... This is a post from HackRead.com Read the original post: Top celebrities data at risk after REvil ransomware hits famous law firm...

Chinese COVID-19 detection firm hacked; source code sold on dark web

By Sudais Asif The hackers claim to have stolen a trove of data that is currently being sold on the dark web. This is a post from HackRead.com Read the original post: Chinese COVID-19 detection firm hacked; source code sold on dark web...

A billion-dollar US firm caught exposing highly sensitive database online

By Sudais Asif Another day, another data breach - This time, database of a US firm named has surfaced online containing highly sensitive data. This is a post from HackRead.com Read the original post: A billion-dollar US firm caught exposing highly sensitive database online...

Dark web hosting firm quits after hackers delete its database

By Sudais Asif A dark web hosting firm has quit its operation after being hit by one successful cyber attack after another. This is a post from HackRead.com Read the original post: Dark web hosting firm quits after hackers delete its database...

The Insecurity of WordPress and Apache Struts

Interesting data: A study that analyzed all the vulnerability disclosures between 2010 and 2019 found that around 55% of all the security bugs that have been weaponized and exploited in the wild were for two major application frameworks, namely WordPress and Apache Struts. The Drupal content...

CIA’s 11-year old hacking campaign against China exposed

By Deeba Ahmed APT-C-39 is a hacking group that discreetly works for the CIA, according to research from a well-known Chinese cyber-security firm Qihoo 360. This is a post from HackRead.com Read the original post: CIA’s 11-year old hacking campaign against China exposed...

Iranian APT group hacking VPN servers for “Fox Kitten Campaign”

By Waqas An Iranian APT group ran a hacking campaign to hack VPN servers and install backdoors or bugs to access networks of firms across the globe. This is a post from HackRead.com Read the original post: Iranian APT group hacking VPN servers for “Fox Kitten Campaign”...

Mattress Firm deployed Azure Active Directory to securely connect Firstline Workers to their SaaS apps and to each other

Today, we have another interesting story for the Voice of the Customer blog series. Tony Miller and Jon Sider of Mattress Firm deployed Azure Active Directory Azure AD to create a secure authentication experience for employees, including their Firstline Workforce. Much like sleep and a good...

Owner of dark web Freedom hosting pleads guilty to host child abuse content

By Waqas The culprit ran a hosting firm on the dark web which was home to millions of images and videos showing explicit content against children. This is a post from HackRead.com Read the original post: Owner of dark web Freedom hosting pleads guilty to host child abuse content...

Interpol Arrests 3 Indonesian Credit Card Hackers for Magecart Attacks

The Indonesian National Police in a joint press conference with Interpol and cybersecurity firm Group-IB earlier today announced the arrest of three Magecart-style Indonesian hackers who had compromised hundreds of international e-commerce websites and stolen payment card details of their online...

Interpol Arrests 3 Indonesian Credit Card Hackers for Magecart Attacks

The Indonesian National Police in a joint press conference with Interpol and cybersecurity firm Group-IB earlier today announced the arrest of three Magecart-style Indonesian hackers who had compromised hundreds of international e-commerce websites and stolen payment card details of their online...

California Adopts Strictest Privacy Law in U.S.

A landmark privacy rights bill took effect Jan. 1, 2020 in California and will have broad implications for U.S. consumers and businesses. The California Consumer Privacy Act CCPA mandates strict requirements for companies to notify users about how their user data will be used and monetized along...

GE, Dunkin', Forever 21 Caught Up in Broad Internal Document Leak

A marketing firm exposed hashed passwords and sensitive public relations documents of thousands of customers via a leaky Amazon S3 database – including big-name brands like GE, Dunkin’ Donuts, Forever 21 and more. Researchers with UpGuard in October discovered a misconfigured Amazon S3 storage...