Security Advisory: Mitigating the Risk of Microsoft Exchange Zero-Day ProxyLogon Vulnerabilities

Microsoft recently released several security updates for Microsoft Exchange Server to address vulnerabilities that sophisticated nation-state actors are exploiting to exfiltrate critical data from a variety of organizations. Reports suggest attackers have been targeting these vulnerabilities sinc...

Dark Web Markets for Stolen Data See Banner Sales

Despite an explosion in the sheer amount of stolen data available on the Dark Web, the value of personal information is holding steady, according to the 2021 Dark Web price index from Privacy Affairs. That leaves these thriving dirty data dealers in a familiar predicament — they need to lock down...

Warning the World of a Ticking Time Bomb

Globally, hundreds of thousand of organizations running Exchange email servers from Microsoft just got mass-hacked, including at least 30,000 victims in the United States. Each hacked server has been retrofitted with a "web shell" backdoor that gives the bad guys total, remote control, the abilit...

Top Russian hacker forums Maza, Verified hacked; data leaked online

By Waqas It is unclear who hacked these forums but insider discussion believes government authorities were behind the attack as a "friendly warning" message. This is a post from HackRead.com Read the original post: Top Russian hacker forums Maza, Verified hacked; data leaked online...

Employee PC hacked via TeamViewer in attempted water supply poisoning

By Waqas Unknown hackers tried to poison the water supply that could have harmed thousands of residents in Oldsmar, Tampa, Florida. This is a post from HackRead.com Read the original post: Employee PC hacked via TeamViewer in attempted water supply poisoning...

Facebook, Instagram, TikTok and Twitter Target Resellers of Hacked Accounts

Facebook, Instagram, TikTok, and Twitter this week all took steps to crack down on users involved in trafficking hijacked user accounts across their platforms. The coordinated action seized hundreds of accounts the companies say have played a major role in facilitating the trade and often lucrati...

Georgia’s Ballot-Marking Devices

Andrew Appel discusses Georgias voting machines, how the paper ballots facilitated a recount, and the problem with automatic ballot-marking devices: Suppose the polling-place optical scanners had been hacked enough to change the outcome. Then this would have been detected in the audit, and in...

Livecoin crypto exchange shuts down after losing domain to hackers

By Waqas The decision comes after Livecoin claims its servers were hacked and taken over by attackers in December 2020. This is a post from HackRead.com Read the original post: Livecoin crypto exchange shuts down after losing domain to hackers...

Usenet indexer NZBGeek hacked; database stolen

By Deeba Ahmed Hackers installed keylogger and copied NZBGeek database exposing personal details of all users. This is a post from HackRead.com Read the original post: Usenet indexer NZBGeek hacked; database stolen...

Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data

Cybercriminals are vying for Remote Desktop Protocol RDP access, stolen payment cards and DDoS-for-Hire services, based on a recent analysis of underground marketplace pricing. During the COVID-19 pandemic, cybercriminals have profited with “increasingly advantageous positions to benefit from the...

iPhones of 36 Al Jazeera journalists hacked with NSO’s zero-click spyware

By Deeba Ahmed Citizen Lab researchers claim the spyware was delivered silently through iMessage. This is a post from HackRead.com Read the original post: iPhones of 36 Al Jazeera journalists hacked with NSOs zero-click spyware...

US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration NTIA, and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign. The...

Cyber Security giant FireEye hacked by a foreign government

By Sudais Asif FireEye has stated that they have been resetting the passwords of users for the previous 2 weeks as a part of its mitigatory actions. This is a post from HackRead.com Read the original post: Cyber Security giant FireEye hacked by a foreign government...

Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen

FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers. The company said it's...

Indian job portal IIMJobs hacked; database leaked online

By Waqas According to Alexa traffic analysis, IIMJobs is among the top 700 visited websites in India. Here's what was leaked and what happened. This is a post from HackRead.com Read the original post: Indian job portal IIMJobs hacked; database leaked online...

Leaked database exposed login data of 100k hacked Facebook accounts

By Sudais Asif The leaked database was owned by cybercriminals who hacked Facebook accounts and used them for credit card and Bitcoin scams. This is a post from HackRead.com Read the original post: Leaked database exposed login data of 100k hacked Facebook accounts...

The Wisconsin GOP Lost $2.3 Million in an Email Scam

Trump's website gets hacked, a ransomware group calls it quits, and more of the week's top security news...

CrimeOps of the KashmirBlack Botnet – Part II

Introduction The previous blog - “CrimeOps of the KasmirBlack Botnet - Part I” - described the DevOps behind the botnet. It showed how its well-designed infrastructure makes it easy to expand and add new exploits or payloads without much effort,and explained the evolution and version deployment o...

The Impossible Dilemma of Twitter’s ‘Hacked Materials’ Rule

The company’s flip-flopping on the policy after banning a shady New York Post story highlights the challenges facing social media in 2020...

KuCoin crypto exchange loses $150m after hackers drain its hot wallets

By Waqas Hackers have stolen a whopping $150 million worth of cryptocurrency from KuCoin, a major crypto exchange based in Singapore. This is a post from HackRead.com Read the original post: KuCoin crypto exchange loses $150m after hackers drain its hot wallets...