Revil ransomware increases ransom to $70M in Kaseya attack

By Sudais Asif The Revil ransomware group has released a notice stating that more than 1 million systems have been infected - far more than initially believed. A couple of days ago, we reported on how the infamous REvil ransomware had targeted over 40 Managed Service Providers MSPs compromising...

REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

Amidst the massive supply-chain ransomware attack that triggered an infection chain compromising thousands of businesses on Friday, new details have emerged about how the notorious Russia-linked REvil cybercrime gang may have pulled off the unprecedented hack. The Dutch Institute for Vulnerabilit...

A Well-Meaning Feature Leaves Millions of Dell PCs Vulnerable

Flaws in a firmware security tool affect as many as 30 million desktops, laptops, and tablets...

U.S. Authorities Shut Down Slilpp—Largest Marketplace for Stolen Logins

The U.S. Department of Justice DoJ Thursday said it disrupted and took down the infrastructure of an underground marketplace known as "Slilpp" that specialized in trading stolen login credentials as part of an international law enforcement operation. Over a dozen individuals have been charged or...

Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom

U.S. insurance company CNA Financial reportedly paid $40 million to a ransomware group to regain access to its systems after a cyberattack in March, marking one of the largest known ransom payments to date. The payment was first reported by Bloomberg, which cited people familiar with the incident...

Apple Execs Chose to Keep a Hack of 128 Million iPhones Quiet

Emails from the Epic Games lawsuit show Apple brass discussing how to handle a 2015 iOS hack. The company never directly notified affected users...

CVE-2020-28017

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receiveaddrecipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption...

CVE-2020-28017

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receiveaddrecipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption...

Integer overflow

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receiveaddrecipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption...

CVE-2020-28017

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receiveaddrecipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be difficult because of resource consumption...

Apple’s Ransomware Mess Is the Future of Online Extortion

This week, hackers stole confidential schematics from a third-party supplier and demanded $50 million not to release them...

AZL-44442 CVE-2021-29338 affecting package openjpeg2 2.3.1-12

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

ALPINE-CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

DEBIAN-CVE-2021-29338

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service DoS. This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files...

Conti ransomware gang demanded $40m from US school district

By Habiba Rashid Broward County Schools district in Fort Lauderdale, FL was attacked by the infamous Conti ransomware group last month. In a series of ransomware attacks on educational institutions that have been going on for the past few weeks, this time around, Broward County Public Schools in...

Friday Squid Blogging: 500-Million-Year-Old Cephalopod

The oldest known cephalopod -- the ancestor of all modern octopuses, squid, cuttlefish and nautiluses -- is 500 million years old. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Flaws in Two Popular WordPress Plugins Affect Over 7 Million Websites

Researchers have disclosed vulnerabilities in multiple WordPress plugins that, if successfully exploited, could allow an attacker to run arbitrary code and take over a website in certain scenarios. The flaws were uncovered in Elementor, a website builder plugin used on more than seven million...

Hackers steal $3.8 million from Defi Protocol DODO

By Habiba Rashid DODO is a decentralized exchange built on the proactive market maker algorithm that runs on Ethereum and Binance Smart Chain BSC This is a post from HackRead.com Read the original post: Hackers steal $3.8 million from Defi Protocol DODO...

Cryptocurrency exchange in liquidation due to hack, hacked again

By Waqas Cryptopia cryptocurrency exchange was hacked in 2019 and put into liquidation after suffering a loss of USD 30 million in crypto-assets. This is a post from HackRead.com Read the original post: Cryptocurrency exchange in liquidation due to hack, hacked again...

Kia Motors Hit With $20M Ransomware Attack – Report

So far, Kia Motors America has publicly acknowledged an “extended system outage,” but ransomware gang DoppelPaymer claimed it has locked down the company’s files in a cyberattack that includes a $20 million ransom demand. That $20 million will gain Kia a decryptor and a guarantee to not to publis...