3299 matches found
TikTok Serves Up Fresh Gamer Targets
TikTok has made people do all sorts of wild things — eat frozen honey, work on their choreography and even fall for malicious malvertising campaigns. The latest TikTok attacks are getting served to gamers on the platform disguised as “free” or “hacked” versions of games like Among Us, free Steam...
Is Your Data Safe? Check Out Some Cybersecurity Master Classes
Since cybersecurity is definitely an issue that's here to stay, I've just checked out the recently released first episodes of Cato Networks Cybersecurity Master Class Series. According to Cato, the series aims to teach and demonstrate cybersecurity tools and best practices; provide research and...
Hackers Keep Targeting the US Water Supply
Plus: The biggest Twitch hack, an iOS zero day, and more of the week's top security news...
CISA – Ransomware targeted SCADA systems of 3 US water facilities
By Deeba Ahmed US has warned of more ransomware attacks on IT and OT networks of country's Water and Wastewater Systems WWS Sector facilities. This is a post from HackRead.com Read the original post: CISA - Ransomware targeted SCADA systems of 3 US water facilities...
“Free Steam game” scams on TikTok are Among Us
TikTok has long since evolved beyond being thought of as "just" dance clips, also becoming a home for educational and informative content presented in a fun and casual way. There are accounts themed around pretty much any interest you can think of, and one of the biggest is gaming. Its not all...
New Bill to Require Cyber Attack Reporting in the US
The Cyber Incident Notification Act of 2021 would also require CISA to launch a program that would notify organizations of various vectors that malicious actors exploit...
Office 365 Spy Campaign Targets US Military Defense
A new threat actor, dubbed DEV-0343, has been spotted attacking U.S. and Israeli defense technology companies, Persian Gulf ports of entry and global maritime transportation companies with ties to the Middle East. The threat actor’s goal is Microsoft Office 365 account takeovers. Microsoft, which...
Iran-linked hackers hit Israeli, US and EU defense tech firm
By Deeba Ahmed Microsoft has warned that hackers linked to Iran are mainly targeting Office 365 clients in defense technology firms. This is a post from HackRead.com Read the original post: Iran-linked hackers hit Israeli, US and EU defense tech firm...
ExpressVPN made a choice, and so did I: Lock and Code S02E19
On September 14, the US Department of Justice announced that it had resolved an earlier investigation into an international cyber hacking campaign coming from the United Arab Emirates that has reportedly impacted hundreds of journalists, activists, and human rights defenders in Yemen, Iran, Turke...
Someone Hacked a US Warship Facebook Account to Stream Games
Plus: Twitch hack fallout, Russian phishing, and more of the week’s top security news...
Ex-army admin jailed for 12 years over US military health data theft
By Deeba Ahmed Frederick Brown, a medical data technician & admin associated with the 65th Medical Brigade of the US Army caused millions of dollars in losses. This is a post from HackRead.com Read the original post: Ex-army admin jailed for 12 years over US military health data theft...
[Security Nation] Rob Graham on Mike Lindell's Cyber Symposium
!\Security Nation\ Rob Graham on Mike Lindell's Cyber Symposiumhttps://blog.rapid7.com/content/images/2021/09/securitynationlogo-1.jpg In this episode of Security Nation, Jen and Tod chat with Rob Graham of Errata Security about his experience attending pillow magnate Mike Lindell's Cyber...
Ransomware: Is Critical Infrastructure in the Clear?
Recently I've been getting asked whether I believe ransomware is on the decline, particularly for critical infrastructure. Part of the reason for this question seems to be a recent security briefing from White House deputy national security adviser Anne Neuberger, suggesting that language on the...
Feds Sanctions SUEX Cryptocurrency Exchange for Laundering Ransomware Payouts
In an unprecedented move, the federal government has sanctioned a cryptocurrency exchange for laundering ransom transactions for cybercriminals and helping them evade law-enforcement activity. As part of its continued hardline against ransomware attacks, the U.S. Department of Treasury has...
CISA, FBI, and NSA Release Joint Cybersecurity Advisory on Conti Ransomware
CISA, the Federal Bureau of Investigation FBI, and the National Security Agency NSA have released a joint Cybersecurity Advisory CSA alerting organizations of increased Conti ransomware attacks. Malicious cyber actors use Conti ransomware to steal sensitive files from domestic and international...
Russian electronic voting system hit by 19 DDoS attacks in one day
By Waqas According to local Russian media, these DDoS attacks originated from several different countries including India, China, Brazil, Russia, and the US. This is a post from HackRead.com Read the original post: Russian electronic voting system hit by 19 DDoS attacks in one day...
A week in security (Sept 13 – Sept 19)
Last week on Malwarebytes Labs Why backups aren’t a “silver bullet” against ransomware, with Matt Crape: Lock and Code S02E17 The many tentacles of Magecart Group 8 Apple releases emergency update: Patch, but don’t panic Update now! Google Chrome fixes two in-the-wild zero-days Parts of the Dark...
ManageEngine ADSelfService Plus has been abused in the wild due to a zero-day vulnerability
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. An APT actor is attempting to exploit a zero-day vulnerability in ManageEngine ADSelfService Plus, a self-service password management and single sign-on solution that poses a high risk to critical infrastructure companies,...