The Opportunities—and Obstacles—for Women at NSA and Cyber Command

WIRED spoke with three women working in cybersecurity in the US intelligence community about the progress of recent years and the work that remains...

Hackers From China Target Vietnamese Military and Government

A hacking group related to a Chinese-speaking threat actor has been linked to an advanced cyberespionage campaign targeting government and military organizations in Vietnam. The attacks have been attributed with low confidence to the advanced persistent threat APT called Cycldek or Goblin Panda,...

A child sent out gibberish tweet from official US Nuclear-agency account

By Deeba Ahmed A Child’s Gibberish Tweet from US Nuclear-agency Account Sends Twitter into Frenzy - Sparks Debates on National Security. This is a post from HackRead.com Read the original post: A child sent out gibberish tweet from official US Nuclear-agency account...

Cl0p ransomware gang leaks sensitive data from 6 US universites

By Habiba Rashid For now, there has been no confirmation from any of the universities if they were targeted and breached by the Cl0p ransomware gang. This is a post from HackRead.com Read the original post: Cl0p ransomware gang leaks sensitive data from 6 US universites...

Safe Connections Act could help domestic abuse survivors take control of their digital lives

A bill introduced in the US Senate could help domestic abuse and sex trafficking survivors—including those tracked by stalkerware-type applications—regain digital independence through swift, shared phone plan termination and the extension of mobile phone plan subsidies. Titled the Safe Connection...

US charges Swiss hacker behind massive Verkada security camera hack

By Habiba Rashid The hacker Till Kottmann aka “deletescape” has been indicted for conspiracy, wire fraud, and aggravated identity theft by the US DOJ. This is a post from HackRead.com Read the original post: US charges Swiss hacker behind massive Verkada security camera hack...

Sensitive data from US shipping management software firm exposed online

By Habiba Rashid In total, 103 GB worth of data belonging to New Jersy based Descartes Aljex Software was left exposed on a misconfigured AWS S3 Bucket. This is a post from HackRead.com Read the original post: Sensitive data from US shipping management software firm exposed online...

Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies

ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...

COVID-19 testing service in US exposes patients’ photos, passports

By Habiba Rashid COVID-19 testing service in the State of Utah stored passport scans and other highly personal data on unsecured Amazon S3 buckets. This is a post from HackRead.com Read the original post: COVID-19 testing service in US exposes patients photos, passports...

‘Retaliation’ for Russia's SolarWinds Spying Isn't the Answer

It will be hard pointing to a specific line the Kremlin crossed that the US hasn't crossed as well...

John McAfee Charged with Fraud in Cryptocurrency Scam

By Habiba Rashid John McAfee has been charged with fraud and money-laundering related to 2 cryptocurrency schemes, the US Justice Department said on Friday. This is a post from HackRead.com Read the original post: John McAfee Charged with Fraud in Cryptocurrency Scam...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation of web shells for persistent access, remote code execution, and reconnaissance for endpoint securit...

Gootloader exploits websites via SEO to spread ransomware, trojans

By Deeba Ahmed Researchers have warned that Gootloader campaigns generally target users in the US, Germany, France, and South Korea. This is a post from HackRead.com Read the original post: Gootloader exploits websites via SEO to spread ransomware, trojans...

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...

National Security Risks of Late-Stage Capitalism

Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piece of widely used network management software made by a company called SolarWinds. The hack gave the attackers access to the computer networks of some 18,000 of SolarWinds’s customers, including US...

Hackers Tied to Russia's GRU Targeted the US Grid for Years

A Sandworm-adjacent group has successfully breached US critical infrastructure a handful of times, according to new findings from the security firm Dragos...

North Korean hackers charged with $1.3 billion of cyberheists

The US Department of Justice recently unsealed indictments detailing North Koreas involvement in several global cyberattack campaigns against institutions in the financial and entertainment sectors, and money laundering schemes in certain US states. The first unsealed indictment is for hacking...

US charges 3 North Korean hackers for extorting $1.3+ billion

By Deeba Ahmed One of the hackers was also charged in 2018 for playing a role in the Sony Pictures hacking and WannaCry ransomware attacks. This is a post from HackRead.com Read the original post: US charges 3 North Korean hackers for extorting $1.3+ billion...

U.S. Indicts North Korean Hackers in Theft of $200 Million

The U.S. Justice Department today unsealed indictments against three men accused of working with the North Korean regime to carry out some of the most damaging cybercrime attacks over the past decade, including the 2014 hack of Sony Pictures, the global WannaCry ransomware contagion of 2017, and...

North Korean Malicious Cyber Activity: AppleJeus

CISA, the Federal Bureau of Investigation, and the Department of the Treasury have released a Joint Cybersecurity Advisory and seven Malware Analysis Reports MARs on the North Korean government’s dissemination of malware that facilitates the theft of cryptocurrency—referred to by the U.S...