Hackers steal 6TB of data from enterprise software developer Citrix

By Waqas Enterprise software developer Citrix becomes a victim of state-sponsored hack attack after hackers steal the company's secrets. One of the most popular enterprise software and networking and remote access technology provider firm Citrix affirmed that its internal network was compromised ...

Vulnerable smart alarms allowed hackers to track & turn off car engine

By Waqas By gaining access to the vehicles, hackers can not only locate them but also open their doors and even turn off the engine while the owner is driving. Two popular car alarm companies are facing problems with their products. Viper and Pandora are famous for their alarms that cost thousand...

New backdoor malware hits Slack and Github platforms

By Waqas The cybersecurity researchers at Trend Micro have discovered A new malware strain tapped into GitHub posts and Slack channels. Dubbed Slub by researchers; the malware works by exploiting a VBScript engine vulnerability that is classified as CVE-2018-8174 patched by Microsoft last year. B...

The Pirate Bay spreading malware PirateMatryoshka via reputed seeders

By Waqas Cybercriminals often use torrent services to distribute malicious code since users who look for illegal content usually disable their privacy and security settings on the web as well as ignore system notifications. Resultantly, they fall prey to adware and malware campaigns hosted by...

Saudi caller ID app Dalil leaked data of over 5 Million users

By Uzair Amir Thanks to yet another unsecure MongoDB Server. Dalil is a Saudi caller ID app that is reportedly been leaking user data because of storing it on an unsecure MongoDB server. Within a week private data of over 5 million Dalil users has been leaked and the data is available online easi...

Download NSA’s reverse engineering tool GHIDRA

By Waqas Recently we informed that the National Security Agency's NSA plans to release GHIDRA, the famous reverse engineering tool in March. As per latest reports, the NSA has released GHIDRA and the open-source world can now use it easily. This is quite unlike the other cybersecurity tools so fa...

WordPress security: Steps to assess an employee before granting admin access to WordPress

By Waqas Are you planning to hand over admin access of your WordPress site to someone else? You certainly need to take some steps to ensure the security of your WordPress website. Since your WordPress site is your creation and you have put in a lot of hard work and efforts to make it what it is …...

PlayStation serial number leads Feds to bust a massive drug ring

By Waqas This could easily be termed one of the largest Fentanyl related busts in the US but this time thanks to PlayStation serial number. The federal agents captured a large heroin ring in Novi, Michigan after raiding a condominium and discovering Fentanyl in large quantity. The quantity was so...

Dark web hacker selling admin access to a Chinese railway company

By Waqas The IT security researchers at Sixgill's threat intelligence team have identified an "experienced threat actor" on the dark web selling access to the admin panel of a Chinese rail control system. This access would enable criminals to manipulate train control systems, affecting over one...

The Pirate Bay’s preferred cryptominer Coinhive shutting down next week

By Waqas The Pirate Bay was caught twice secretly mining Monero cryptocurrency using Javascript powered by Coinhive. Popular in-browser crypto-mining service will be shutting down from March 9th, 2019 much to the dismay of hackers who loved it quite ardently. The reason behind this decision,...

19-year-old ethical hacker is a millionaire now; thanks to his skills

By Carolina Argentina’s Santiago Lopez is now a millionaire due to his prowess on identifying flaws in online services as well as software. The ethical hacker who uses the moniker @trytohack became part of HackerOne’s bug bounty program in 2015 and so far he has reported more than 1,670 unique...

Dow Jones’ screening watchlist data exposed online

By Waqas A database hosted on Amazon Web Services AWS and owned by Dow Jones has accidentally been exposed putting approx. 2.4 million corporate entities and individuals at risk of data theft. Reportedly, the exposed database comprises sensitive information about terrorists, criminals, and shady...

iPhone hacking tool Cellebrite being sold on eBay

By Waqas Cellebrite UFED, an iPhone hacking tool made in Israel and widely used by the law enforcement authorities including the Federal Bureau of Investigation, Customs Enforcement and Immigration departments is surprisingly up for sale on eBay. This tool is mainly used for hacking or breaking...

Cellular networks flaws expose 4G & 5G devices to IMSI capturing attacks

By Waqas A team of researchers has disclosed their findings at the NDSS Network and Distributed System Security symposium 2019 held in San Diego, revealing that cellular networks have certain vulnerabilities that can potentially affect not only 4G but 5G LTE protocols to IMSI capturing attacks. T...

6 Pieces of Tech Every Office Needs

By Carolina Before you start buying any technology or furniture for your office, you must put in some planning and research time. There are so many options to consider and each one will have a direct impact on the functionality of your workspace and, as result, how productive you and your team ar...

Check your VPN DNS test tool legitimacy: Is it “good” or deceptive

By Zehra Ali Does your VPN leaks DNS data? Does the DNS testing tool you're using shows real results or shows sponsored results for affiliate marketing? Virtual private network VPN users are increasing at a great pace due to growing privacy concerns and numerous VPN options, including both, the...

Android banking malware distributed with fake Google reCAPTCHA

By Waqas Sucuri’s cybersecurity researchers have identified a highly sophisticated phishing campaign that is specifically targeting online banking users. The attack, for now, has been directed against a Polish bank in which attackers are exploiting Google reCAPTCHA systems as well as...

Taking Care of Your Personal Online Security (For Paranoids)

By David Balaban We live in a world where anonymity and online privacy are impossible things. Your phone calls can be tapped, smartphone data can be stolen, and even the camera and microphone can be turned on remotely. You can be watched from the satellite, in real time. We all live in the matrix...

Understanding VPN through open systems interconnection model

By David Balaban VPN is a wonderful thing that you all have probably heard about. I assume it was something like this: “Using a VPN you can visit websites blocked by state services and engage in any network activity without fear of revealing your actual IP address.” If you thought that Virtual...

Major Android ad fraud scam campaign drains battery & eats data

By Waqas Presence of infected games and apps that are costing innocent users financial and data losses is not a new phenomenon. However, it is indeed surprising that a firm that promises to fight app piracy is itself involved in this horrendous act. According to the latest research from Oracle,...

Severe flaws in password managers let hackers extract clear-text passwords

By Waqas Password Managers aren’t as secure as you might assume - Security researchers claim that hackers can steal master passwords in PC memory. Password managers are considered as one of the most suitable options when it comes to keeping your online credentials safe from being hijacked and...

Download Kali Linux 2019.1 with Metasploit 5.0

By Waqas Download Kali Linux 2019.1 now! - This is the first major update for Kali Linux ever since version 4.0 was released in 2011. Kali Linux is one of the most popular Debian-based Linux distribution for advanced Penetration Testing and that is why the InfoSec community eagerly waits for its...

Rietspoof malware distributes ransomware via messaging apps

By Waqas A malware strain dubbed as Rietspoof has been under the radar of researchers at Avast since last August. Reportedly, researchers suspect that the malware is on the rise and it is being distributed via Skype, Facebook Messenger, and other messaging apps. Researchers maintain that the...

Most & least radiation emitting smartphones in 2019

By Zehra Ali Smartphones are a utility in our lives more than any other thing. The addiction has increased to a level that most of us keep our smartphones by our side whether we are at the office, home or even while we are on the bed. According to the research by Cellular Telecommunication and...

Torrent uploader CracksNow caught distributing GrandCrab ransomware

By Waqas Famous Uploader CracksNow Banned from Torrents for Distributing GrandCrab Ransomware. CracksNow is a prominent software uploader who appears regularly on torrent sites. However, recently the account of CracksNow was banned by several torrent sites while the uploader is accused of...

Dark Web hacker selling 92M new accounts on Dream market

By Waqas The dark web hacker “Gnosticplayers” has quickly made a reputation for his high-profile data breaches and selling user data on the infamous Dream marketplace. A couple of days ago the hacker was selling 126 million accounts stolen from new data breaches and now, the same hacker is back...

Chinese facial recognition database tracking Muslims left exposed

By Waqas China is often held responsible for conducting surveillance campaigns and espionage activities discreetly not only on its citizens but governments across continents. Now, a misconfigured facial recognition database has emerged that confirms the allegations put forth against China...

Website uses Artificial Intelligence to create utterly realistic human faces

By Waqas A new way for cybercriminals to create fake social media profiles and carry identity scams using Artificial Intelligence powered tool? A couple of months ago it was reported that NVIDIA has developed a tool that uses Artificial Intelligence to create extremely realistic human faces which...

What is Ransomware and How to Prevent It?

By Zohar Pinhasi The threat of ransomware attack is growing but do you know what is ransomware and how you can protect yourself from this growing threat? If you’ve been following the news on malware scams and hacks from across the world, chances are that you might have come across the term...

Dark Web hacker selling 126M accounts stolen from new data breaches

By Waqas A dark web hacker going by the online handle of "Gnosticplayers" is selling a massive trove of user data stolen after compromising websites of several popular companies. The data which amounts to over 126 million accounts includes emails and passwords, etc. and is currently available on...

Hacked versions of popular iOS games available on App Store

By Waqas Software pirates are distributing hacked and infected versions of iPhone apps by hijacking Apple’s enterprise developer program. Reportedly, the hacked apps include versions of Minecraft, Spotify, Angry Birds, and Pokemon Go. These apps have been modified for making paid content/features...

Email service provider loses 2 decades worth of data due to hack attack

By Waqas Famed secure email service provider VFEmail has become a victim of a hack attack by an unknown cybercriminal. The company claims that it has suffered a “catastrophic destruction” of its US servers and almost two decades of data and backups in only a few hours. The entire digital...

Russian to shut down Internet to test its cyber deterrence

By Carolina To test the security of its data, Russia is considering disconnecting its Internet service for a short period of time. The test will affect all the data sent by Russian citizens or organizations as Internet access would be limited only within the national territory, meaning that they...

An info stealer .exe malware is targeting Mac users around the globe

By Waqas Cybercriminals have identified a unique method of attacking Mac devices, which involves exploiting executable or .EXE files. Those files that can be executed both on Mac and Windows devices have the potential of infecting Mac computers as these unload a .exe malware. Discovered by Trend...

Critical zero-day vulnerabilities hit Lifesize video conferencing products

By Waqas The IT security researchers at TrustWave have discovered critical zero-day vulnerabilities in video conferencing products developed by Lifesize which, if exploited by attackers can cause a great deal of damage. Lifesize is an audio and video telecommunication firm based in the United...

Clipper malware on Play Store replaces users BTC & ETH wallet address

By Waqas This is the first ever Clipper malware found on Play Store. Another day another Android malware on Google Play Store - This time the IT security researchers at ESET have discovered a malware known for replacing the content of clipboard on the targeted device. This type of malware is call...

These iOS apps have been secretly recording your screen activities

By Waqas Apple has vowed to remove iOS apps that record screen data. User data recording has become an issue of concern among the cyber-security community as the data is used to launch a variety of scams, identify customer demographics, and targeted marketing gimmicks. Mobile phone manufacturers...

Flaws in RDP protocols leaving machines prone to remote code execution

By Waqas Major Security Flaws Identified in RDP Protocols making Machines Prone to Remote Code Execution and Reverse RDP Attacks. Check Point researchers have identified that three remote desktop protocol RDP tools, which are probably the most popular ones for Windows, macOS, and Linux systems, a...

Upcoming Firefox version to offer fingerprinting & cryptomining protection

By Uzair Amir There is very good news for Mozilla Firefox users. After improving the user experience with tracking protection function offering content blocking features and other changes in Firefox 63, Mozilla is aiming for another significant update in the upcoming version of the browser. The n...

New cryptocurrency malware SpeakUp hits Linux & Mac devices

By Waqas The IT security researchers at Check Point have identified a new malware called SpeakUp targeting Linux and macOS - The new findings prove that there has been a surge in malware attacks against Linux and Apple devices. SpeakUp is a new backdoor Trojan that is being distributed by...

Crypto exchange loses access to $145M after CEO dies without giving password

By Waqas The Canada-based cryptocurrency exchange QuardigaCX has suffered a major setback after the untimely death of its founder and CEO Gerald Cotten. Apparently, Cotten had exclusive and crucial information about the exchange’s password. Now that the CEO is no more, the exchange claims to have...

Top 10 Best Antivirus software for 2019

By Zehra Ali Open the Internet and your screen will be flooded with hacking news and exploits carried out through the use of sophisticated techniques. It is not uncommon to land on news reports of millions of compromised Internet devices. These stories emerge not merely because of the hacker’s...

World’s largest data dump surfaces on web with 2.2 billion accounts

By Waqas It hasn’t even been 15 days since details of the world’s biggest online private data dump were discovered by security researchers and now its second "installment" has posted online. As per the report from Heise.de, a German-language website, the first collection, which was published on...

Ethical hacker may get 8 years in prison for reporting flaws in Magyar Telekom

By Waqas Hungary’s Prosecution Service has accused an ethical hacker and computer specialist of infiltrating the Magyar Telekom database. The office found him involved in a crime that disrupted the operations of a “public utility” thereby attempting to endanger the society. Reportedly, the hacker...

Hackers used Karma tool to hack iPhones of prominent Govt officials

By Uzair Amir UAE Launched Aggressive Cyber Espionage Campaign using KARMA and Expertise of Ex-NSA Operatives. Though it seems hard to believe it is indeed true that the smartphones of several prominent political and governmental personalities worldwide have been hacked by former US intelligence...

New Mac Malware steals iPhone text messages from iTunes backups

By Waqas The IT security researchers at Palo Alto Networks’ Unit 42 have discovered a dangerous new Mac malware capable of targeting devices for multi-purposes including stealing cryptocurrency. Dubbed CookieMiner by researchers; the Mac malware is a variant of OSX.DarthMiner, another nasty piece...

Selfie stealing malware found in popular Android beauty camera apps

By Waqas We all want to look perfect in the pictures that we post online and beauty camera apps are our best bet in order to fine-tune our pictures. However, according to the findings of Trend Micro researchers, these kinds of applications are performing more functions than what we think they are...

Authorities shut down xDedic marketplace for selling hacked servers

By Waqas The domain for xDedic has been seized as well. In a joint operation, the Federal Bureau of Investigation FBI and authorities from several European countries have successfully taken down xDedic, a notorious dark web marketplace known for selling stolen digital goods such as login...

New Firmware Version of Nintendo Switch Hacked in just 4 Hours

By Waqas Nintendo Switch Hacked: The company was claiming to have added advanced security codes in this version of Switch Firmware. The problems for Nintendo console owners are far from over as the latest firmware version got hacked in merely a few hours. According to reports, the newly rolled ou...

FaceTime bug exposes live audio & video before recipient picks call

By Waqas FaceTime bug is exposing calls and videos - Here's how to disable FaceTime until this issue is fixed. According to reports, there is a major bug in iPhone FaceTime’s video calling function that lets users hear audio from the call even before the recipient has accepted the video call...