Google Chrome rival Brave reports another big jump in users
Brave, the Chromium-based and privacy-focused browser, now has 50 million monthly active users. That total means user numbers have more than doubled from the 24 million it had at the
$50 Million Lost to Fraudsters Posing as Broker-Dealers
A man from California confessed his involvement in a large-scale and long-running Internet-based fraud scam that enabled him and other fraudsters to steal about $50 million from dozens of investors
Your cybersecurity training needs improvement because hacking attacks are only getting worse
The threat of cyberattacks is growing and much more needs to be done to educate businesses and users about risks in order to prevent widespread damage and disruption as a
Man Pleads Guilty to $50m Investment Fraud Scheme
Man Pleads Guilty to $50m Investment Fraud Scheme A Californian man has admitted his part in a $50m conspiracy to defraud scores of investors via lookalike scam websites. Allen Giltman,
Crypto Firm Pulls the Rug from Under Investors with $10m Scam
Crypto Firm Pulls the Rug from Under Investors with $10m Scam A securely vetted cryptocurrency firm appears to have scammed customers out of millions after its developers made off with their
Credential Stuffers Compromised 1.1 Million Accounts
Credential Stuffers Compromised 1.1 Million Accounts Credential stuffers have compromised over a million customer accounts linked to 17 well-known companies, New York’s attorney general has confirmed. Letitia James yesterday announced
1.1M Compromised Accounts Found at 17 Major Companies
The accounts fell victim to credential-stuffing attacks, according to the New York State AG. There have been more than 1.1 million online accounts compromised in a series of credential-stuffing attacks
Google Chrome update includes 37 security fixes
Google rolled out an update for Chrome this week on Windows, Mac and Linux that included 37 security fixes, one of which was rated critical. Google Chrome’s Prudhvikumar Bommana thanked dozens
McMenamins Reports Data Breach
McMenamins Reports Data Breach A cyber-attack on American hospitality chain McMenamins may have exposed data belonging to its current and former employees. The business, which owns and operates brewpubs, breweries, music venues,
‘Elephant Beetle’ Lurks for Months in Networks
The group blends into an environment before loading up trivial, thickly stacked, fraudulent financial transactions too tiny to be noticed but adding up to millions of dollars. Researchers have identified
Kansas Gets 17 Critical Cybersecurity Recommendations
Kansas Gets 17 Critical Cybersecurity Recommendations A task force formed to assess gaps and possibilities in the cybersecurity posture of Kansas has made 41 key recommendations. Seventeen of the recommendations
Broward Breach Highlights Healthcare Supply-Chain Problems
More than 1.3 million patient records were stolen in the just-disclosed breach, which occurred back in October. This week’s announcement by Florida’s Broward Health System that the most intimate medical
Uber Bug, Ignored for Years, Casts Doubt on Official Uber Emails
A simple-to-exploit bug that allows bad actors to send emails from Uber’s official system — skating past email security — went unaddressed despite multiple flagging by researchers. A security vulnerability
Cloud video platform abused in web skimmer attack against real estate sites
According to Unit 42 researchers, attackers injected skimmer code into a video player and when a site embedded that player, it also embedded the malicious script and got infected. Palo
Kazakhstan leaders shut down internet amid gas price protests
Internet service in Kazakhstan was disrupted this week as thousands took to the streets in protest over a rise in energy prices. The internet was partially restored on Wednesday but there
Morgan Stanley Agrees to Data Breach Settlement
Morgan Stanley Agrees to Data Breach Settlement American multinational investment bank and financial services company Morgan Stanley has agreed to pay $60m to settle a legal claim over data security. A class-action lawsuit was
FTC to Go After Companies that Ignore Log4j
Companies that fail to protect secure consumer data from Log4J attacks are at risk of facing Equifax-esque legal action and fines, the FTC warned. The Federal Trade Commission (FTC) will
NY AG notifies 17 companies of breaches, says 1.1 million accounts compromised in attacks
Seventeen companies have been informed of cyberattacks that compromised user information by New York Attorney General Letitia James following an investigation into credential stuffing. More than 1 million customer accounts
FBI Email Account Abused to Send Out Warnings of Fake Cyberattacks
Security Intelligence – FBI Email Account Abused to Send Out Warnings of Fake Cyberattacks Someone used an FBI email account to send out messages warning recipients of fake cyberattacks that
9-year-old Windows flaw abused to drop ZLoader malware in 111 countries
The vulnerability was identified and fixed in 2013 but in 2014 Microsoft revised the fix allowing Malsmoke hackers in 2022 to spread ZLoader malware. Israel-based cybersecurity firm Check Point Research
Heimdal™ Security Threat-Hunting Journal: End of the Year Wrap-up in Malware
Marking the end of 2021, Heimdal™ has enacted the very first entry of the Threat-Hunting journal, a blog section dedicated to the latest cybersecurity threats. The article and its findings
This iOS 15 bug could crash your iPhone permanently
A security researcher has publicly disclosed a bug present in iOS 15.2 (and going back to iOS 14.7 and possibly earlier) relating to HomeKit that could be used to permanently
More than 1.1 million online credentials found in NY AG credential stuffing investigation
Written by AJ Vicens Jan 5, 2022 | CYBERSCOOP A months-long investigation into credential stuffing attacks by the New York attorney general’s office found credentials for more than 1.1 million
Want to improve the security of your application? Think like a hacker
When it comes to securing software systems, pretty much everybody is worried about getting hacked. But what’s the best way to defend? To defend against attackers, you need to think
Aqua Security Appoints Paul Calatayud as CISO
Aqua Security Appoints Paul Calatayud as CISO Aqua Security has announced the appointment of Paul Calatayud as its chief information security officer (CISO). The Israeli cloud security firm has tasked Calatayud
Cloud Video Platform Used By Cybercriminals to Steal Payment Information
Threat actors used an unnamed cloud video hosting service to inject malicious scripts into over 100 real estate websites owned by the same holding company. The goal of this supply chain
‘Malsmoke’ Exploits Microsoft’s E-Signature Verification
The info-stealing campaign using ZLoader malware – previously used to deliver Ryuk and Conti ransomware – already has claimed more than 2,000 victims across 111 countries. Threat actors are exploiting
DatPiff Data Breach Has an Impact on Millions of People, Have I Been Pwned Warns
A DatPiff data breach is currently impacting many people, as reportedly approximately 7.5 million DatPiff members’ passwords have been put up for sale online. To check if you’re one of
Purple Fox rootkit discovered in malicious Telegram installers
The Purple Fox rootkit is now being distributed through malicious, fake Telegram installers online, researchers have warned. This week, the Minerva Labs cybersecurity team, working with MalwareHunterTeam, said that Purple
The US Federal Trade Commission (FTC) Urges Companies to Secure Consumer Data
The Federal Trade Commission is an independent agency of the United States government whose primary objective is to enforce civil antitrust law in the United States and to promote consumer
Palo Alto Networks Appoints CEO for EMEA and LATAM Regions
Palo Alto Networks Appoints CEO for EMEA and LATAM Regions Cybersecurity firm Palo Alto Networks has announced the appointment of Helmut Reisinger to CEO for its operations across the EMEA and LATAM
Morgan Stanley agrees to $60 million settlement in data breach lawsuit
Morgan Stanley has agreed to a settlement figure of $60 million to resolve a data breach lawsuit. The US bank and financial services giant was subject to a class-action suit
Security Blueprint: Understanding the Sales Process & Technical Requirements
A solid security blueprint helps you provide customers with the knowledge and solutions they need to protect their data and systems. But to ensure its success, you need to develop
Malsmoke hackers abuse Microsoft signature verification in ZLoader cyberattacks
The Malsmoke hacking group is now abusing a vulnerability in Microsoft’s e-signature verification tool to deploy malware and steal user data. On Wednesday, Check Point Research (CPR) said that as
Info-Stealing Malware Hits 100+ Countries
Info-Stealing Malware Hits 100+ Countries Researchers warn of a new malware campaign that has already stolen passwords and user information from over 2000 victims in 111 countries worldwide. ZLoader is
China moots additional security rules for apps that influence public opinion
China has released draft laws that will require, amongst others, mobile apps to be licensed if they provide news and go through a security assessment if they can influence public
UK's Information Commissioner Starts New Role Amid Major Changes
UK's Information Commissioner Starts New Role Amid Major Changes The UK’s new data protection tsar began his role this week at the start of what promises to be a momentous
FTC: Patch Log4j Now or Risk Major Fines
FTC: Patch Log4j Now or Risk Major Fines The Federal Trade Commission (FTC) has urged US organizations to patch the recently discovered Log4Shell vulnerability or risk facing punitive action from
Services Australia brushes off vulnerability concerns in COVID-19 digital certificates
Image: Cameron Spencer/Getty Images During Australia’s federal Budget Estimates last year, Services Australia was grilled by senators about various initiatives under its remit, from the COVID-19 digital certificate rollout to
4 things that you didn’t know your smartphone could do
We all tend to use a smartphone in our day-to-day lives now. In fact, you could argue that they are absolutely fundamental pieces of equipment that we would struggle to
Chinese tech companies must undergo government cyber review to list overseas
Image: Kevin Frayer/Getty Images China on Tuesday evening confirmed it will increase oversight on how local tech companies operate their platforms both locally and overseas through two new sets of
Apache Log4j: Mitigation for DevOps
Trend Micro – Apache Log4j: Mitigation for DevOps Cloud Native What can DevOps teams do to mitigate Apache Log4j risks? Explore how to secure your apps for today and against
FTC to pursue companies that expose customer data due to not patching Log4j
Image: perinjo/ GETTY The United States Federal Trade Commission has issued a warning that it will chase companies that do not remedy the vulnerability in the Java logging package Log4j.
Microsoft Sees Rampant Log4j Exploit Attempts, Testing
Microsoft says it’s only going to get worse: It’s seen state-sponsored and cyber-criminal attackers probing systems for the Log4Shell flaw through the end of December. No surprise here: The holidays
SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More
SEGA’s disclosure underscores a common, potentially catastrophic, flub — misconfigured Amazon Web Services (AWS) S3 buckets. Gaming giant SEGA Europe recently discovered that its sensitive data was being stored in
Investigation Launched into App “Selling” Women
Investigation Launched into App “Selling” Women Police in India have launched an investigation into an app featuring images of Muslim women whom it described as being “for sale as maids.”
Data Skimmer Hits 100+ Sotheby’s Real-Estate Websites
The campaign was an opportunistic supply-chain attack abusing a weaponized cloud video player. A supply-chain campaign infecting Sotheby’s real-estate websites with data-stealing skimmers was recently observed being distributed via a
Over 20 years of employee data leaked during McMenamins ransomware attack
Oregon-based venue operator McMenamins said employee data was accessed during a ransomware attack that occurred on December 12. In a statement, the company explained that even though they managed to