Archive

Russia plans to disconnect the country from the internet as part of an experiment aimed at testing the response to cyber attacks that should isolate it. Russia plans to conduct the country from the Internet for a limited period of

Two different WordPress plugins have caused a few headaches this week. Hackers reportedly exploited an old vulnerability found in the WordPress plugin WP Cost Estimation & Payment Forms Builder, according to Wordfence. A second and critical vulnerability was also found

In the aftermath of multiple reports that millions of stolen records were dumped on the dark web, the dating app Coffee Meets Bagel confirmed that the accounts of approximately six million users were compromised in a breach, according to a

A leading Maltese bank is resuming its services today after shutting down operations following a major cyber-attack on Wednesday. The Bank of Valetta (BOV) said in a notice on Thursday morning that customers could once again use ATMs, online banking,

A majority of organizations confessed that they are not certain whether the security strategies they have in place will be effective in preventing data breaches, according to a Ponemon Institute survey. More than 600 cybersecurity leaders and professionals who are

A technology partner of the three big credit reporting agencies has been breached in what appears to be a classic supply chain attack. Image-I-Nation Technologies is a North Carolina-based provider of software and hosting services. It’s part of FRS Software,

Researchers devised a new technique to hide malware in the security Intel SGX enclaves, making it impossible to detect by several security technologies. Security researchers devised a new technique to hide malware in the security Intel SGX enclaves. Intel Software

The dark web seller identified as gnosticplayers on Dream Market has removed all listings that were previously up for sale, which reportedly included upwards of 620 million account records. “All my listings have been removed, to avoid them being bought

Expert discovered a privilege escalation vulnerability in default installations of Ubuntu Linux that resides in the snapd API. Security researcher Chris Moberly discovered a vulnerability in the REST API for Canonical’s snapd daemon that could allow attackers to gain root

The vast majority of UK businesses have suffered data breaches over the past 12 months, many of them multiple times, according to new research from Carbon Black. The endpoint security vendor’s second UK Threat Report is based on interviews with

A major cyber-attack has hit email provider VFEmail in what the company is calling a “catastrophic attack,” which has destroyed all data in the US, including backups. The company issued an alert via its website and social media accounts on

620 million accounts stolen from 16 hacked websites (Dubsmash, Armor Games, 500px, Whitepages, ShareThis) available for sale on the dark web The Register revealed in exclusive that some 617 million online account details stolen from 16 hacked websites are available

Enterprises have been urged to patch a serious flaw in runc, the default runtime for Docker and Kubernetes, and ensure they have SELinux enabled. Aleksa Sarai — one of the maintainers for runc — made the initial announcement on Tuesday,

“The security discussion starts with risk, but what has become very apparent at the board level is that most don’t really understand what’s in front of them.” These were the words of Ali Neil, director international security, Verizon, speaking at

The 0patch experts released a micropatch to address an in Adobe Reader zero-day that allows maliciously PDF docs to call home and send over the victim’s NTLM hash. The 0patch experts released a micropatch to address a zero-day vulnerability in

Cybaze-Yoroi ZLAB revealed interesting a hidden connection between the AZORult toolkit and specific Gootkit payload. Introduction In the last days, a huge attack campaign hit several organizations across the Italian cyberspace, as stated on bulletin N020219 the attack waves tried