Archive

Pharmacy store chain Walgreens has disclosed a data breach that impacted some customers of its mobile application. Pharmacy store chain Walgreens has disclosed a data breach that impacted some customers of its mobile application. The mobile app allows users to

Researchers discovered a new attack method dubbed SurfingAttack that enables the attacker to control the voice-controlled device from over a longer distance. With this attack method attackers can hijack a mobile Short Message Service (SMS) passcode, making ghost fraud calls

A security company has accused America’s Central Intelligence Agency (CIA) of waging an 11-year campaign of cyber-espionage against critical industries in the People’s Republic of China. Qihoo 360 announced yesterday that it had “discovered and revealed cyber-attacks by the CIA

Experts from Cybaze/ Yoroi Zlab spotted a new sample of the Karkoff implant that was employed in past campaigns associated with Iran-linked APT34 group. In November 2018, researchers from Cisco Talos tracked and detailed a “DNSEspionage” campaign against targets in

America’s second-largest pharmacy store chain has disclosed an app error that let customers view the private personal messages of other customers. For nearly a week last month, users of the Walgreens mobile app were able to view the first and

British cybersecurity company Sophos announced today that its acquisition by Thoma Bravo is now complete. The private equity firm snapped up the company in a cash transaction that values Sophos at $3.9bn. Under the terms of the agreement, Sophos stockholders

The personal data of 10,000 UK rail passengers has been exposed after a Wi-fi provider left a database unsecured online. C3UK provides passengers with free Wi-fi at railway stations across the UK. The company admitted failing to secure a database

SurfingAttack is an attacking technique that allows to wake up mobile device and control them using voice commands encoded in ultrasonic waves. SurfingAttack is a hacking technique that sees voice commands encoded in ultrasonic waves silently activate a mobile phone’s

The volume of HMRC phishing emails reported by the public has fallen sharply over the past two years, as those related to SMS- and phone-based scams increased, according to a new Freedom of Information (FOI) request. UK-based Griffin Law obtained

The UK parliament has invoked the spirit of Guy Fawkes in a bid to improve cybersecurity awareness among lawmakers. A reported newsletter update sent to members of the House of Lords warned that the infamous Gunpowder Plot to blow up

The Home Office breached the GDPR 100 times in its handling of EU citizens’ data in the space of just five months, an inspector’s report has revealed. Between March 30 and August 31 2019 the government department admitted a catalog

Security experts uncovered an ongoing campaign delivering Nemty Ransomware via emails disguised as messages from secret lovers. Researchers from Malwarebytes and X-Force IRIS have uncovered an ongoing spam campaign distributing the Nemty Ransomware via messages disguised as messages from secret

Researchers uncovered a new site take over the campaign that targeting WordPress websites by exploiting the multiple WordPress Plugin Zeroday vulnerabilities. 3 popular WordPress plug-ins are exploited as a part of this ongoing site take over attack campaign. Async JavaScript,

A researcher discovered a critical Account takeover vulnerability in Facebook’s Authorization feature “Login with Facebook” and, it allowed attackers to steal the Access_Token and completely take over the victim’s Facebook account. Facebook using OAuth 2.0 as an Authorization protocol that

Deep Web Search Engine is an alternative search engine when we need to search something, then Google or Bing will the first choice hit in mind suddenly. But unlike the Deep Web Search Engine, Google and Bing will not give

Not only Maze ransomware gang, the operators behind Sodinokibi Ransomware allegedly leaked the data of Kenneth Cole Productions. The operators behind Sodinokibi Ransomware have published the download links to archives containing data allegedly stolen from the US firm Kenneth Cole Productions. The