American Airlines pilot union hit by ransomware attack

Allied Pilots Association (APA), a labor union representing 15,000 American Airlines pilots, disclosed a ransomware attack that hit its systems on Monday. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Google Play adds security audit badges for Android VPN apps

Google Play, Android's official app store, is now tagging VPN apps with an 'independent security reviews' badge if they conducted an independent security audit of their software and platform. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

New Microsoft Exchange zero-days allow RCE, data theft attacks

Microsoft Exchange is impacted by four zero-day vulnerabilities that attackers can exploit remotely to execute arbitrary code or disclose sensitive information on affected installations. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Okta breach: 134 customers exposed in October support system hack

Okta says attackers who breached its customer support system last month gained access to files belonging to 134 customers, five of them later being targeted in session hijacking attacks with the help of stolen session tokens. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Atlassian warns of exploit for Confluence data wiping bug, get patching

Atlassian warned admins that a public exploit is now available for a critical Confluence security flaw that can be used in data destruction attacks targeting Internet-exposed and unpatched instances. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Ace Hardware says 1,202 devices were hit during cyberattack

Ace Hardware confirmed that a cyberattack is preventing local stores and customers from placing orders as the company works to restore 196 servers. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

New macOS 'KandyKorn' malware targets cryptocurrency engineers

A new macOS malware dubbed 'KandyKorn' has been spotted in a campaign attributed to the North Korean Lazarus hacking group, targeting blockchain engineers of a cryptocurrency exchange platform. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

BlackCat ransomware claims breach of healthcare giant Henry Schein

The BlackCat (ALPHV) ransomware gang claims it breached the network of healthcare giant Henry Schein and stole dozens of terabytes of data, including payroll data and shareholder information. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Mortgage lender giant Mr. Cooper hit by cyberattack impacting IT systems

U.S. mortgage lending giant Mr. Cooper was breached in a cyberattack that caused the company to shut down IT systems, including access to their online payment portal. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks

A remote code execution (RCE) flaw impacting Apache ActiveMQ has been under active exploitation by threat actors who use HelloKitty ransomware payloads. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Cloudflare Dashboard and APIs down after data center power outage

An ongoing Cloudflare outage has taken down many of its products, including the company's dashboard and related application programming interfaces (APIs) customers use to manage and read service configurations. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Boeing confirms cyberattack amid LockBit ransomware claims

Aerospace giant Boeing is investigating a cyberattack that impacted its parts and distribution business after the LockBit ransomware gang claimed that they breached the company's network and stole data. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Microsoft pledges to bolster security as part of ‘Secure Future’ initiative

Microsoft announced today the 'Secure Future Initiative,' pledging to improve the built-in security of its products and platforms to better protect customers against escalating cybersecurity threats. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Okta data breach exposed personal information of employees

Okta is warning nearly 5,000 employees that the company was impacted by a data breach that exposed personal information. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Your end-users are reusing passwords – that’s a big problem

Password reuse is a difficult vulnerability for IT teams to get full visibility over. Learn more from Specops Software on how to mitigate the risk of compromised credentials. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Meta faces EU ban on Facebook, Instagram targeted advertising

The European Data Protection Board has extended the temporary ban on targeted advertising on Facebook and Instagram, imposed by the Norwegian Data Protection Authority (DPA) in July. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

FSB arrests Russian hackers working for Ukrainian cyber forces

Russia's security agency published a press release on Tuesday saying that its officers detained two hackers who either assisted or joined Ukraine's hackers in cyber operations. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Toronto Public Library outages caused by Black Basta ransomware attack

The Toronto Public Library is experiencing ongoing technical outages due to a Black Basta ransomware attack. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

New CVSS 4.0 vulnerability severity rating standard released

The Forum of Incident Response and Security Teams (FIRST) has officially released CVSS v4.0, the next generation of its Common Vulnerability Scoring System standard, eight years after CVSS v3.0, the previous major version. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Hackers use Citrix Bleed flaw in attacks on govt networks worldwide

Threat actors are leveraging the 'Citrix Bleed' vulnerability, tracked as CVE-2023-4966, to target government, technical, and legal organizations in the Americas, Europe, Africa, and the Asia-Pacific region. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

3,000 Apache ActiveMQ servers vulnerable to RCE attacks exposed online

Over three thousand internet-exposed Apache ActiveMQ servers are vulnerable to a recently disclosed critical remote code execution (RCE) vulnerability. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Microsoft: Windows Copilot makes desktop icons jump between displays

Microsoft says a new known issue is causing desktop icons to behave erratically on systems with multiple displays when using the Windows Copilot AI-powered digital assistant. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Mozi malware botnet goes dark after mysterious use of kill-switch

Mozi malware botnet activity faded away in August after a mysterious unknown party sent a payload on September 27, 2023, that triggered a kill switch to deactivate all bots. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Hackers exploit recent F5 BIG-IP flaws in stealthy attacks

F5 is warning BIG-IP admins that devices are being breached by "skilled" hackers exploiting two recently disclosed vulnerabilities to erase signs of their access and achieve stealthy code execution. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

LayerX Enterprise Browser Security Extension – Secure the Modern Workspace

LayerX has developed a secure enterprise browser extension that delivers comprehensive visibility, monitoring, and granular policy enforcement on every event within a browsing session. Learn more about this cybersecurity platform from LayerxSecurity. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Avast confirms it tagged Google app as malware on Android phones

Czech cybersecurity company Avast confirmed that its antivirus SDK has been flagging a Google Android app as malware on Huawei, Vivo, and Honor smartphones since Saturday. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Flipper Zero Bluetooth spam attacks ported to new Android app

Recent Flipper Zero Bluetooth spam attacks have now been ported to an Android app, allowing a much larger number of devices to implement these annoying spam alerts. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Windows 11 23H2 - New features in the Windows 11 2023 Update

This article will explore Windows 11 23H2 features, from dynamic lighting to Windows Copilot upgrades. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

How to download a Windows 11 23H2 ISO from Microsoft

Microsoft released Windows 11 23H2, the Windows 11 2023 Update, today, and you can now download an ISO image for the new version to put aside for emergencies or clean installs. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

British Library knocked offline by weekend cyberattack

The British Library has been hit by a major IT outage affecting its website and many of its services following a "cyber incident" that impacted its systems on Saturday, October 28. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Atlassian warns of critical Confluence flaw leading to data loss

Australian software company Atlassian warned admins to immediately patch Internet-exposed Confluence instances against a critical security flaw that could lead to data loss following successful exploitation. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Microsoft releases Windows 11 23H2 as an enablement package

Microsoft announced today the release of Windows 11, version 23H2, the next feature update for its operating system (also known as the Windows 11 2023 Update). [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Dozens of countries will pledge to stop paying ransomware gangs

An alliance of 40 countries will sign a pledge during the third annual International Counter-Ransomware Initiative summit in Washington, D.C., to stop paying ransoms demanded by cybercriminal groups. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Samsung Galaxy gets new Auto Blocker anti-malware feature

Samsung has unveiled a new security feature called 'Auto Blocker' as part of the One UI 6 update, offering enhanced malware protection on Galaxy devices. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Massive cybercrime URL shortening service uncovered via DNS data

A threat actor that security researchers call Prolific Puma has been providing link shortening services to cybercriminals for at least four years while keeping a sufficiently low profile to operate undetected. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Canada bans WeChat and Kaspersky products on govt devices

Canada has banned the use of Kaspersky security products and Tencent's WeChat app on mobile devices used by government employees, citing network and national security concerns. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Malicious NuGet packages abuse MSBuild to install malware

A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Exploit released for critical Cisco IOS XE flaw, many hosts still hacked

Public exploit code is now available for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198 that was leveraged as a zero-day to hack tens of thousands of devices. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

LastPass breach linked to theft of $4.4 million in crypto

Hackers have stolen $4.4 million in cryptocurrency on October 25th using private keys and passphrases stored in stolen LastPass databases, according to research by crypto fraud researchers who have been researching similar incidents. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

SEC sues SolarWinds for misleading investors before 2020 hack

The U.S. Securities and Exchange Commission (SEC) today charged SolarWinds with defrauding investors by allegedly concealing cybersecurity defense issues before a December 2020 linked to APT29, the Russian Foreign Intelligence Service (SVR) hacking division. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

RCE exploit for Wyze Cam v3 publicly released, patch now

A security researcher has published a proof-of-concept (PoC) exploit for Wyze Cam v3 devices that opens a reverse shell and allows the takeover of vulnerable devices. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

FTC orders non-bank financial firms to report breaches in 30 days

The U.S. Federal Trade Commission (FTC) has amended the Safeguards Rules, mandating that all non-banking financial institutions report data breach incidents within 30 days. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Google Chrome now auto-upgrades to secure connections for all users

Google has taken a significant step towards enhancing Chrome internet security by automatically upgrading insecure HTTP requests to HTTPS requests for 100% of users. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Toronto Public Library services down following weekend cyberattack

The Toronto Public Library (TPL) is warning that many of its online services are offline after suffering a cyberattack over the weekend, on Saturday, October 28. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

New BiBi-Linux wiper malware targets Israeli orgs in destructive attacks

A new malware wiper known as BiBi-Linux is being used to destroy data in attacks targeting Linux systems belonging to Israeli companies. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Huawei, Vivo phones tag Google app as TrojanSMS-PA malware

Huawei, Honor, and Vivo smartphones and tablets are displaying strange 'Security threat' alerts urging the deletion of the Google app, warning that it is detected as the 'TrojanSMS-PA' malware. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

New Hunters International ransomware possible rebrand of Hive

A new ransomware-as-a-service brand named Hunters International has emerged using code used by the Hive ransomware operation, leading to the valid assumption that the old gang has resumed activity under a different flag. [...] | Continue reading


@bleepingcomputer.com | 1 year ago

Pirate IPTV network in Austria dismantled and $1.74 million seized

The Austrian police have arrested 20 people across the country linked to an illegal IPTV network that, between 2016 and 2023, decrypted copyright-protected broadcasts and redistributed them to thousands of customers. [...] | Continue reading


@bleepingcomputer.com | 1 year ago