News

Threat Post4y
Mimecast Certificate Hacked in Supply-Chain Attack | Threatpost
Mimecast provides email security services that customers can apply to their Microsoft 365 accounts by establishing a connection to Mimecast’s servers. The certificate in question is used to ...
Threat Post2y
Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands - Threatpost
Through the first half of 2022, 34 percent of all unique phishing attacks tracked by the researchers impersonated financial services brands. The next most popular industry for criminals to abuse ...
Threat Post4y
DarkSide Getting Taken to ‘Hackers’ Court’ For Not Paying Affiliates
Cybercriminals who have worked as affiliates with ransomware group DarkSide, responsible for the Colonial Pipeline attack, are having a tough time getting paid for their work now that the group ...
Threat Post2y
Ransomware Attacks are on the Rise | Threatpost
With data gathered by “actively monitoring the leak sites used by each ransomware group and scraping victim details as they are released,” researchers have determined that Lockbit was by far ...
Threat Post2y
Cisco Confirms Network Breach Via Hacked Employee Google Account
Cisco Systems revealed details of a May hack by the Yanluowang ransomware group that leveraged a compromised employee’s Google account.
Threat Post2y
Malicious Npm Packages Tapped Again to Target Discord Users
Threat actors once again are using the node package manager (npm) repository to hide malware that can steal Discord tokens to monitor user sessions and steal data on the popular chat and ...
Threat Post3y
1M Stolen Credit Cards Hit Dark Web for Free - Threatpost
Threat actors have leaked 1 million stolen credit cards for free online as a way to promote a fairly new and increasingly popular cybercriminal site dedicated to…selling payment-card credentials.
Threat Post2y
Student Loan Breach Exposes 2.5M Records - Threatpost
EdFinancial and the Oklahoma Student Loan Authority (OSLA) are notifying over 2.5 million loanees that their personal data was exposed in a data breach.
Threat Post3y
SEGA’s Sloppy Security Confession: Exposed AWS S3 Bucket Offers Up Steam API Access & More - Threatpost
SEGA's disclosure underscores a common, potentially catastrophic, flub — misconfigured Amazon Web Services (AWS) S3 buckets.
Threat Post2y
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
Weakness in Drone Protocol The ExpressLRS protocol utilizes what is called a “binding phrase,” a kind of identifier that ensures the correct transmitter is talking to the correct receiver. The ...
Threat Post4y
Smart Doorbell Disaster: Many Brands Vulnerable to Attack
Lastly, a smart doorbell identified only as XF-IP007H, was tested. A number of brands use “XF-IP007H” in their product names, including Extaum, Docooler and Tickas. These doorbells, as with ...
Threat Post4y
Mimecast Confirms SolarWinds Hack as List of Security Vendor Victims Snowball - Threatpost
A growing number of cybersecurity vendors like CrowdStrike, Fidelis, FireEye, Malwarebytes, Palo Alto Networks and Qualys are confirming being targeted in the espionage attack.