What's new arround internet

Last one

Src Date (GMT) Titre Description Tags Stories Notes
itsecurityguru.webp 2022-10-07 13:40:36 (Déjà vu) Newly Discovered Android Spyware \'RatMilad\' Targets Enterprise Devices in Iran (lien direct) Earlier this week, a newly discovered Android spyware family dubbed ‘RatMilad’ has been observed trying to infect an enterprise device in the Middle East. It appears that the discovery comes from security researchers at Zimperium, who said the original variant of the previously unknown RatMilad spyware hid behind a VPN and phone number spoofing app […]
itsecurityguru.webp 2022-10-07 13:32:40 Meta Law Suit Against Chinese Devs Over WhatsApp Malware Plot (lien direct) Earlier today, WhatsApp parent company Meta announced that they are suing three Chinese developers for allegedly tricking users into downloading fake versions of the app that harvested their login details. It appears that WhatsApp and Meta are listed as plaintiffs in the case, filed in the US District Court for the Northern District of California […] Malware
itsecurityguru.webp 2022-10-04 10:29:26 KnowBe4 Launches Cybersecurity Awareness Month University Challenge (lien direct) KnowBe4, the provider of the world's largest security awareness training platform, announced it is spearheading an initiative among UK universities that invites students with an interest in media/comms or cybersecurity to work collaboratively together to produce a security awareness video that addresses one of the themes from Cyber Security Awareness Month (CAM). Supported and judged […]
itsecurityguru.webp 2022-10-03 10:13:19 LA Unified School District Warns Of Hackers Posting Stolen Data Online (lien direct) Earlier today, the second largest school district in the US has warned that hackers have begun posting data they claim to have stolen from the institution last month In early September. the Los Angeles Unified School District (LAUSD), which serves over 600,000 students from kindergarten to twelfth grade, was compromised by the Vice Society group. For […]
itsecurityguru.webp 2022-10-03 10:06:39 Lessons from the cyber front line (lien direct) Very few weeks go by without news of another cyber attack or data breach and a quick scan of the BBC news website shows that in most months, there is at least one story that makes the national news headlines. While just a few years ago, many cyber attacks would go unnoticed by the public […] Data Breach
itsecurityguru.webp 2022-09-30 13:25:06 (Déjà vu) LeakBase Announces Swachhata Platform Breached, 16 Million User PII Records Exposed (lien direct) Yesterday, data breach notification website Leakbase said someone allegedly hacked the Swachhata Platform in India and stole 16 million user records. Security researchers at CloudSEK , reported the news as they discovered a post by Leakbase sharing data samples containing personally identifiable information (PII), including email addresses, hashed passwords and user IDs. Earlier this week, […] Data Breach
itsecurityguru.webp 2022-09-30 13:10:39 (Déjà vu) Malicious Campaign Uses Government, Union-Themed Lures to Deliver Cobalt Strike Payloads (lien direct) Earlier this week, researchers at security firm Cisco Talos discovered a malicious campaign in August 2022 that relied on modularized attack techniques to deliver Cobalt Strike beacons and used them in follow–on attacks. It was reported that the company published a new advisory about the campaign on Wednesday saying the threat actors behind it used a […] Threat
itsecurityguru.webp 2022-09-28 10:09:20 Optus telco data breach – what we know so far (lien direct) Optus, an Australian telecoms provider, has become the latest high-profile victim of a data breach – with the alleged attacker demanding payment to buy back millions of customer records, having already made 10,000 public online.  In the most recent developments, the attacker has now rescinded threats and deleted them from a data breach website. However, […] Data Breach
itsecurityguru.webp 2022-09-26 10:42:01 Collaboration in Cyber Security is the Key to Combatting the Growing Cyber Threat. Here\'s Why (lien direct) Cyber security has never been so important and in a post-pandemic world it is more important than ever. According to a recent report by Kaspersky, the number of the number of Trojan-PSW (Password Stealing Ware) detections increased by almost a quarter globally – 4,003,323 in 2022 compared to 3,029,903 in 2021. In addition, internet attacks […]
itsecurityguru.webp 2022-09-23 09:55:30 Twitter Password Reset Bug Uncovered User Accounts (lien direct) Yesterday Twitter announced that they had remediated an issue that allowed accounts to stay logged in across multiple devices even after a voluntary password reset. In an update earlier this week, the social media company explained that the bug meant users who proactively changed their passwords on one device may have still been able to […]
itsecurityguru.webp 2022-09-21 08:55:04 Experts Weigh in on Rockstar GTA Leak (lien direct) Rockstar Games, the publishers behind the popular Grand Theft Auto (GTA) franchise, announced earlier this week that data from the latest instalment of the GTA series has been leaked online. The leak is being described as one of gaming’s biggest security breaches. The publishers were unable to clarify how the “network intrusion” happened, but confirmed […]
itsecurityguru.webp 2022-09-20 10:48:47 American Airlines Announce Data Breach Exposing Customer and Staff Information (lien direct) Earlier today, American Airlines became the latest big-name brand to announce a data breach, after an unauthorized actor compromised employee inboxes. A statement released from the aerospace giant confirmed that the source of the incident was a phishing attack which “led to the unauthorized access to a limited number of team-member mailboxes.” The airline explained that […] Data Breach
itsecurityguru.webp 2022-09-16 11:03:12 Cost of Living Crisis Impact on Online Activity (lien direct) A new survey conducted amongst 600 parents across the UK by Censuswide on behalf of International Cyber Expo found that 40% of parents believe children will turn to cyber crime during the cost of living crisis. The survey also revealed that 40% of parents have fallen victim to at least one security breach as a […]
itsecurityguru.webp 2022-09-16 09:30:13 Crypto Scams Skyrocket as Domains Surge 335% (lien direct) It has been predicted that cryptocurrency scams are set to explode after researchers reported a triple-digit increase in registered domains in the first half of 2022, compared to the whole of last year. Cyber security service provider, Group-IB said that they had detected over 2000 domains registered to be used as fake promotion websites in the […]
itsecurityguru.webp 2022-09-14 09:19:51 iOS 16 Launches With Advanced Cyber Protection (lien direct) Earlier this week, Apple officially launched its new iOS 16 operating system update for iPhone devices. The update contains several security-focused and privacy features. iOS 16 was first unveiled in June at the WWDC 2022 conference. The update supports iPhone devices starting from iPhone 8, as well as second and third generation iPhone SE devices. […]
itsecurityguru.webp 2022-09-13 11:05:40 Edinburgh\'s Adarma partners with The Princes Trust to support inclusivity in cybersecurity (lien direct) Adarma, the UK's largest independent cyber threat management company, has today announced a new partnership with The Prince's Trust to launch a 'Get Started in Cybersecurity' programme aimed at empowering individuals between the ages of 21 and 30 with cyber skills training and driving greater inclusivity within the industry. Adarma's CEO, John Maynard, will join […] Threat
itsecurityguru.webp 2022-09-12 11:23:19 Policy Monitor to launch CSPM, an Information Security Management System, at the International Cyber Expo (lien direct) Policy Monitor, the London-based cybersecurity and risk management experts, will launch Cyber Security Policy Monitor (CSPM) at this year’s International Cyber Expo in London. CSPM is a simple and cost-effective cloud-based solution that helps measure, manage and monitor an organisation's cyber security workflow and compliance. The information security management system gives cyber security peace of […]
itsecurityguru.webp 2022-09-05 14:23:38 Learn About Alert Logic\'s New Intelligent Response Capabilities at International Cyber Expo (lien direct) Alert Logic by HelpSystems launched general availability of its new intelligent response capabilities this year. The innovations, including simple mode and a mobile application, relieve IT and security departments of repetitive response tasks and the need for constant administration through human-guided and fully automated workflows. Seedrs, Europe's leading online private investment platform, is among the first […] Guideline
itsecurityguru.webp 2022-09-05 09:50:57 Samsung Hit By Data Breach (lien direct) In Late July, an undisclosed number of Samsung customers in the US had their personal information accessed by an unauthorised user. Samsung, the Korean electronics giant, said that it discovered the breach on 4th August 2022. It has since secured the affected systems, engaged a third-party security firm and contacted law enforcement. A statement issued […] Data Breach
itsecurityguru.webp 2022-09-02 10:10:28 TikTok Vulnerability Discovered on Android (lien direct) Researchers have discovered a critical vulnerability in the TikTok Android app which could allow hackers to hijack user accounts remotely. The vulnerability, CVE-2022-28799, was reported to the ByteDance owned company by Microsoft in February 2022. Tiktok quickly fixed the issue. It is estimated that the app has around 1.5billion downloads on the Play Store, however, […] Vulnerability
itsecurityguru.webp 2022-09-01 09:55:06 1859 Apps Contain Hard-Coded AWS Credentials (lien direct) Security researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services (AWS) credentials. This poses a huge security risk. Symantec’s Threat Hunter Team, a part of Broadcom Software, wrote in a report that “over three-quarters (77%) of the apps contained valid AWS access tokens allowing access to private AWS cloud services.” […] Threat
itsecurityguru.webp 2022-09-01 09:06:43 Over a Third of Parents Do Not Know What Online Accounts Their Children Use (lien direct) A new survey by Censuswide and the International Cyber Expo found that over a third (34%) of parents are unaware of what online accounts their children are using, highlighting a worrying lack of awareness surrounding their children's online activity. The survey was conducted amongst 600 parents across the UK. The survey did find that over […]
itsecurityguru.webp 2022-08-30 13:22:03 3 Cybersecurity Trends for 2022 (lien direct)   As cyber criminals continue to employ increasingly sophisticated methods to breach security protocols within organizations, cybersecurity will remain a major concern for businesses of all sizes. As such, the cost of cybercrime is set to increase with the global cybersecurity market estimated to reach $403.01 billion by 2027 with a compound annual growth rate […]
itsecurityguru.webp 2022-08-30 09:47:38 Akasa Air Suffers Data Leak on First Day of Operation (lien direct) India’s newest commercial airline, Akasa Air, exposed personal data belonging to its customers. The company blamed these data leaks on technical configuration errors. Ashutosh Barot, a security researcher, added that this issue originated in the account registration process, leading to the exposure of personal information such as gender, email addresses, names, and phone numbers. The […] Guideline
itsecurityguru.webp 2022-08-25 12:03:47 (Déjà vu) Quantum Ransomware Attack Disrupts Government Agency in Dominican Republic (lien direct) The Dominican Republic’s Instituto Agrario Dominicano (IAD) has suffered a Quantum ransomware attack. The attack encrypted multiple services and workstations throughout the government agency. The IAD is part of the Ministry of Agriculture and is responsible for executing Agrarian Reform programmes in the country. According to local media reports, the ransomware attack occurred on 18th […] Ransomware
itsecurityguru.webp 2022-08-25 10:51:24 EU Report Outlines Cyber Response to Ukraine Invasion (lien direct) The EU’s Justice and Home Affairs Agencies’ Network (JHAAN) has released new details of its continued work to monitor and contain cyber-threats since Russia’s invasion of Ukraine. A recently published paper, Contributing to the EU’s Solidarity with Ukraine, outlines the work of nine EU agencies in this area. The list includes the European Union Agency […] ★★★★
itsecurityguru.webp 2022-08-24 14:01:16 Fighting Cyber Attackers Earlier to Reduce Risk (lien direct) We face an exciting evolution in the cybersecurity sector.  Attackers are becoming both more efficient and intelligent at evaluating their targets and successfully carrying out their intended campaigns. Often money is at the forefront of their minds but, as we have seen recently, drivers may also be geo-political or activist views. Whatever their motivations, financial […] ★★
itsecurityguru.webp 2022-08-24 13:40:56 Transatlantic Cyber Security Business Network (TCBN) partners with International Cyber Expo 2022 (lien direct) Earlier this week it was announced that the Transatlantic Cyber Security Business Network (TCBN) have partnered with the International Cyber Expo 2022. The event, which runs from 27th-28th September at Olympia London, Kensington, will host 5000 delegates and over 100 leading cyber vendors. As part of the event, TCBN will host its own exhibit that […] Guideline ★★
itsecurityguru.webp 2022-08-23 11:12:43 (Déjà vu) Counterfeit Phones Found to Contain Backdoor to Hack WhatsApp (lien direct) Budget Android device models that are counterfeit versions associated with popular smartphone brands contain multiple hidden trojans designed to target WhatsApp and WhatsApp Business messaging app. Doctor Web first came across the malware in July 2022. It was discovered in the system partition of at least four different smartphones: radmi note 8, P48pro, Note30u, and […] Malware Hack
itsecurityguru.webp 2022-08-19 11:21:50 (Déjà vu) Ring App Vulnerability Urgently Patched by Amazon (lien direct) Amazon have patched a high-severity security issue in its Ring app for Android in May that could have enabled a rogue application installed on a user’s device to access sensitive information and camera recordings. The Ring app for Android has over 10 million downloads. Application security firm Checkmarx explained that it identified a cross-site scripting […] Vulnerability
itsecurityguru.webp 2022-08-17 12:32:01 Securing OT That Can\'t Be Patched (lien direct) As industrial organisations digitise their environments, this is exposing critical operational technology (OT) to security vulnerabilities, while presenting new windows of opportunity for cybercriminals. Since last year, there has been an 88% increase in OT vulnerabilities, which are used to attack critical infrastructure and expose vital systems to potentially devastating breaches.[i] With OT systems supporting […]
itsecurityguru.webp 2022-08-17 09:33:15 (Déjà vu) Job Seekers Targeted in Lazarus Group Hack (lien direct) The North Korea state-backed Lazarus Group has been observed to be targeting job seekers with malware capable of executing on Apple Macs with Intel and M1 chipsets. ESET, a Slovak cybersecurity firm, linked these events to a campaign dubbed “Operation In(ter)ception” that was first disclosed in June 2020 and involved using social engineering tactics to […] Malware Hack Medical APT 38
itsecurityguru.webp 2022-08-16 09:45:49 (Déjà vu) Signal Confirms Roughly 1900 Users Affected by Twilio Breach (lien direct) On Monday, popular end-to-end encrypted messaging service Signal disclosed the cyberattack aimed at Twilio earlier this month may have exposed the phone numbers of roughly 1900 users. Signal said, “for about 1,900 users, an attacker could have attempted to re-register their number to another device or learned that their number was registered to Signal. All users […]
itsecurityguru.webp 2022-08-16 08:47:21 Are Cloud Environments Secure Enough for Today\'s Threats? (lien direct) Cyber security is a major problem right now. Not only is it the highest priority of any given business to keep their own data but their customers' and clients' data secure, but changes in the workplace have had a knock-on effect on cyber security. The concept of working from home has forced businesses all around […]
itsecurityguru.webp 2022-08-15 09:56:43 Google Fined A$60million in Penalties For Misleading Users on Location Data (lien direct) Alphabet Inc’s Google Unit was ordered by Australia’s Federal Court to pay A$60million in penalties for misleading users on collection of their personal location data, according to Australia’s competition watchdog. The court found that Google mislead some customers about their personal location data that was being collected through their Android mobile devices between January 2017 […] Guideline ★★★★
itsecurityguru.webp 2022-08-12 10:14:24 Recovery From NHS Attack Could Take Weeks (lien direct) Last week, Advanced, a key NHS IT partner was hit by a ransomware attack. The IT company has said that it could take three to four weeks for systems to resume normal service. Advanced runs several key systems within the health service. One of its most important clients is the NHS 111 service. The UK […] Ransomware
itsecurityguru.webp 2022-08-12 08:13:59 Industry All-Stars Take Stage at International Cyber Expo\'s Global Cyber Summit (lien direct) International Cyber Expo today announced the speaker line-up for its annual Global Cyber Summit sponsored this year by Snyk, and hosted at Olympia London on the 27th and 28th of September 2022. Introduced by former CEO of NCSC, Professor Ciaran Martin CB, the Summit endeavours to be an educational platform for IT professionals, C-Level executives […]
itsecurityguru.webp 2022-08-10 09:09:07 Meta Take Action Against Two Cyber Espionage Operations in South Africa (lien direct) Action has been taken against two cyber espionage operations in South Africa, according to Meta. Action has been taken against Bitter APT and APT36. The announcement was made by the company last Thursday in its Quarterly Adversarial Threat Report, Second Quarter 2022. In the report, Meta’s Global Threat Intelligence Lead, Ben Ninmo, and Director of […] Threat Guideline APT 36
itsecurityguru.webp 2022-08-09 10:43:46 7-Eleven Stores in Denmark Close After Cyberattack (lien direct) 7-Eleven stores in Denmark closed their doors yesterday after a cyberattack disrupted store payment and checkout systems throughout the country. The attack occurred early on the 8th August, with the company posting on Facebook that they were likely “exposed to a hacker attack”. The translated statement says that the company has closed all the stores […]
itsecurityguru.webp 2022-08-09 10:08:23 Twilio Suffers Phishing Based Data Breach (lien direct) Twilio, the communications giant, has confirmed that hackers accessed customer data after successfully tricking employees into handing over their corporate login credentials. The company, based in San Francisco, allows users to build voice and SMS capabilities, such as two-factor authentication (2FA), into applications, said that it became aware that someone gained “unauthorised access” to information […] Data Breach
itsecurityguru.webp 2022-08-09 09:25:56 How to stay safe from cybercriminals and avoid data breaches (lien direct) A data breach is any person's nightmare. It can affect you mentally and financially, and an 100% unhackable device or account necessitates taking precautionary measures.   Hackers target small and medium businesses as they don't have the resources to pay for cybersecurity tools and network upgrades to protect their data against the latest cybercriminals' tricks as […] Data Breach
itsecurityguru.webp 2022-08-08 15:44:40 Attack on Supplier Leaves NHS Recovering Services (lien direct) A cyberattack, first identified last Thursday, has caused a “major” computer system outage affecting companies within the NHS, including the 111 call line. Reportedly, a number of health and care systems delivered by business software and services provider Advanced are currently experiencing major outages. Advanced has 26 NHS clients, according to Digital Health Intelligence, and […]
itsecurityguru.webp 2022-08-08 13:49:02 How You Can Hack Your Senses to Work Better (lien direct) Cybersecurity has never been a low-stress field. The industry attracts dedicated, highly-skilled perfectionists who are all too willing to shoulder the burden of a company's cybersecurity without complaint. Yet, increased threats of ransomware and cyberattacks are creating an anxiety filled workplace. The current technological skills gap means there is frequently too much work for too […] Ransomware Hack
itsecurityguru.webp 2022-08-08 09:04:18 (Déjà vu) Slack Resets Passwords After Hashes Exposed When Invitations Shared (lien direct) Slack has notified roughly 0.5% of its users that it reset their passwords after fixing a bug that exposed salted password hashes when creating or revoking shared invitation links for workspaces. Reported by BleepingComputer, Slack said “when a user performed either of these actions, Slack transmitted a hashed version of their password (not plaintext) to […]
itsecurityguru.webp 2022-08-04 14:55:07 CREST membership body announces OWASP Verification Standard programme (lien direct) CREST, the international not-for-profit, membership body representing the global cyber security industry, in consultation with the Open Web Application Security Project (OWASP), has launched the OWASP Verification Standard (OVS), a new quality assurance standard for the global application security industry. CREST OVS provides mobile and web app developers with greater security assurance and accredited organisations […]
itsecurityguru.webp 2022-08-03 15:22:35 APIs attacked in 94% of companies in past year (lien direct) Salt Security, the API security company, today released the Salt Labs State of API Security Report, Q3 2022. In its latest edition, the bi-annual report found that 94% of survey respondents experienced security problems in production APIs in the past year, with 20% stating their organisations suffered a data breach as a result of security […] Data Breach
itsecurityguru.webp 2022-08-03 10:43:52 Conservative Party Leadership Election Warned of Potentially Malicious Efforts to Alter the Result of Upcoming Election (lien direct) Security researchers in the UK warn of potentially malicious efforts to alter the result of the upcoming Conservative Party leadership election. The next Prime Minister of the country will be decided by around 160,000 party members when they decide between current foreign secretary Liz Truss and former chancellor Rishi Sunak. The National Cyber Security Centre […] Guideline
itsecurityguru.webp 2022-08-02 13:26:28 Armis aims to improve financial services cyber resilience with UK Finance membership (lien direct) Armis, the unified asset intelligence platform, has joined the premier industry body for financial services in the UK, UK Finance, to help members tackle cybersecurity challenges stemming from managed or unmanaged connected assets in their environments. As an associate member, Armis says it will use the partnership to drive awareness of financial institutions' risk exposures […]
itsecurityguru.webp 2022-08-01 11:24:03 (Déjà vu) Australian Man Charged With Purported Role in Creation and Sale of Spyware Used by Domestic Violence Perpetrators (lien direct) A 24-year-old Australian national has been charged for his purported role in the creation and sale of spyware for use by child sex offenders and domestic violence perpetrators. Jacob Wayne John Keen, from Melbourne, is said to have created the remote access trojan (RAT) when he was 15, alongside working as an administrator for the […]
itsecurityguru.webp 2022-08-01 10:39:47 (Déjà vu) Congress Warns of US Court Records Data Breach (lien direct) Lawmakers on the Hill revealed last week that a cyber-attack on the US justice system had compromised a public document management system. Jerrold Nadler (D-NY),  chairman of the House Judiciary Committee, revealed the discovery at a hearing on oversight in the Justice Department. Nadler disclosed that three hostile actors had breached the Public Access to Court […] Data Breach
Last update at: 2024-05-16 18:08:33
See our sources.
My email:

To see everything: Our RSS (filtrered) Twitter