Cyber

Commercial spyware vendor exploits used by Kremlin-backed hackers, Google says

Findings undercut pledges of NSO Group and Intellexa their wares won't be abused. Critics of spyware and exploit sellers have long warned that the advanced hacking sold by commercial surveillance...

Unpatchable 0-day in surveillance cam is being exploited to install Mirai

Vulnerability is easy to exploit and allows attackers to remotely execute commands. Malicious hackers are...

Microsoft to host security summit after CrowdStrike disaster

Redmond wants to improve the resilience of Windows to buggy software. Microsoft is stepping up...

Android malware steals payment card data using previously unseen technique

Attacker then emulates the card and makes withdrawals or payments from victim's account. Newly discovered...

Hackers exploit VMware vulnerability that gives them hypervisor admin

Create new group called "ESX Admins" and ESXi automatically gives it admin rights. Microsoft is...

Mugger take your phone? Cash apps too easily let thieves drain accounts, DA says

Cash apps need tools like Apple’s Stolen Device Protection, DA says. Popular apps like Venmo, Zelle, and Cash App aren't doing enough to protect consumers...

Cyber spies launch PDF campaign

After a nine-month sabbatical, a cyber espionage group has returned to the scene, targeting organizations across North America with infected PDF documents. Proofpoint cybersecurity firm...

Google search is losing the fight with SEO spam, study says

Study finds "search engines seem to lose the cat-and-mouse game that is SEO spam." It's not just you—Google Search is getting worse. A new study from Leipzig...

Researcher uncovers one of the biggest password breaches in recent history

Roughly 25 million of the passwords have never been seen before by widely used service. Nearly 71 million unique credentials stolen for logging into websites...

Critical Xwiki vulnerability risks RCE attacks

Xwiki, an application development platform, has a critical vulnerability that could open it up for remote code execution (RCE) attacks. Xwiki is vulnerable to remote...

Toronto Zoo hit by ransomware attack

The largest zoo in Canada, Toronto Zoo, was hit by a ransomware attack on Friday, January 5th, affecting systems and some information about visitors,...

Saudi Ministry exposed sensitive data for 15 months

Saudi Arabia’s Ministry of Industry and Mineral Resources (MIM) had an environment file exposed, opening up sensitive details for anybody willing to take them....

Dark web sees “surge” of X gold accounts on sale

There’s a “gold rush” on the dark web as threat actors target verified accounts on X, formerly Twitter, for large-scale attacks, cybersecurity experts at...

Accounts in danger: Google recommends enhanced safe browsing and extra care

After reports of a new malware strain stealing and maintaining Google sessions, the tech giant is encouraging users to enable enhanced safe browsing and...

Passkeys: What They Are and Why You Need Them ASAP

We tell you what passkeys are, how you can get them, and where you can use them to log in securely without exposing your...

Apple And Cyber Startup Corellium Settle Four-Year Court Battle

After four years of court hearings and plenty of controversy, Apple and cyber startup Corellium are settling a copyright lawsuit. Terms have not been...

U.S, U.K. And 16 Other Nations Agree On AI Security Guidelines

Eighteen countries have signed an agreement on AI safety, based on the principle that it should be secure by design. The Guidelines for Secure AI System...

Google agrees to settle Chrome incognito

2020 lawsuit accused Google of tracking incognito activity, tying it to users' profiles. Google has indicated that it is ready to settle a class-action lawsuit filed in...

Big Tech’s divisive ‘personalization’ attracts fresh call for profiling-based content feeds to be off by default in EU

Image Credits: Jake O'Limb / PhotoMosh / Getty Images Another policy tug-of-war could be emerging around Big Tech’s content recommender systems in the European Union where the Commission...
HomeCyber