Cyber Secuity Today, Week in Review for Friday, December 2, 2022
This episode features a discussion on ethical hacking, fines for privacy offences and unusual results from a poll
Cyber Security Today, Dec. 2, 2022 – The latest ransomware news, an accidental take-down of a botnet and more
This episode reports on the Cuba and LockBit ransomware, a fortunate accident and advice for safer online gaming from Canada’s privacy co
Research shows employees love Global 4-day week pilot
Researchers from Boston College, University College Dublin, and Cambridge University tracked employers in a small pilot research study and discovered that more than two dozen companies that implemented a four-day week in a pilot project saw increased sales, lower burnout, and improved absenteeism. More than 30 companies and nearly 1,000 employees from the United States, […]
U.S. Immigration and Customs Enforcement (ICE) mistakenly posts data of asylum seekers
On Wednesday, U.S. Immigration and Customs Enforcement (ICE) admitted that it had accidentally posted the personal information of over 6,000 people in its custody seeking asylum in the U.S. on its website earlier this week. According to ICE, the data dump occurred on Monday morning during a routine website update. Human Rights First notified the […]
FBI says Cuba ransomware extorted over $60 million in ransom fees from more than 100 entities
As of August 2022, the threat actors behind the Cuba (aka COLDDRAW) ransomware had received more than $60 million in ransom payments and had compromised over 100 entities worldwide. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) issued a new advisory highlighting a “sharp increase in both the […]
Heliconia Exploit Framework exposed by Google TAG Team
Google’s Threat Analysis Group (TAG) has published details about a trio of newly discovered exploit frameworks named The Heliconia exploits that were likely used to exploit Chrome, Firefox, and Microsoft Defender vulnerabilities as zero days in recent years, and likely has connections to a gray-market spyware broker called Variston IT, demonstrating how this shadowy segment […]
Zimperium uncovers Android trojan masquerading as reading and education app
Zimperium, a mobile security firm, is warning of an Android trojan masquerading as reading and education apps that may have stolen Facebook credentials from at least 300,000 users across 71 countries, primarily in Vietnam, since 2018. Zimperium has named the malware Schoolyard Bully Trojan, and it has been delivered via innocent-looking Android applications hosted on […]
Medibank hackers publish stolen data on dark web
The cybercriminals behind the Medibank ransomware attack appear to have published the rest of the data stolen from the Australian health insurance giant on the dark web, which appears to contain all of the data they took in a heist that affected 9.7 million customers. While the Australian insurance group confirms the release of six […]
Amazon to expand its cashier-less checkout technology to other industries
Amazon is considering pitching cashier-less checkout technology at brick-and-mortar stores to other industries and businesses. The cashier-less technology Just Walk Out technology allows customers to shop and leave the store with their purchases without having to interact with a cashier, but cameras and sensors determine what shoppers take and bill them after they exit. Since […]
Researchers discover 300 predatory loan apps on Google Play Store and Apple App Store
Lookout researchers discovered approximately 300 mobile loan applications on Google Play and the Apple App Store that exhibit predatory behavior such as exfiltrating excessive user data from mobile devices and harassing borrowers for repayment after previously promising quick loans at reasonable rates. These mobile loan apps were mostly found in Southeast Asian and African countries, […]
