November 5, 2021 Threat actors are capitalizing on Google search ads to promote fake cryptocurrency wallets in order to defraud victims of their cryptocurrency. In a recent discovery by security researchers at CheckPoint, threat actors can achieve this more...
November 5, 2021 Mobile phishing attacks on energy workers soared by 161% compared to 2020, thanks to a surge in the first half of 2021, targeting almost 20% of all energy workers. In analyzing the tactics used by more...
November 4, 2021 Security researchers collected a total of $362,500 on the first day of Pwn2Own 2021. Pwn2Own 2021 is the annual computer hacking competition in which participants are challenged to exploit widely-used software and mobile devices with more...
November 4, 2021 The Labour Party confirmed a cyber incident in which "a significant quantity" of party members' data "rendered inaccessible on their systems, "suggesting a possible takeover by attackers. The Labour Party also said the incident was more...
November 4, 2021 The Office of the Australian Information Commissioner (OAIC) ordered Clearview AI to remove photos taken in Australia from its database of more than 10 billion facial images, saying such actions violated Australia's privacy laws. Based more...
November 4, 2021 The U.S. Commerce Department on Wednesday blacklisted Israel's NSO Group and Candiru for allegedly selling spying software to foreign governments that used the device to target government officials, journalists and others. Positive Technologies of Russia more...
November 3, 2021 A critical, unauthenticated, remote code execution GitLab bug remains exploitable, with over 50% of deployments remaining unpatched after it was fixed on April 14, 2021. The vulnerability tracked as CVE-2021-22205 with a CVSS v3 score more...
November 3, 2021 The non-profit organization MITRE has published a list of the most dangerous vulnerabilities in programming, design, and architecture that will affect hardware in 2021. These weaknesses are found in hardware programming and design leading to more...
November 2, 2021 Kaspersky recently confirmed that a legitimate Amazon Simple Email Service (SES) token, issued to a third-party vendor, was recently used by threat actors to target Office 365 users in a phishing attack. The attackers used more...
November 2, 2021 CrowdStrike on Monday confirmed the acquisition of SaaS-based cybersecurity service SecureCircle in a deal it said would be completed during its fourth fiscal quarter. George Kurtz, CrowdStrike's co-founder and CEO, explained the reason for the more...