New Golang malware runs Monero miner on servers
Image credit: QuoteInspector A new strand of Golang malware discovered this week installs the well-known Monero cryptocurrency miner, XMRig on...
Ax Sharma
Ax Sharma is a UK-based security researcher, journalist and TV subject matter expert experienced in malware analysis and cybercrime investigations. His areas of interest include open source software security and threat intel analysis. Frequently featured by leading media outlets like the BBC, Channel 5, Fortune, WIRED, The Register, among others, Ax is an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).
Kaggle fixes vulnerability that disclosed private leaderboard data via API
Kaggle, an online community of data scientists and machine learning (ML) practitioners, has been exposing private competition data due to...
Hacker selling Vodafone’s Ho Mobile database of 2.5M users
A threat actor has posted a thread on one of the dark web forums claiming to sell Ho Mobile's database...
Joomla fixes ACL violation vulnerability after 2 years
The development team behind popular CMS Joomla which powers over 2.5 million sites has patched an access control violation vulnerability...
Google ‘Send Feedback’ bug could expose your sensitive data to attackers
This week, security researcher KL Sreeram has disclosed a vulnerability in Google Docs which could let hackers steal sensitive data...
Word malware uses GitHub and Imgur pic to run Cobalt Strike script
A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads...
UK energy supplier E.ON erroneously takes out Direct Debit payments early
British energy supplier E.ON has emailed an apology to its customers after erroneously taking out direct debit payments from their...
Insecure QR codes on COVID-19 test results come with data exposure risks
As more and more governments around the world impose mandatory coronavirus testing for arriving international passengers during the ever-evolving pandemic...
Facebook fixes Instagram bug that leaked user’s private email address and birthday
This week a researcher walked away with a $13,125 bug bounty award for responsibly reporting a data leak to Facebook....
American Bank Systems slapped with class-action lawsuit for not timely disclosing ransomware data breach
This year, American Bank Systems (ABS) was hit with a ransomware attack as reported by Security Report, which the company...