News

Amey suffers cyber attack from ransomware 4 min read

• Breaches
• Cybercrime
• News

Amey suffers cyber attack from ransomware

Ax Sharma January 1, 2021

UK's prominent infrastructure management company Amey has been hit by Mount Locker ransomware group in what the company has called a "complex" cyber attack.... Read More

Backdoor master password for thousands of Zyxel firewalls revealed 3 min read

• News
• Security

Backdoor master password for thousands of Zyxel firewalls revealed

Ax Sharma January 1, 2021

Thousands of Zyxel firewalls and access point controllers contain a secret, undocumented hardcoded password giving anyone admin access through this zero-day.... Read More

New Golang malware runs Monero miner on servers 2 min read

• Malware
• News
• Security

New Golang malware runs Monero miner on servers

Ax Sharma December 31, 2020

The Golang malware breaches Windows, Linux servers and exploits popular vulnerabilities such as a critical RCE in Oracle WebLogic. ... Read More

Kaggle fixes vulnerability that disclosed private leaderboard data via API 3 min read

• Breaches
• News
• Security

Kaggle fixes vulnerability that disclosed private leaderboard data via API

Ax Sharma December 30, 2020

Kaggle, an online community of data scientists and machine learning practitioners had been exposing private competition data due to a misconfigured API. This could potentially give an unfair competitive advantage to participants.... Read More

Hacker selling Vodafone’s Ho Mobile database of 2.5M users 3 min read

• Cybercrime
• News
• Security

Hacker selling Vodafone’s Ho Mobile database of 2.5M users

Ax Sharma December 29, 2020

The database contains ICCID that can be used in SIM swapping attacks. Other information in the leaked dump includes mobile number, customer PII, SIM PUK, IMSI and security hashes.... Read More

Joomla fixes ACL violation vulnerability after 2 years 2 min read

• News
• Security

Joomla fixes ACL violation vulnerability after 2 years

Ax Sharma December 29, 2020

Joomla! CMS project has fixed an access control violation flaw, CVE-2020-35616 nearly after 2 years of its reporting.... Read More

Google ‘Send Feedback’ bug could expose your sensitive data to attackers 3 min read

• News
• Security

Google ‘Send Feedback’ bug could expose your sensitive data to attackers

Ax Sharma December 28, 2020

Google Docs "Send Feedback" feature vulnerability which could expose your sensitive files to attackers earns researcher a $3,134 bounty.... Read More

Word malware uses GitHub and Imgur pic to run Cobalt Strike script 1 min read

• Malware
• News

Word malware uses GitHub and Imgur pic to run Cobalt Strike script

Ax Sharma December 28, 2020

A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads a legitimate image file from... Read More

UK energy supplier E.ON erroneously takes out Direct Debit payments early 2 min read

• News
• Technology

UK energy supplier E.ON erroneously takes out Direct Debit payments early

Ax Sharma December 27, 2020

UK energy provider E.ON has apologised for mistakenly debiting customer bank accounts earlier than expected for their energy bill payments.... Read More

Insecure QR codes on COVID-19 test results come with data exposure risks 4 min read

• Breaches
• News
• Security

Insecure QR codes on COVID-19 test results come with data exposure risks

Ax Sharma December 26, 2020

Medical labs appointed by governments to test incoming international passengers for COVID-19 contain insecure QR code implementations that may lead to data exposure.... Read More