Hacking the antivirus: BitDefender remote code execution vulnerability
What happens when the very antivirus designed to keep you and your organization safe becomes a threat vector for the attackers to exploit? Yesterday, I... Read More
Security
‘BlueLeaks’: data from over 200 police departments exposed in a massive leak
A group that goes by the name Distributed Denial of Secrets (DDoSecrets) has published 269 GB worth of data with hundreds of documents, images and... Read More
NETGEAR routers vulnerable to “root” code execution, no patch yet
In a recently released vulnerability disclosure from d4rkn3ss from VNPT ISC as well as Adam Nichols of GRIMM, we learn of an unpatched vulnerability impacting... Read More
Major U.S. companies face network disruptions: some blame DDoS attacks
Yesterday, reports emerged of widespread network outages across major U.S. telecoms and companies like T-Mobile, Instagram, Comcast, and Chase Bank. According to a tweet by... Read More
Indian hacker-for-hire firm wanted by FBI targeted ExxonMobil and others
Last week we reported on CloudEyE which was a legitimate Italian business helping hackers with spreading malware. Now, Citizen Lab has unveiled a major... Read More
WordPress Block Editor could let even most basic users exploit XSS vulns!
WordPress 5.4.2 release announcement stated the update shipped with multiple fixes for Cross-Site Scripting (XSS) vulnerabilities. Out of this the most significant fix is... Read More
Patient video consultations leaked in medical data breach: Babylon Health UK
In an a unfortunate incident, video consultants of some patients using the Babylon Health app were leaked to other users of the app. It... Read More
Security firm admits to exposure of 5 billion records, after attempting to censor researchers
4 min read
In March 2020, Bob Diachenko reported discovering an unprotected, publicly accessible Elasticsearch instance which exposed two collections of records: first set with over 5... Read More
Keepnet Labs case study: how NOT to handle a data breach
We just released news on this one but here’s a summary of what happened: In March 2020, Bob Diachenko, cyber threat intelligence director of... Read More
Italian business operation CloudEye actually aids hackers in spreading GuLoader
Conservative estimates put company’s monthly income at a minimum $500,000. According to a recently released report, researchers at Checkpoint blame an Italian “company” CloudEyE for... Read More
Sea Turtle Cyber Espionage Campaign Targets Telecommunication and IT Companies in the Netherlands 
Rogue WordPress plugin: Threat hunters uncover credit card skimming campaign targeting e-commerce sites 
Albanian Parliament and telco ‘One Albania’ suffer cyber attacks 
Carbanak Banking Malware Resurfaces with Updated Tactics in Ransomware Attacks
Share this: