PixPirate: Malware Stealing Banking Passwords
PixPirate, the new strain of mobile malware targeting the Pix instant payment platform in Brazil. Learn about the dangers and steps you can take to protect yourself
Articles
Everything we have published
468 articles, newest first.
Toyota Supplier Management Network Hacked
A security researcher, Eaton Zveare, discovered a vulnerability in Toyota's Global Supplier Preparation Information Management System (GSPIMS) and was able to access sensitive data of thousands of suppliers and users worldwide. Toyota quickly addressed the issue and fixed the vulnerability.
MalVirt Loaders and Formbook: A New Threat to Cybersecurity
Formbook family of malware spread via MalVirt loaders through malvertising attacks.
Massive Ransomware Campaign Targeting VMware ESXi Servers Worldwide
The Italian National Cybersecurity Agency and the France CERT have issued an alert about an ongoing ransomware campaign targeting VMware ESXi servers worldwide. Organizations are urged to apply security patches and prevent exploitation of the CVE-2021-21974 vulnerability
OpenAI’s “AI Text Classifier” to Detect AI-Generated Text
OpenAI has recently announced the release of AI Text Classifier, an AI-text detection tool designed to help users detect AI-generated texts with 26% precision. Read on to know more about the tool and its limitations
OpenSSH Version 9.2 Addresses Security Bugs
The maintainers of OpenSSH have released version 9.2 to address a pre-authentication double free vulnerability in the OpenSSH server (sshd). Learn about the vulnerability, its potential impact, and how to protect yourself
HeadCrab Malware Threatens Redis Servers
Protect your Redis server from the fast-spreading HeadCrab malware. Learn about the malicious botnet network, its annual profit, and how to secure your environment.
VMware Fixes High-Severity Privilege Escalation Flaw in Workstation
VMware has fixed a high-severity privilege escalation flaw in Workstation that allows attackers to delete arbitrary files. The issue was reported by Cirosec and updates are available to remedy the vulnerability.
Critical Vulnerability Discovered in Jira Service Management Server and Data Center
Critical vulnerability (CVE-2023-22501) in Jira Service Management Server and Data Center, its impact, and how to fix it with the latest updates from Atlassian.
PeopleConnect Confirms Data Breach Affecting Millions of TruthFinder and Instant Checkmate Customers
A recent data breach at PeopleConnect, the owners of TruthFinder and Instant Checkmate background check services. Over 20 million customer records were leaked in a 2019 backup database.
Tallahassee Memorial HealthCare Hospital Hit by Cyberattack, IT Systems Taken Offline
Tallahassee Memorial HealthCare Hospital has suffered a cyberattack, forcing it to take its IT systems offline and cancel non-emergency procedures. Patients have been diverted to other hospitals, and the attack is being investigated as a potential ransomware attack. Get the latest updates on this…
Vice Media Data Breach Exposes Personal and Financial Information of Over 1,700 Individuals
Vice Media data breach of personal and financial information of over 1,700 individuals. Read on for details and remediation efforts.
Zero-Day Vulnerability Found in Fortra’s GoAnywhere MFT
A zero-day vulnerability in Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Security researchers have warned of over 1,000 on-premise instances publicly accessible on the internet. No patch is currently available, but Fortra has released workarou…
Binwalk Security Tool Vulnerable to Path Traversal Attack
A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…
Cyberattack Disrupts ION Group Transactions
A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disrupted
F5 BIG-IP Vulnerability: A Threat to System Stability
F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…
The Future of Encryption
Explore the potential of quantum-safe cryptography and quantum cryptography as enhanced solutions for secure communication and data protection. The article covers the technology behind these cryptographic methods, their potential for eliminating ransomware attacks, and their role in ensuring data…
Information Security Specialization Vs Generalization
Explore the pros and cons of both information security specialization and generalization, so you can make an informed decision about what is suitable for your career.