The U.S. Federal Trade Commission (FTC) on Monday said it filed a lawsuit against Kochava, a location data broker, for collecting and selling precise geolocation …
New Golang-based ‘Agenda Ransomware’ Can Be Customized For Each Victim
A new ransomware strain written in Golang dubbed “Agenda” has been spotted in the wild, targeting healthcare and education entities in Indonesia, Saudi Arabia, South …
Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software
A Turkish-speaking entity called Nitrokod has been attributed to an active cryptocurrency mining campaign that involves impersonating a desktop application for Google Translate to infect …
A CISO’s Ultimate Security Validation Checklist
If you’re heading out of the office on a well-deserved vacation, are you certain the security controls you have in place will let you rest …
Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users
Twilio, which earlier this month became a sophisticated phishing attack[1], disclosed last week that the threat actors also managed to gain access to the accounts …
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog[1], including a …
The Hacker News – 8b14e51573478bfb57c61baf07c0db65 – 2022-08-29 22:19:29
HTTP/2 200 date: Mon, 29 Aug 2022 22:19:31 GMT content-type: text/plain;charset=UTF-8 content-length: 95 expect-ct: max-age=604800, report-uri=”https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct” report-to: {“endpoints”:[{“url”:”https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7DJg5gY3Jb0UnQJ5LEAvnhAnHVy7UUlkxgUaVOIhtPA%2BQg8dBJIIBPvHsA1Ytiq21UGs54K2BiERe36R8OxAi2QIvrD1Zi4XPYzY67r0dXvfaQm1WqBVn0a1O4j5QLDqbkg”}],”group”:”cf-nel”,”max_age”:604800} nel: {“success_fraction”:0,”report_to”:”cf-nel”,”max_age”:604800} strict-transport-security: max-age=15552000; includeSubDomains; preload x-content-type-options: …
Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations
Iranian state-sponsored actors are leaving no stone unturned to exploit unpatched systems running Log4j to target Israeli entities, indicating the vulnerability’s long tail[1] for remediation. …
Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center
Atlassian has rolled out fixes for a critical security flaw[1] in Bitbucket Server and Data Center that could lead to the execution of malicious code …
Hackers Breach LastPass Developer System to Steal Source Code
Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information. The security breach is said …