Ex-NSA Employee Gets 22 Years for Espionage
A former NSA employee has been sentenced to 21 years and 10 months in prison for attempting espionage on behalf of a foreign state. FBI Director Christopher Wray stated that this sentence should serve...
Author: Nam Phong
Wpeeper Android Backdoor Hides Behind Hacked Websites
Specialists at QAX XLab have identified a new type of Android malware—a backdoor named Wpeeper, which is disseminated through APK files from unofficial app stores posing as the popular alternative marketplace Uptodown. Wpeeper is...
Docker Hub Under Siege: Millions of Repos Harbor Malware
Over the past several years, Docker Hub, a platform for hosting software repositories, has been targeted by three major fraudulent campaigns. Researchers from JFrog identified that approximately 20% of the 15 million hosted repositories...
Latrodectus Malware Spreads via Fake Azure, Cloudflare Alerts
Malefactors have adopted a new strategy to disseminate the malicious software Latrodectus through phishing campaigns, cleverly disguising it as notifications from Microsoft Azure and Cloudflare. This method significantly complicates the task for email security...
Google Ramps Up Play Store Security: Blocks Over 500,000 Apps and Accounts
Recently, Google announced significant efforts to enhance the security of its Play Store for Android. Last year, the company rejected or demanded corrections for approximately 200,000 applications that attempted to access users’ sensitive data,...
FCC Slams Telecom Giants with $200M Location Data Fine
The Federal Communications Commission (FCC) has fined the largest American telecommunications companies nearly $200 million for disseminating customer location data without their consent. Penalties were imposed on AT&T, Sprint, T-Mobile, and Verizon after Notices...
Cybersecurity Breach Forces London Drugs Closures
The Canadian pharmacy chain London Drugs has closed all its retail stores following the discovery of a cybersecurity incident. The event, which affected the company’s systems, occurred on April 28. In response, the company...
High-Severity R Flaw (CVE-2024-27322) Puts Users at Risk
A critical vulnerability has been discovered in the R programming language, potentially exposing organizations using this popular open-source language to software supply chain attacks. The vulnerability, designated CVE-2024-27322, has been rated 8.8 out of...
13.4 Million at Risk: Kaiser Permanente Hit by Data Breach
In one of the United States’ largest medical organizations, Kaiser Permanente, a cyber incident resulted in the compromise of personal data for approximately 13.4 million users. Founded in 1945, Kaiser Permanente provides healthcare services...
Citrix Vulnerability Implicated in Major Healthcare Cyberattack
In February, a high-profile cyberattack on Change Healthcare caused significant disruptions in the operations of US medical facilities. Andrew Witty, CEO of UnitedHealth Group (the parent company of Change Healthcare), revealed that the attack...
Ghost in the DNS: Muddling Meerkat Evades Detection
The hacker group, dubbed Muddling Meerkat by security researchers, has been utilizing sophisticated Domain Name System (DNS) methodologies to conduct espionage activities across global networks since October 2019. According to Infoblox, a firm specializing...
“Pathfinder” Exploit Unveiled: New Threat to Billions of Devices
An international team of scientists, led by specialists from the University of California, San Diego, has identified a new type of attack targeting the branch prediction component at the microarchitectural level. The findings, which...
