Information Security News Blog
Apple has issued critical security updates to address two zero-day vulnerabilities in iOS, which have been exploited in real-world attacks against iPhone users. The company disclosed this information on March 5th in a separate...
According to Group-IB, between January and October 2023, the darknet saw the sale of over 225,000 logs containing compromised user credentials for ChatGPT. These credentials were found in the logs of info-stealers such as...
Nepalese cybersecurity researcher Samip Aryal made history by identifying a vulnerability in Facebook’s password reset system that allowed a malefactor to seize any account without any action from the victim. Aryal’s discovery not only...
In the JetBrains TeamCity On-Premises software, two new security vulnerabilities were identified that could be exploited by malefactors to seize control over the affected systems. The vulnerabilities, assigned the identifiers CVE-2024-27198 with a CVSS...
Trend Micro recently unveiled a new wave of activity by the ransomware group RA World, also known as the RA Group. This group initiated its malicious operations in April 2023 and has, over its tenure,...
Sources close to Windows Central suggest that Microsoft plans to unveil its latest additions to the Surface series on March 21st, including the Surface Pro 10 and the Surface Laptop 6, marking the company’s...
In anticipation of the impending enforcement of the European Union’s Digital Markets Act (DMA), Google has announced adjustments to its services within the EU to ensure compliance with local legislation. This strategic realignment encompasses...
The Cybersecurity and Infrastructure Security Agency (CISA) in the United States has issued an advisory warning about the known attack methodologies and indicators of compromise utilized by the Phobos ransomware group. This guidance aims...
Insikt Group has identified a new infrastructure purportedly utilized by operators of the commercial spyware Predator in at least 11 countries. Through an examination of domains potentially employed for disseminating the software, experts pinpointed...
Researchers at Consumer Reports (CR) have uncovered vulnerabilities in video doorbells manufactured by China’s Eken Group Ltd. The company, which produces devices under the EKEN and Tuck brand names, distributes its products through major...
Chunghwa Telecom, Taiwan’s largest telecommunications company, recently suffered a cyberattack allegedly orchestrated by the Chinese government. This breach resulted in the theft of 1.7 TB of data, encompassing information about the island’s governmental structure....
The European retail chain Pepco was deceitfully coerced into transferring a substantial amount of funds to fraudsters through an intricate phishing attack, as disclosed in its official press release. The Hungarian division of Pepco...