Information Security News Blog
In a collaborative investigation by 404 Media and the independent analytical center Court Watch, a massive cyber-fraud scheme was uncovered, affecting over 500 users of the cryptocurrency exchange Coinbase, with losses exceeding $20 million....
Researchers have calculated that nearly 11 million SSH servers on the internet are vulnerable to Terrapin attacks, which allow data manipulation during the handshake process, ultimately compromising the integrity of the SSH channel when...
Due to restricted access to international financial markets, Iran has actively embraced cryptocurrency. Last year, Iranian cryptocurrency exchanges conducted transactions totaling nearly $3 billion. Almost all incoming cryptocurrency in Iran complies with Know Your...
The ShadowServer platform daily uncovers hundreds of IP addresses scanning or attempting to exploit Apache RocketMQ services vulnerable to Remote Code Execution (RCE), identified as CVE-2023-33246 and CVE-2023-37582. Both vulnerabilities are critical and pertain...
The United States Attorney’s Office heralded the culmination of an extensive international cybercrime investigation, targeting the nefarious activities of the darknet marketplace, xDedic. Judicial documents revealed that xDedic illegally sold access credentials to servers...
The cryptocurrency payment gateway CoinsPaid has encountered its second cyberattack in the last six months. According to the Web3 security firm Cyvers, unauthorized transactions amounting to approximately 7.5 million dollars were detected. On January...
QNAP Systems published security advisories for 15 vulnerabilities, each posing a unique challenge to the integrity of their systems. From OS command injections to SQL injections, each flaw uncovered in their operating systems and...
In 2020, Red Hat (acquired by IBM in 2019) unilaterally announced the termination of CentOS Linux’s development. Consequently, updates for the CentOS Linux 8 series concluded in December 2021, and updates for the CentOS...
Google has commenced the process of phasing out third-party cookies in its Chrome browser, a change that, since January 4th, has affected 1% of users worldwide as part of the “Privacy Sandbox” project. Considering...
The hacker collective known as UAC-0050 has been actively employing phishing attacks to disseminate the malicious software Remcos RAT. This software is designed for remote surveillance and control and plays a pivotal role in...
When Google initially launched Gemini, considerable effort was invested in its promotion, including the production of polished promotional videos featuring seamlessly edited conversations. However, many users later discovered that Gemini did not live up...
Microsoft has announced the addition of a Copilot key, specifically designed for artificial intelligence (AI) assistants on Windows PC keyboards. This signifies a pivotal shift for Windows in the new year, steering towards a...