Log4j used to hack payment systems: company refuses to pay $5 million
Vietnamese crypto trading platform suffered a cyber-attack due to Log4Shell vulnerability One of the largest platforms, ONUS, reported the security incident on its payment
Security
Shutterfly reports the ransomware attack, supposedly Conti virus group
Digital photography company reported the ransomware attack over the weekend The services got disrupted and the particular ransomware group, according to some sources. Personalized
Festive time brings cyber security threats
Holidays – the busiest time of the year. For hackers too The holidays season usually isn’t the time to think about work. Many busy
China suspends a deal with Alibaba for not reporting the Log4j zero-day
Alibaba Group gets the six months suspension for failing to report the critical security flaw that affected a broadly used logging library Ministry of
Log4j zero-day exploit might be the one that haunts internet for years
Hundreds of millions of devices affected by the Log4j flaw Log4j is an open-source Java logging framework, part of the Apache Logging Services. It
SA government data breach due to Frontier Software ransomware attack
The data breach impacted South Australian government employees after the Frontier Software ransomware attack Up to 80 000 Australian government employees were affected by
42 malicious websites used by Chinese espionage group got seized
Microsoft seized the domains linked to China-based hackers that targeted organizations in the US ad 28 other countries Malicious domains used by Nickel China-backed
BitMart exchange suffers $196 million hack due to stolen private key
Hackers managed to steal millions of cryptocurrency tokens from an exchange Cryptocurrency trading platform disclosed the large-scale security breach resulting in lost funds. CEO
Twitter expands its policies: bans private media posting without consent
People now cannot post images of people without having their consent Twitter starts to expand the private information policies, and how includes private media
Panasonic network got hacked: the company discloses data breach
Hackers managed to enter the network and access data on file servers silently Panasonic confirmed that the network of this giant manufacturer got hacked
Hackers exploit poorly secured Google Cloud platform to mine crypto
Compromised Google Cloud accounts used to mine cryptocurrency and abuse the system Ransomware can be installed and phishing campaigns launched on the compromised machine
Facebook Messenger and Instagram E2E encryption delayed until 2023
The default end-to-end encryption across messaging services pushed back by a year at least Facebook says that due to user safety, the encryption is
Microsoft and US, UK law enforcement warns about Iranian hacker groups
Hacker groups reportedly exploiting Microsoft, Fortinet flaws and increase the use of ransomware on targets Nation-state threat actors target engage in social engineering campaigns,
New criminal tactics: exploit-as-a-service and buying zero-day flaws
Ransomware gangs raised funds to buy zero-day flaws and move to advanced exploit-as-a-service operations Malicious actors started to consider buying, leasing, selling zero-day vulnerabilities.
Hackers enter the FBI email system to send out fake security warnings
Legitimate-looking emails with bizarre cybersecurity warnings from FBI servers got sent to people The urgent warning about cyberattacks got distributed over the weekend. Hackers