Warning: 4 new ways of HTTP request smuggling attacks
New variants of HTTP request smuggling attacks require new defenses and has many challenges, as experts demonstrate HTTP Request Smuggling or HTTP Desyncing is
Security
Dussmann Group’s data leaked by Nefilim ransomware actors
Nefilim ransomware gang began publishing sensitive files leaked during the attack Dussmann Group, one of the largest multi-service providers, has fallen victim to Nefilim
Yet another Zoom bug: private meeting passwords cracked in minutes
Vulnerability in Zoom allowed attackers to crack passwords for private meetings and spy on participants Numeric passcode used to secure Zoom private meetings can
Hackers aim to gather data from OkCupid Android application users
Security issues found in online dating platform can allow attackers to remotely spy or gather private information OkCupid security holes reveal that hackers have
New security issues in the Android app can affect China’s DJI Drones
Researchers warn about vulnerabilities that can lead to full hacker control of smartphones and DJI's servers Hackers can possibly take full control of user's
Ransomware attack on Blackbaud leaks University of York students’ data
Third-party service provider for number of non-profit organizations, as well as University of York, was hacked On July 21, the University of York disclosed
Chinese hackers allegedly target COVID-19 vaccine and government data
The US accuses two hackers of working with China's Ministry of State security to obtain data from government organizations Covid-19 research and trade secrets
Bitcoin scam on Twitter affected V.I.P users including Elon Musk
The biggest Twitter hack allowed attackers to tweet on behalf of Elon Musk, Joe Biden, Bill Gates, and other V.I.P users The 16th of
Warning: 17-year-old bug in Windows DNS servers can be exploited
Microsoft Windows servers can be hijacked when the critical “wormable” vulnerability gets exploited Users of Microsoft Windows Servers got warned about the patching requirement
Hacking campaigns on smart devices can lead to medication overdose
Researchers note about the popular smartwatch tracker vulnerability that can be used to hack devices and send medication alerts Particular API issues reported because
Reverse RDP vulnerabilities found in Apache Guacamole remote work app
Critical flaws in the popular remote desktop application put many servers at risk since bugs can allow attackers to take full control System administrators
16 Facebook apps were caught red-handed by CanaryTrap tool
Cornell University academics launched a CanaryTrap tool for detecting data misuse: 16 Facebook apps caught recording personal emails A group of academics, namely Shehroze Farooqi,
StrongPity APT back: targeting Syria and Turkey with new malware tools
Watering hole attacks against the Kurdish community in Syria and Turkey aiming to exfiltrate data revealed Retooled spyware got used in new advanced StrongPity
The first release of Magento platform reaches the end: updates needed
The heavily exploited Magento 1.x bugs get patched when the first version reaches end-of-life on June 30th Various service providers like Visa and Mastercard
Google Analytics used so steal data from customers of online stores
Hackers used Google Analytics to steal credit card details via infected e-commerce sites Google servers and functions of the Google Analytics platform got misused