Where Advanced Cyberttackers Are Heading Next: Disruptive Hits, New Tech
In November, Ukraine's president revealed that the country's IT defenses fended off more than 1,300 Russian cyberattacks, including attacks on satellite communications infrastructure.
The onslaught of cyberattacks highlights one of...
SiriusXM, MyHyundai Car Apps Showcase Next-Gen Car Hacking
At least three mobile apps tailored to allow drivers to remotely start or unlock their vehicles were found to have security vulnerabilities that could allow unauthenticated malicious types to...
Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities
By:
The threat actors behind Cuba (aka COLDDRAW) ransomware have received more than $60 million in ransom payments and compromised over 100 entities across the world as of August...
SOC Turns to Homegrown Machine Learning to Catch Cyber-Intruders
Using an internally developed machine-learning model trained on log data, the information security team for a French bank found it could detect three new types of data exfiltration that...
Ankr confirms exploit, asks for immediate trading halt
BNB Chain-based decentralized finance (DeFi) protocol Ankr has confirmed it has been hit by a multi-million dollar exploit on Dec. 1.The attack appeared to be first discovered by on-chain...
Trader allegedly saw over 5000x gains after Ankr protocol hack
As the BNB Chain-based protocol Ankr was exploited and the hacker dumped Ankr Reward Bearing Staked BNB (aBNBc) tokens, a trader took advantage of the price discrepancies to turn...
One Year After Log4Shell, Most Firms Are Still Exposed to Attack
The Log4j vulnerability continues to present a major threat to enterprise organizations one year after the Apache Software Foundation disclosed it last November — even though the number of...
Artifact Poisoning in GitHub Actions Imports Malware via Software Pipelines
An attacker submitting changes to an open source repository on GitHub could cause downstream software projects that include the latest version of a component to compile updates with malicious...
LastPass Discloses Second Breach in Three Months
An attacker who breached the software development environment at LastPass this August and stole source code and other proprietary data from the company appears to have struck the password...
LastPass Suffers Another Security Breach; Exposed Some Customers Information
By: Ravie Lakshmanan
Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer information.
"We recently detected unusual activity within a...
