Russia-aligned RomCom hackers exploited Firefox and Windows zero-days
Russia-linked hackers exploited two zero-day vulnerabilities in Mozilla and Microsoft products to target victims in Europe and North America, researchers have found. RomCom, also tracked as Storm-0978,...
Canadian privacy regulators publish details of medical testing company’s data breach
A 2020 report detailing the hack of a Canadian medical testing company was released Monday after a court ruled it could be made public, ending a four-year battle...
African cybercrime crackdown culminates in 1,006 captured and cuffed
More than a thousand suspected cybercriminals were arrested across 19 African countries in recent months thanks to an operation helmed by Interpol and Afripol. Operation Serengeti ran...
Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections
Nov 25, 2024Ravie LakshmananMalware / Windows Security
Cybersecurity researchers have uncovered a new malicious campaign that leverages a technique called Bring Your Own Vulnerable Driver (BYOVD) to disarm security protections...
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 18 – Nov 24)
Nov 25, 2024Ravie LakshmananCybersecurity / Critical Updates
We hear terms like "state-sponsored attacks" and "critical vulnerabilities" all the time, but what's really going on behind those words? This week's cybersecurity...
South Asian hackers target Pakistani entities in new espionage campaign
A threat actor known as Mysterious Elephant has been observed targeting Pakistani entities in a new espionage campaign. The group, also tracked as APT-K-47, has been active...
Meta lawsuit over Cambridge Analytica privacy scandal to proceed, Supreme Court rules
The U.S. Supreme Court will allow a multibillion-dollar class action lawsuit against Meta for privacy violations stemming from the Cambridge Analytica scandal to move forward. The ruling...
Google takes down fake news sites, wire services run by Chinese influence operation
Google’s security team has removed hundreds of news sites and domains from Google News for running pro-China content sourced back to a handful of companies allegedly working together...
RSA Conference to invest $5 million in sandbox contest finalists
The owner of the RSA Conference announced it’s investing $50 million in finalists for the Innovation Sandbox (ISB) contest, which has helped dozens of cybersecurity companies get off...
Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks
Meta Platforms, Microsoft, and the U.S. Department of Justice (DoJ) have announced independent actions to tackle cybercrime and disrupt services that enable scams, fraud, and phishing attacks.
To that end,...
