Category: News - Threatpost
Jul 28, 2022 · Vulnerabilities are Beyond What You Think. CVEs or Software vulnerabilities comprise only a part of security risks in the IT security landscape. Attack surfaces are massive with numerous security ...
1M Stolen Credit Cards Hit Dark Web for Free - Threatpost
Aug 10, 2021 · Threat actors have leaked 1 million stolen credit cards for free online as a way to promote a fairly new and increasingly popular cybercriminal site dedicated to…selling payment-card credentials ...
Terrorist Watchlist Exposed Online with Nearly 1.9M Records
Aug 17, 2021 · A researcher has revealed the discovery of a federal terrorist watchlist that includes 1.9 million records, which were available online without any security protections. The data remained exposed ...
Cisco Confirms Network Breach Via Hacked Employee Google …
Aug 11, 2022 · Cisco Systems revealed details of a May hack by the Yanluowang ransomware group that leveraged a compromised employee’s Google account. The networking giant is calling the attack a “potential ...
IoT Attacks Skyrocket, Doubling in 6 Months | Threatpost
Sep 6, 2021 · IoT Attacks Skyrocket, Doubling in 6 Months. The first half of 2021 saw 1.5 billion attacks on smart devices, with attackers looking to steal data, mine cryptocurrency or build botnets. The first ...
Emerging Trends in Ransomware 6 Threatpost.com April 2021 He added that cloud use thus provides fleeting windows of criminal opportunity. “A developer spinning up a Kubernetes cluster at 3 a.m. to test
Hacked Security Software Used in Novel South Korean Supply
Nov 16, 2020 · The Lazarus cybercriminal group is using a novel supply-chain attack against visitors to websites operated by the South Korean government and financial firms, in order to deliver dropper malware ...
Google Patches Chrome’s Fifth Zero-Day of the Year
Aug 18, 2022 · The zero-day patch is the fifth Chrome bug under active attack that Google has patched so far this year. In July, the company fixed an actively exploited heap buffer overflow flaw tracked as CVE ...
Millions of Social Profiles Leaked by Chinese Data-Scrapers
Jan 11, 2021 · A cloud misconfig by SocialArks exposed 318 million records gleaned from Facebook, Instagram and LinkedIn. More than 400GB of public and private profile data for 214 million social-media users ...
Malware Builder Leverages Discord Webhooks - Threatpost
May 12, 2022 · Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks. On April 23rd, 2022, a Discord user with the handle “Portu” began ...