Treasury officials attributed the December theft of unclassified documents to China. © 2024 TechCrunch. All rights reserved. For personal use only.
Category: Security
Cariad, Cybersecurity, data exposure, EVs, Global IT News, Global Security News, Security, Transportation, Volkswagen
Volkswagen leak exposed precise location data on thousands of vehicles across Europe for months
The data was found exposed on an Amazon cloud server, and contained precise location data on thousands of vehicles. © 2024 TechCrunch. All rights reserved. For personal use only.
Cloud, Cybersecurity, Global Security News, Hardware, Microsoft, microsoft copilot plus, Microsoft Windows 11, physical media, Security
Windows 11 Media Update Bug Stops Security Updates
Microsoft advises users not to install recent security updates using physical media. The company is working on a fix.
Exploits, Global Security News, Hardware, Security
Hackers exploit Four-Faith router flaw to open reverse shells
Threat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. […]
Cloud Security, Global Security News, Security, VPN, vyprvpn
VyprVPN Review: Can It Still Perform This Year and Beyond?
VyprVPN is an affordable VPN provider, but is it trustworthy enough to keep your data secure? Read our VyprVPN review to find out.
AT&T, Cybersecurity, Global IT News, Global Security News, hacking, Salt Typhoon, Security, Verizon
Verizon says it has secured its network after breach by China-linked Salt Typhoon group
U.S. telecom giant Verizon says it has secured its network after being targeted by the China-linked Salt Typhoon cyberespionage group. In a statement given to TechCrunch on Sunday, Verizon spokesperson Richard Young said the company has “contained the cyber incident brought on by this nation-state threat actor,” and that it has not detected any threat actor…
Global Security News, Security
AT&T and Verizon say networks secure after Salt Typhoon breach
AT&T and Verizon confirmed they were breached in a massive Chinese espionage campaign targeting telecom carriers worldwide but said the hackers have now been evicted from their networks. […]
2024, 2025, cyber security, cyber threat, Cybersecurity, Data Privacy, Data Security, Digital Privacy, Episodes, Global Security News, Happy New Year, Information Security, infosec, New Year, phishing, Podcast, podcasting, Podcasts, Port 83, predictions, privacy, Security, Security Bloggers Network, Social Engineering, Technology, Weekly Edition, Year End Reflections
2024 Year in Review: What We Got Right and Looking to 2025
In the final episode of the Shared Security Podcast for 2024, join us as we recap our predictions for the year, discuss what we got right and wrong, and highlight our top episodes on YouTube. We also extend a heartfelt thank you to our Patreon supporters and special guests. Plus, stay tuned for our predictions…
Global Security News, Security
Malware botnets exploit outdated D-Link routers in recent attacks
Two botnets tracked as ‘Ficora’ and ‘Capsaicin’ have recorded increased activity in targeting D-Link routers that have reached end of life or are running outdated firmware versions. […]
Global Security News, Security
Hackers steal ZAGG customers’ credit cards in third-party breach
ZAGG Inc. is informing customers that their credit card data has been exposed to unauthorized individuals after hackers compromised a third-party application provided by the company’s e-commerce provider, BigCommerce. […]
Global Security News, Security
Customer data from 800,000 electric cars and owners exposed online
Volkswagen’s automotive software company, Cariad, exposed data collected from around 800,000 electric cars. The info could be linked to drivers’ names and reveal precise vehicle locations. […]
Global Security News, Security
White House links ninth telecom breach to Chinese hackers
A White House official has added a ninth U.S. telecommunications company to the list of telecoms breached in a Chinese hacking campaign that impacted dozens of countries. […]
chrome extension, cyberattack, cyberhaven, Cybersecurity, Global IT News, Global Security News, Security
Cyberhaven says it was hacked to publish a malicious update to its Chrome extension
The data-loss startup says it was targeted as part of a “wider campaign to target Chrome extension developers.” © 2024 TechCrunch. All rights reserved. For personal use only.
Exploits, Global Security News, Security
Hackers exploit DoS flaw to disable Palo Alto Networks firewalls
Palo Alto Networks is warning that hackers are exploiting the CVE-2024-3393 denial of service vulnerability to disable firewall protections by forcing it to reboot. […]
Compliance, Global IT News, Global Security News, Risk Management, Security
Top 6 Vendor Risk Management Software for MSPs in 2025
Managing third-party risks is becoming more critical for managed service providers (MSPs) as cybersecurity threats evolve. Vendor risk management (VRM) software simplifies this process, helping MSPs assess, monitor, and mitigate risks associated with third-party vendors. Explore six of the best vendor risk management tools to streamline compliance, enhance security, or protect your client’s sensitive data.…
Global Security News, Security
Cybersecurity firm’s Chrome extension hijacked to steal users’ data
At least five Chrome extensions were compromised in a coordinated attack where a threat actor injected code that steals sensitive information from users. […]
blue yonder, Cybersecurity, evolve bank, extortion, Global IT News, Global Security News, Ransomware, Security
Record-breaking ransoms and breaches: A timeline of ransomware in 2024
From LoanDepot to Evolve Bank and Blue Yonder, these ransomware attacks affect tens of millions of people. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
Apache warns of critical flaws in MINA, HugeGraph, Traffic Control
The Apache Software Foundation has released security updates to address three severe problems that affect MINA, HugeGraph-Server, and Traffic Control products. […]
CryptoCurrency, Global Security News, Security
New ‘OtterCookie’ malware used to backdoor devs in fake job offers
North Korean threat actors are using new malware called OtterCookie in the Contagious Interview campaign that is targeting software developers. […]
Global Security News, Microsoft, Security
Windows 11 installation media bug causes security update failures
Microsoft is warning of an issue when using a media support to install Windows 11, version 24H2, that causes the operating system to not accept further security updates. […]
23andMe, Change Healthcare, cyberattacks, Cybersecurity, data breach, Global IT News, Global Security News, Security, Snowflake Computing
These were the badly handled data breaches of 2024
Blaming victims, months of silence, and suing security researchers all featured in cybersecurity in 2024. © 2024 TechCrunch. All rights reserved. For personal use only.
Cybersecurity, Global IT News, Global Security News, multi-factor authentication, password manager, Security
Home for the holidays? Share this top cybersecurity advice with friends and family
Sharing security advice can go a long way in protecting your loved ones from the most common and damaging online threats. © 2024 TechCrunch. All rights reserved. For personal use only.
Exploits, Global Security News, Security
New botnet exploits vulnerabilities in NVRs, TP-Link routers
A new Mirai-based malware campaign is actively exploiting unpatched vulnerabilities in Internet of Things (IoT) devices, including DigiEver DS-2105 Pro DVRs. […]
Europe, Global Security News, Security
European Space Agency’s official store hacked to steal payment cards
European Space Agency’s official web shop was hacked as it started to load a piece of JavaScript code that generates a fake Stripe payment page at checkout. […]
cyberattack, Exploits, Global Security News, Ransomware, Security
Clop ransomware gang takes credit for latest mass hack that breached dozens of companies
The prolific ransomware gang says it hacked at least 66 companies by exploiting a bug in tools made by Cleo Software. © 2024 TechCrunch. All rights reserved. For personal use only.
CryptoCurrency, Global Security News, Security
FBI links North Korean hackers to $308 million crypto heist
The North Korean hacker group ‘TraderTraitor’ stole $308 million worth of cryptocurrency in the attack on the Japanese exchange DMM Bitcoin in May. […]
Cybersecurity, Global IT News, Global Security News, Security
These are the cybersecurity stories we were jealous of in 2024
The very best work from our friends at competing publications. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
Clop ransomware threatens 66 Cleo attack victims with data leak
The Clop ransomware gang started to extort victims of its Cleo data theft attacks and announced on its dark web portal that 66 companies have 48 hours to respond to the demands. […]
Exploits, Global Security News, Security
Adobe warns of critical ColdFusion bug with PoC exploit code
Adobe has released out-of-band security updates to address a critical ColdFusion vulnerability with proof-of-concept exploit code. […]
Global Security News, Legal, Security
FTC orders Marriott and Starwood to implement strict data security
The Federal Trade Commission (FTC) has ordered Marriott International and Starwood Hotels to define and implement a robust customer data security scheme following failures that led to massive data breaches. […]
Global Security News, Security
Premium WPLMS WordPress plugins address seven critical flaws
Two WordPress plugins required by the premium WordPress WPLMS theme, which has over 28,000 sales, are vulnerable to more than a dozen critical-severity vulnerabilities. […]
Global Security News, Security
US court finds spyware maker NSO liable for WhatsApp hacks
A U.S. federal judge has ruled that Israeli spyware maker NSO Group violated U.S. hacking laws by using WhatsApp zero-days to deploy Pegasus spyware on at least 1,400 devices. […]
Global Security News, Managed Kubernetes, Security, Security Bloggers Network
The Top 5 Kubernetes CVEs of 2024: Have You Patched Them Yet?
Keeping up to date with critical vulnerabilities related to Kubernetes can be challenging for a variety of reasons. The biggest one may be related to Kubernetes itself; it’s a complex and rapidly evolving platform, with regular updates and new features being introduced regularly (not to mention updates to APIs and add-ons). Kubernetes environments are scalable…
Android, Apple, Cybersecurity, encryption, Global Security News, Google, identity theft, Microsoft, Mobile Security, password manager, phishing, privacy, Ransomware, Security, spam, TR Academy, trend micro
Protect 3 Devices With This Maximum Security Software
Trend Micro guards desktop and mobile devices from ransomware, phishing schemes, spam, and more for one year.
cyberattacks, Cybersecurity, data breach, Evergreen, Global IT News, Global Security News, Security
The TechCrunch Cyber Glossary
This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of how — and why — we use them. © 2024 TechCrunch. All rights reserved. For personal use only.
Artificial Intelligence, AT&T, Big Data, change healthcare breach, Cloud, Cybersecurity, cybersecurity 2024, Exec, Global Security News, moveit breach, national public data breach, nis 2 directive, Security
Navigating the Cyber Threat Landscape: Lessons Learned & What’s Ahead
A look at the cyber threat landscape of 2024, including major breaches and trends. An expert weighs in on key lessons and what to expect in 2025.
Artificial Intelligence, AT&T, Big Data, change healthcare breach, Cloud, Cybersecurity, cybersecurity 2024, Exec, Global Security News, moveit breach, national public data breach, nis 2 directive, Security
Navigating the Cyber Threat Landscape: Lessons Learned & What’s Ahead
A look at the cyber threat landscape of 2024, including major breaches and trends. An expert weighs in on key lessons and what to expect in 2025.
Avast Business Patch Management, Cloud Security, eset, Global Security News, Heimdal Patch & Asset Management, ManageEngine Patch Manager Plus, ninjaone, Patch Management Software, Security, SolarWinds Patch Manager, Top Products
Best Patch Management Software (2024): Compare Features & Pricing
Patch management software ensures that known vulnerabilities are patched efficiently to prevent breaches while streamlining IT workflows. Find the best patch management solution for your business.
Avast Business Patch Management, Cloud Security, eset, Global Security News, Heimdal Patch & Asset Management, ManageEngine Patch Manager Plus, ninjaone, Patch Management Software, Security, SolarWinds Patch Manager, Top Products
Best Patch Management Software (2024): Compare Features & Pricing
Patch management software ensures that known vulnerabilities are patched efficiently to prevent breaches while streamlining IT workflows. Find the best patch management solution for your business.
Global Security News, Security
Apache fixes remote code execution bypass in Tomcat web server
Apache has released a security update that addresses an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution. […]
Cybersecurity, Global IT News, Global Security News, NSO Group, pegasus, privacy, Security, Spyware, WhatsApp
WhatsApp scores historic victory against NSO Group in long-running spyware hacking case
A US judge ruled that the Israeli spyware maker breached hacking laws by using WhatsApp to infect devices with Pegasus © 2024 TechCrunch. All rights reserved. For personal use only.
Apple, Gadgets, Global IT News, Global Security News, Hardware, Security
Apple might be working on a smart doorbell
There’s been a lot of reporting in recent months around Apple’s efforts to expand its footprint in customers’ homes with in-development products like a wall-mounted smart home hub. According to a new report in Bloomberg, that strategy could also include a smart doorbell. This doorbell would use Apple’s FaceID technology to scan people’s faces as…
CryptoCurrency, Global Security News, Security
North Korean hackers stole $1.3 billion worth of crypto this year
North Korean hackers have stolen $1.34 billion worth of cryptocurrency across 47 cyberattacks that occurred in 2024, according to a new report by blockchain analysis company Chainalysis. […]
Global Security News, Security
New FlowerStorm Microsoft phishing service fills void left by Rockstar2FA
A new Microsoft 365 phishing-as-a-service platform called “FlowerStorm” is growing in popularity, filling the void left behind by the sudden shutdown of the Rockstar2FA cybercrime service. […]
Blog, Careers, cryptography, Global Security News, PQC, Security, Security Awareness, Security Bloggers Network
Navigating the Future of Secure Code Signing and Cryptography
In today’s interconnected world, the integrity of software has never been more critical. With the increasing reliance on open-source components and the complexities introduced by containerized applications, ensuring trust in software has become a cornerstone of modern security practices. I […] The post Navigating the Future of Secure Code Signing and Cryptography appeared first on…
Department of Justice, Global IT News, Global Security News, indictment, LockBit, Security
Third member of LockBit ransomware gang has been arrested
LockBit is believed tobe responsible for at least $500 million in ransom payments alone. © 2024 TechCrunch. All rights reserved. For personal use only.
Big Data, Compliance, Data Security, document management, employee payments, Global Security News, hr, Human Resources, International, Payroll, payroll platforms, payroll taxes, privacy regulations, Security, Software
What Payroll Documents Do You Need to Pay Employees?
Essential payroll documents like W-2s and time sheets ensure accurate employee payments. Learn what you need for compliance and efficiency.
CryptoCurrency, Global Security News, Security
Malicious Rspack, Vant packages published using stolen NPM tokens
Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. […]
Global Security News, Security
US charges Russian-Israeli as suspected LockBit ransomware coder
The US Department of Justice has charged a Russian-Israeli dual-national for his suspected role in developing malware and managing the infrastructure for the notorious LockBit ransomware group. […]
Global Security News, Security
Sophos Firewall vulnerable to critical remote code execution flaw
Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged SSH access to devices. […]
Cybersecurity, data breach, Global IT News, Global Security News, Healthcare, Ransomware, Security
Ransomware attack on health giant Ascension hits 5.6 million patients
The cyberattack on Ascension ranks as the third-largest healthcare-related breach of 2024. © 2024 TechCrunch. All rights reserved. For personal use only.
Access Now, Apple, Citizen Lab, Cybersecurity, Global IT News, Global Security News, infosec, iOS, iPhone, lockdown mode, NSO Group, privacy, Security, Spyware, surveillance
Why Apple sends spyware victims to this nonprofit security lab
Before the elections, the cybersecurity team of U.S. vice president and then-presidential candidate Kamala Harris reached out to Apple asking for help, according to Forbes, after a tool that’s designed to detect spyware on iPhones flagged anomalies on two devices belonging to campaign staffers. Apple declined to forensically analyze the phones, per Forbes. The company’s…
Global Security News, Security
Krispy Kreme breach, data theft claimed by Play ransomware gang
The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November. […]
Global Security News, Healthcare, Security
Ascension: Health data of 5.6 million stolen in ransomware attack
Ascension, one of the largest private U.S. healthcare systems, is notifying over 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation. […]
Global Security News, Security
Massive live sports piracy ring with 812 million yearly visits taken offline
The Alliance for Creativity and Entertainment (ACE) has taken down one of the world’s largest live sports streaming piracy rings, with over 821 million visits last year. […]
AI, Enterprise, Fundraising, Global IT News, Global Security News, Mindgard, Security, spinouts, Startups
British university spinoff Mindgard protects companies from AI threats
AI creates a dilemma for companies: Don’t implement it yet, and you might miss out on productivity gains and other potential benefits; but do it wrong, and you might expose your business and clients to unmitigated risks. This is where a new wave of “security for AI” startups come in, with the premise that these…
Global Security News, Security
Romanian Netwalker ransomware affiliate sentenced to 20 years in prison
Daniel Christian Hulea, a Romanian man charged for his involvement in NetWalker ransomware attacks, was sentenced to 20 years in prison after pleading guilty to computer fraud conspiracy and wire fraud conspiracy in June. […]
Global IT News, Global Security News, India, Rapido, Security
India’s Rapido exposed user and driver data through leaky website feedback form
Rapido restricted access to the exposed portal soon after TechCrunch contacted the company. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Hardware, Security
BadBox malware botnet infects 192,000 Android devices despite disruption
The BadBox Android malware botnet has grown to over 192,000 infected devices worldwide despite a recent sinkhole operation that attempted to disrupt the operation in Germany. […]
Global Security News, Security
Android malware found on Amazon Appstore disguised as health app
A malicious Android spyware application named ‘BMI CalculationVsn’ was discovered on the Amazon Appstore, masquerading as a simple health tool but stealing data from infected devices in the background. […]
Global Security News, Security
Junipers warns of Mirai botnet targeting Session Smart routers
uniper Networks has warned customers of Mirai malware attacks targeting and infecting Session Smart routers using default credentials. […]
Global Security News, Security
Juniper warns of Mirai botnet targeting Session Smart routers
Juniper Networks has warned customers of Mirai malware attacks targeting and infecting Session Smart routers using default credentials. […]
Global Security News, Security
Fortinet warns of FortiWLM bug giving hackers admin privileges
Fortinet has disclosed a critical vulnerability in Fortinet Wireless Manager (FortiWLM) that allows remote attackers to take over devices by executing unauthorized code or commands through specially crafted web requests. […]
Global Security News, Security
BeyondTrust says hackers breached Remote Support SaaS instances
Privileged access management company BeyondTrust suffered a cyberattack in early December after threat actors breached some of its Remote Support SaaS instances. […]
Asia Pacific, Cybersecurity, encryption, Global Security News, lockdown mode, Salt Typhoon, Security, signal
US government urges high-ranking officials to lock down mobile devices following telecom breaches
The move to urge Americans to use end-to-end encrypted apps comes as China-backed gangs are hacking into phone and internet giants. © 2024 TechCrunch. All rights reserved. For personal use only.
antivirus, Cloud Security, Global Security News, mcafee, norton, Security
McAfee vs Norton: Which Antivirus Software Is Best?
Norton and McAfee are among the original AV vendors. Does one have an edge over the other?
Chainalysis, Crypto, crypto hacks, Global IT News, Global Security News, North Korea, Security
North Korea-linked hackers accounted for 61% of all crypto stolen in 2024
With the rising adoption and value of crypto assets, the potential for theft is also on the rise. This year, the total value of cryptocurrency stolen surged 21%, reaching a substantial $2.2 billion. And according to a Chainalysis report released on Thursday, more than half of this amount was stolen by North Korea-affiliated hacking groups.…
Global IT News, Global Security News, India, mcdonalds, McDonalds India, Security
Bugs in a major McDonald’s India delivery system exposed sensitive customer data
McDonald’s India exposed the personal information of customers and drivers due to security flaws impacting its APIs. © 2024 TechCrunch. All rights reserved. For personal use only.
Compliance, Cybersecurity, Data Security, ecommerce, Enterprise, Exploits, Global Security News, Security, Security Awareness, Security Boulevard (Original), Skimming, Social - Facebook, Social - LinkedIn, Social - X
Understanding Virtual Skimmers: A Threat to E-Commerce Security
Virtual skimmers exploit vulnerabilities in websites that process payments online, often without leaving a trace until it’s too late. The post Understanding Virtual Skimmers: A Threat to E-Commerce Security appeared first on Security Boulevard.
Global Security News, Google, Security
Ongoing phishing attack abuses Google Calendar to bypass spam filters
An ongoing phishing scam is abusing Google Calendar invites and Google Drawings pages to steal credentials while bypassing spam filters. […]
Global Security News, Security
Raccoon Stealer malware operator gets 5 years in prison after guilty plea
Ukrainian national Mark Sokolovsky was sentenced today to five years in prison for his involvement in the Raccoon Stealer malware cybercrime operation. […]
Global Security News, Security
Russian hackers use RDP proxies to steal data in MiTM attacks
The Russian hacking group tracked as APT29 (aka “Midnight Blizzard”) is using a network of 193 remote desktop protocol proxy servers to perform man-in-the-middle (MiTM) attacks to steal data and credentials and to install malicious payloads. […]
Global Security News, Security
US considers banning TP-Link routers over cybersecurity risks
The U.S. government is considering banning TP-Link routers starting next year if ongoing investigations find that their use in cyberattacks poses a national security risk. […]
Global Security News, Security
Don’t overlook these key SSE components
Security service edge (SSE) has emerged as a hot topic in the networking and security markets because it provides cloud-delivered security to protect access to websites and applications. This is key for the work-from-anywhere approach enterprises adopted during the pandemic and maintained as hybrid work became the norm. SSE is also a prevalent subject because…
Cybersecurity, data breach, Exclusive, Global IT News, Global Security News, location tracking, Security
Tracker firm Hapn spilling names of thousands of GPS tracking customers
A security researcher found customer names and workplace affiliations spilling directly from Hapn’s servers. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
HubSpot phishing targets 20,000 Microsoft Azure accounts
A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials. […]
Global Security News, North America, Security
CISA urges switch to Signal-like encrypted messaging apps after telecom hacks
Today, CISA urged senior government and political officials to switch to end-to-end encrypted messaging apps like Signal following a wave of telecom breaches across dozens of countries, including eight carriers in the United States. […]
CryptoCurrency, Global Security News, Microsoft, Security
Malicious Microsoft VSCode extensions target devs, crypto community
Malicious Visual Studio Code extensions were discovered on the VSCode marketplace that download heavily obfuscated PowerShell payloads to target developers and cryptocurrency projects in supply chain attacks. […]
Global Security News, Security
Recorded Future CEO applauds “undesirable” designation by Russia
Recorded Future, an American threat intelligence company, has become the first cybersecurity firm designated by the Russian government as an “undesirable” organization. […]
Change Healthcare, cyberattack, Cybersecurity, evergreens, Global IT News, Global Security News, Healthcare, Ransomware, Security
How the ransomware attack at Change Healthcare went down: A timeline
A hack on UnitedHealth-owned tech giant Change Healthcare likely stands as one of the biggest data breaches of U.S. medical data in history. © 2024 TechCrunch. All rights reserved. For personal use only.
Change Healthcare, Cybersecurity, data breach, Global IT News, Global Security News, Ransomware, Security, UnitedHealth
Nebraska sues Change Healthcare over security failings that led to medical data breach of over 100 million Americans
New details emerged about the Change Healthcare ransomware attack in Nebraska’s complaint. © 2024 TechCrunch. All rights reserved. For personal use only.
Global Security News, Security
Interpol replaces dehumanizing “Pig Butchering” term with “Romance Baiting”
Interpol calls on the cybersecurity community, law enforcement, and the media to stop using the term “Pig Butchering” when referring to online relationship and investment scams, as it unnecessarily shames the victims impacted by these fraud campaigns. […]
Cloud Security, Global Security News, QRadar, Security, SIEM, splunk
QRadar vs Splunk (2024): SIEM Tool Comparison
This is a comprehensive QRadar vs. Splunk SIEM tool comparison, covering their features, pricing, and more. Use this guide to find the best SIEM tool for you.
Global Security News, Security
‘Bitter’ cyberspies target defense orgs with new MiyaRAT malware
A cyberespionage threat group known as ‘Bitter’ was observed targeting defense organizations in Turkey using a novel malware family named MiyaRAT. […]
CryptoCurrency, Global Security News, Security
New fake Ledger data breach emails try to steal crypto wallets
A new Ledger phishing campaign is underway that pretends to be a data breach notification asking you to verify your recovery phrase, which is then stolen and used to steal your cryptocurrency. […]
Global Security News, Microsoft, Security
CISA orders federal agencies to secure Microsoft 365 tenants
CISA has issued this year’s first binding operational directive (BOD 25-01), ordering federal civilian agencies to secure their Microsoft 365 cloud environments by implementing a list of required configuration baselines. […]
Artificial Intelligence, AU, crowdstrike, Cybersecurity, generative ai, Global Security News, International, Security
CrowdStrike Survey Highlights Security Challenges in AI Adoption
Ideally, generative AI should augment, not replace, cybersecurity workers. But ROI still proves a challenge.
Exploits, Global Security News, Security
New critical Apache Struts flaw exploited to find vulnerable servers
A recently patched critical Apache Struts 2 vulnerability tracked as CVE-2024-53677 is actively exploited using public proof-of-concept exploits to find vulnerable devices. […]
Global Security News, Legal, Security
Ireland fines Meta $264 million over 2018 Facebook data breach
The Irish Data Protection Commission (DPC) fined Meta €251 million ($263.6M) over General Data Protection Regulation (GDPR) violations arising from a 2018 personal data breach impacting 29 million Facebook accounts. […]
business, channel, Global Security News, Security, services
The Cybersecurity Stories that Defined 2024 in the Channel
More than ever, cybersecurity posture is an incredibly important aspect of the IT channel, with wide-ranging implications. As we continue to generate colossal amounts of data, protecting systems and clients has become a challenging task that requires partnerships, new emerging solutions, and acquisitions to overcome such a challenge. Over the course of 2024, there have…
Global Security News, Security
Next-gen cybercrime: The need for collaboration in 2025
Cybercrime is a relentless and evolving threat to organizations worldwide. However, with the right insights, we can significantly enhance our security, mitigate risks, and stay ahead of these criminals. FortiGuard Labs’ Cyberthreat Predictions for 2025 report is designed to provide exactly these insights. It identifies emerging threat trends for the coming year and offers actionable…
Global Security News, Security
Over 25,000 SonicWall VPN Firewalls exposed to critical flaws
Over 25,000 publicly accessible SonicWall SSLVPN devices are vulnerable to critical severity flaws, with 20,000 using a SonicOS/OSX firmware version that the vendor no longer supports. […]
Global Security News, Security
Might need a mass password reset one day? Read this first.
Organizations are often caught off-guard when a data breaches occurs, forcing them to quickly perform mass password resets Learn from Specops Software about some of the common mass password reset scenarios and the challenges you may face. […]
Cybersecurity, data breach, Global IT News, Global Security News, Ransomware, Security
Texas medical school says hackers stole sensitive health data of 1.4 million individuals
The university’s incident website blocks search engines from listing the site, making it more difficult for affected individuals to find the website in search results. © 2024 TechCrunch. All rights reserved. For personal use only.
Astrill vpn, Cloud Security, Global Security News, Security, VPN
Astrill VPN Review: Features, Performance, and Insights
Astrill VPN is touted as one of the best VPNs around. But is it worth the extra money?
Global Security News, Hardware, Security, TechRepublic Premium
Secure Equipment Repair Policy and Confidentiality Agreement
Organizations must frequently work with third parties to repair laptops, desktops, tablets, smartphones, servers, and other IT equipment. This customizable policy, written by Erik Eckel and Mark W. Kaelin for TechRepublic Premium, ensures an organization maintains regulatory and best business practice security compliance while tracking systems when they are being repaired. Featured text from the…
Global Security News, Security
FBI spots HiatusRAT malware attacks targeting web cameras, DVRs
The FBI warned today that new HiatusRAT malware attacks are now scanning for and infecting vulnerable web cameras and DVRs that are exposed online. […]
Global Security News, Security
Texas Tech University System data breach impacts 1.4 million patients
The Texas Tech University Health Sciences Center and its El Paso counterpart suffered a cyberattack that disrupted computer systems and applications, potentially exposing the data of 1.4 million patients. […]
APAC, Artificial Intelligence, Australia, Cybersecurity apac, cybersecurity threats apac 2025, cybersecurity vulnerabilities apac 2025, Exploits, Global Security News, Rapid7, Security
APAC: Ransomware to Cause ‘Bumpy’ Security Ride in 2025
Cashed-up ransomware criminals may exploit more zero days while potential blanket ransomware payment bans hang over defenders like a shadow.
Global Security News, linux, Security
Kali Linux 2024.4 released with 14 new tools, deprecates some features
Kali Linux has released version 2024.4, the fourth and final version of 2024, and it is now available with fourteen new tools, numerous improvements, and deprecates some features. […]