Researchers reveal that campaigns based on “living off the land” tools, conducted by Chafer APT Hacker group with apparent links to the Iranian government released attacks based on several tools built for hacking and spreading backdoors, data exfiltration.[1] Researchers revealed that attacks in the Middle East were by the Chafer […]
Security
Budget carrier EasyJet hacked: travel information and also some credit card details breached by the attackers One of the largest airline carriers in the UK, EasyJet, has suffered a cyberattack that affected the personal information of its customers. According to the notice posted by the travel company on May 19,[1], […]
EasyJet cyberattack exposes personal data of 9 million customers
The document that belongs to DigitalOcean was made public – customer emails and account details exposed According to emails,[1] that company started to send out the incident involves a document from 2018 that stored email addresses, account user names, and other details about sales and communication or server usage. DigitalOcean is […]
DigitalOcean discloses breach: document with customer data made public
Dating app MobiFriends suffers a data breach – personal information of almost 4 million users affected A massive upload of data that belongs to MobiFriends users was found on a high-profile underground hacking forum and is now available to download. The leak was discovered by the RiskBased Security research team, which posted […]
MobiFriends data breach: 3.68 million credentials exposed online
The unauthorized attacker was able to connect to accounts using SSH access The incident was discovered when the GoDaddy security team spotted some suspicious activity on some subset servers.[1] According to the reports, the data breach took place on October 19, 2019. Customers got notified via email because the third-party individual […]
GoDaddy breach: unauthorized attacker gained access to hosting accounts
Adobe released updates that patch critical remote code execution vulnerabilities besides other security flaws Adobe released emergency updates for Adobe Illustrator, Adobe Bridge, and Magento e-commerce platforms.[1] The update includes patches for 35 newly discovered vulnerabilities that were reported as critical.[2] When one of the programs gets affected, multiple arbitrary […]
Adobe Illustrator, Magento, and Bridge get critical security updates
Viewing a GIF may have led to Microsoft Teams account hacking and data stealing Security researchers revealed a flaw that allowed the account takeover of the Microsoft Teams platform.[1] The way to hack such accounts involves sending the recipients a regular GIF. Viewing the image may have been enough to […]
Microsoft patches the vulnerability that allowed account takeover
VictoryGate botnet was primarily used for distributing crypto-mining malware With countless ransomware attacks[1] and COVID-19 phishing scams[2] covering the cybersecurity landscape in recent months, it is always nice to hear some good news. A botnet dubbed VictoryGate was temporarily shut down with the help of security firm ESET. According to the […]
AV maker ESET disrupts VictoryGate botnet
Twitter revealed that a bug allowed private files shared via the platform to be stored inside Firefox cache for up to seven days Those who use Mozilla Firefox for accessing Twitter and sharing files via private DMs should be concerned – it turned out that all data shared with others […]
Twitter privacy issues: Firefox cached files sent through DMs
Studying and working from home can lead to hacker attacks since Zoom hack is real due to UNC path injections It is reported that Zoom Windows client is vulnerable to UNC path injections so one click on the link can lead to stolen data or hacked devices.[1] The situation in […]