Category: CYBER SECURITY

Canon has confirmed that the cyberattack suffered in early August was caused by ransomware and that the hackers stole data from company servers. “We identified a security incident involving ransomware on August 4, 2020. We immediately began to investigate, a cybersecurity firm was engaged, and...

Digital Defense, Inc., a leader in vulnerability and threat management solutions, announced that its Vulnerability Research Team (VRT) uncovered a previously undisclosed vulnerability affecting the cPanel & WebHost Manager (WHM) web hosting platform. cPanel & WHM version 11.90.0.5 (90.0 Build 5) exhibits a two-factor authentication bypass flaw, vulnerable...

A dictionary attack is based on trying all the strings in a pre-arranged listing. Such attacks originally used words one would find in a dictionary. However, now there are much larger lists available on the open Internet that contain hundreds of millions of passwords recovered...

VPNMentor’s research team has discovered a possible credential stuffing operation whose origins are unknown, but that affected some online users who also have Spotify accounts.  Credential stuffing is a hacking technique that takes advantage of weak passwords that consumers use — and often re-use — online....

European football club Manchester United disclosed on late Friday a cyber-security incident that impacted its internal systems. The football club said it’s still investigating the incident and couldn’t say if the breach allowed the intruders to access data associated with fans or store customers. While...

There are many email providers that offer secure email services. However, not all of them shield your identity. Some will only encrypt the content of your emails, so be sure to check whether it hides your IP address, whether it asks for your personal information...

In the EU Council of Ministers, a resolution was made ready within five days, obliging platform operators such as WhatsApp, Signal and Co. to create master keys for monitoring E2E-encrypted chats and messages, the ORF (Austrian Broadcasting Corporation) reports. The ORF obtained an internal draft in which...

A hosting provider exposed over 63 million customer records via an open elastic search database containing verbose logs with plain-text username/password credentials for numerous WordPress, Magento and other sites, securethoughts reports. The database appeared to belong to the Texas-based cloud application hosting provider, Cloud Clusters...

Since April 2020, unidentified cyber actors have actively targeted vulnerable SonarQube instances to access source code repositories of US government agencies and private businesses, the FBI said in an alert sent out last month and made public this week on its website. The actors exploit known configuration...

A hacker is selling account databases containing an aggregate total of 34 million user records that they claim were stolen from seventeen companies during data breaches, according to Bleepingcomputer. On October 28th, a data breach broker created a new topic on a hacker forum to...