Category: CYBER SECURITY

One of the most common methods of 2FA is SMS text messages. The problem is that SMS is not a secure medium. Hackers have several tools in their arsenal that can intercept, phish, and spoof SMS. Despite this security flaw and better options for authentication, SMS-based 2FA is still used by several institutions.

Air India disclosed a data breach after personal information belonging to roughly 4.5 million of its customers was leaked two months following the hack of Passenger Service System provider SITA in February 2021.

CNA Financial paid $40 million in late March to regain control of its network after a ransomware attack.

Student health insurance carrier guard.me has taken their website offline after a vulnerability allowed a threat actor to access policyholders’ personal information.

FragAttacks are a group of security vulnerabilities that can be used to attack Wi-Fi devices. Every Wi-Fi device ever created appears vulnerable, making it possible for attackers to steal sensitive data or attack devices on your network.

In a DDoS attack, An attacker uses a number of machines across the internet (or what’s called a “botnet”). Those machines send a high volume of fake traffic to the target site, all in an attempt to overload server resources and bring the site down.

More than 128 million iOS users were allegedly affected by the “XcodeGhost” malware which first surfaced in 2015 — responsible for injecting malware into several iPhone and iPad apps that were subsequently uploaded to the App Store.

Cloud hosting provider DigitalOcean has emailed customers warning of a data breach involving customers’ billing data.

Attackers can embed malicious URLs containing custom malware into a QR code which could then exfiltrate data from a mobile device when scanned. It is also possible to embed a malicious URL into a QR code that directs to a phishing site, where unsuspecting users could disclose personal or financial information.

The operators of the REvil ransomware are demanding a $50 million ransom from Apple to avoid having confidential information leaked on the dark web,

Insurance company Geico has suffered a data breach that exposed customers’ driver’s license for more than a month, according to a data breach notice filed with the attorney general of California.