Category: CYBER SECURITY

Chinese threat actors, known as "BrazenBamboo," are exploiting a zero-day vulnerability in Fortinet's FortiClient Windows VPN client using a custom post-exploitation toolkit named "DeepData."

This vulnerability tracked as CVE-2024-10924, poses a significant risk. It enables attackers to bypass authentication and gain full administrative access to affected sites.

Larry Dean Harmon, 41, of Akron, Ohio, has been sentenced to three years in prison for running Helix, a darknet cryptocurrency mixer that facilitated over $300 million in Bitcoin transactions between 2014 and 2017.

Israeli surveillance firm NSO Group leveraged multiple zero-day vulnerabilities in WhatsApp, including a newly uncovered exploit called "Erised," to deploy its infamous Pegasus spyware.

The hackers, associated with a group known as Salt Typhoon, infiltrated T-Mobile’s systems as part of a larger effort to monitor the communications of high-value intelligence targets.

Ilya Lichtenstein was sentenced to five years in prison for his role in laundering approximately 120,000 bitcoins stolen from Bitfinex, a leading cryptocurrency exchange.

Daren Li pleads guilty to laundering $73M from cryptocurrency scams, using shell companies and global bank accounts. Sentencing set for March 3, 2025.

Halliburton has disclosed that a ransomware attack in August resulted in $35 million in losses after it forced the company to shut down parts of its IT systems and disconnect client systems.

Have I Been Pwned (HIBP) has alerted nearly 57 million customers of Hot Topic, Box Lunch, and Torrid about a data breach that exposed sensitive personal information.

Amazon has confirmed a data breach that exposed its employees’ work email addresses, phone numbers, and office locations due to a security incident involving one of its property management vendors, as first reported by 404 Media.

A recent data breach has exposed the personal information of more than 200,000 job seekers in the tech sector, revealing sensitive records such as names, phone numbers, email addresses, passport numbers, and visa statuses.

Court systems across Washington state have been offline since Sunday following the detection of "unauthorized activity" on judicial networks.

In its November 2024 security update, Google has addressed 51 Android vulnerabilities, including two actively exploited zero-day flaws, CVE-2024-43047 and CVE-2024-43093.

Interpol has announced the successful takedown of a large-scale cybercrime operation, arresting 41 individuals and dismantling over 1,037 servers involved in cybercriminal activities across 22,000 IP addresses.

Nokia is investigating claims that its source code may have been stolen after a hacker, known as IntelBroker, alleged they obtained the data by breaching a third-party vendor’s server.

According to a new report, artificial intelligence (AI)- driven malicious attacks were the top emerging cyber-security risk for enterprises in the third quarter of 2024.

The Housing Authority of the City of Los Angeles (HACLA) has confirmed a cyberattack on its IT network following claims from the Cactus ransomware gang.

Okta published a surprising update to its security advisories disclosing a critical vulnerability that potentially allowed unauthorized logins.

LiteSpeed Cache, a widely used WordPress plugin with over six million active installs, has patched a critical vulnerability in its latest update that could have allowed unauthenticated visitors to gain administrative access.

Microsoft has issued a warning about a Chinese-operated botnet known as Quad7, or CovertNetwork-1658, which is actively targeting small office and home office (SOHO) routers to steal credentials through password-spray attacks.