Category: CYBER SECURITY

Cybersecurity researchers have discovered a significant forensic security deficiency in Google Workspace that enables a hacker to exfiltrate data in Google Drive without any trace.

Cybersecurity researchers at Akamai have made a concerning discovery, unearthing a new Magecart-style web skimmer campaign that poses a serious threat to digital commerce websites.

Google has removed 32 malicious extensions from the Chrome Web Store, totaling 75 million downloads, that could alter search results and push spam or unwanted ads.

The personal information of nearly nine million people in the US has been compromised in an apparent ransomware attack on one of the country's largest dental health insurers.

Toyota has admitted another incident in which data of around 260,000 car owners was exposed to the internet for a decade.

This vulnerability makes it possible for authenticated attackers to grant themselves administrative privileges via a user meta update.

Billions of Facebook users in Australia have been warned about a new scam called "Look who just died", which is designed to steal personal information and money by claiming the death of someone they know.

Automattic has started force installing a security patch on millions of websites today to address a critical vulnerability in the Jetpack WordPress plug-in.

Fake job offers and phishing scams are on the rise on LinkedIn and half of the businesses (56 percent) globally experienced at least one LinkedIn scam this year, a report has shown.

At least 48 US states have sued a telecom company called Avid Telecom for allegedly routing 7.5 billion illegal and spoofed robocalls to millions of residents on the 'Do Not Call Registry'.

Cyber-security researchers have spotted a new Russia-linked malware that is designed to cause electric power disruption by attacking critical infrastructure systems and electric grids.

A Tesla whistleblower has leaked 100GB of data to the German outlet Handelsblatt containing thousands of customer complaints that raise serious concerns about the safety of Tesla’s Full Self-Driving (FSD) features.

Cyber-security researchers have identified a trojanised Android app that was available on the Google Play store with over 50,000 installs, extracted microphone recordings and stole files with specific extensions from the users.

Microsoft has uncovered stealthy and targeted malicious activity focused on post-compromise credential access and network system discovery aimed at critical infrastructure organizations in the United States.

The vulnerability offers unauthenticated attackers the ability to add malicious JavaScript to a website, potentially allowing redirects to malvertizing sites as well as the creation of malicious admin users, both of which are appealing use cases for attackers.

Cybersecurity security researcher Jeremiah Fowler discovered non-password protected database containing over 360 million records associated with SuperVPN. The publicly exposed records contained email addresses, device information, and even references to sites that the user visited.

Cross-Site Scripting (XSS) vulnerability patched in W3 Eden’s Download Manager plugin, which is actively installed on more than 100,000 WordPress websites.

Hackers stole over $400 million from crypto projects in 40 attacks in the first quarter (Q1) of 2023 in the US, a new report has shown.

Dish has confirmed that hackers stole the personal information of about 3,00,000 employees in a ransomware attack in February.