Category: CYBER SECURITY

This flaw makes it possible for authenticated attackers to grant themselves administrative privileges via a profile update if the targeted site has the ‘Role Management’ setting enabled.

The fear of Pegasus-style spyware attack resurfaced on Tuesday after researchers at Microsoft and the digital rights group Citizen Lab identified new victims in North America, Central Asia, Southeast Asia, Europe, and the Middle East -- once again from an Israel-based spyware maker.

While analyzing offers of malicious apps on Google Play for sale on the Darknet, experts have discovered that malicious mobile apps and store developer accounts are being sold for up to $20,000, a new report showed on Tuesday.

Micro-Star International Company Ltd (MSI) suffered a data breach after a ransomware gang claimed it stole files from the PC maker.

Apple has fixed two new zero-day security vulnerabilities exploited in attacks to compromise iPhones, Macs, and iPads, in its latest software update.

Two US-based startups that focussed on counseling alcoholics have been, for years, sharing with advertisers their patients' personal information and health data without their consent, the media reported.

Over half (52 percent) of organizations have suffered a data breach in the past two years globally, an increase from 49 percent in 2022 and 39 percent in 2021, a new report said on Wednesday.

The Justice Department announced today a coordinated international operation against Genesis Market, a criminal online marketplace that advertised and sold packages of account access credentials – such as usernames and passwords for email, bank accounts, and social media – that had been stolen from malware-infected...

Data storage leader Western Digital said that cyber-criminals exfiltrated data from its systems during a "network security incident".

US President Joe Biden has signed an executive order that bars federal agencies from buying third-party commercial spyware like Pegasus that poses significant counterintelligence or security risks to the US government or significant risks of improper use by a foreign government or foreign person.

Twitter has admitted that parts of its source code were leaked online on GitHub, and has sent a copyright infringement notice to the open-source coding collaboration platform, the media reported.

Microsoft has released an update to fix a screenshot editing vulnerability in Windows 10 and 11 that allows threat actors to recover modified screenshot sections.

The US Department of Justice has announced it arrested the founder of BreachForums, the world's largest hacker forum, which operated as a marketplace for cybercriminals to buy, sell, and trade hacked or stolen data and other contraband since March 2022.

WordPress is force installing a security update on hundreds of thousands of websites running the highly popular WooCommerce Payments for online stores.

As with all Reflected Cross-Site Scripting vulnerabilities, these could be leveraged for a complete site takeover as long as an unauthenticated attacker could successfully trick a site administrator into performing an action, such as clicking on a link or visiting a website under the attacker’s...

This trojanized version, which has accumulated over 9,000 downloads, masquerades as the popular "ChatGPT for Google" add-on that allows ChatGPT integration on search results. However, it contains extra code that targets Facebook session cookies in an attempt to steal Facebook accounts.