Category: security
Over a billion credentials stolen were stolen in malware attacks in 2024
Billions of passwords are breached each year, SpecOps report claims Millions of users are guilty of poor password hygiene Strong passwords are the first line of defense against data breaches Passwords are being breached at an alarming rate, and threat actors are gaining access to victims accounts through weak and…
Read More
FBI claims North Korean workers are hacking the US companies which hired them
The FBI’s missive follows three previous ones in as many years Statement is aimed at educating businesses and warding off domestic collaborators Suggested remedies include employing endpoint protection on computer systems and checking applications for “typos and unusual nomenclature” The FBI has claimed North Korean IT workers are extorting US…
Read More
QNAP says it has fixed several major vulnerabilities in NAS backup, recovery app
QNAP said it addressed six flaws in its Hybrid Backup Sync tool The flaws stemmed from rsync, an open-source file syncing tool Users are advised to update their HBS immediately QNAP has addressed half a dozen vulnerabilities affecting its Hybrid Backup Sync (HBS) software. In a security advisory, the company…
Read More
Palo Alto firewalls have some worrying serious flaws
Security researchers from Eclypsium find several bugs in multiple Palo Alto Networks firewalls They claim the vulnerabilities are quite severe Palo Alto Networks says if the OS is up to date, and security settings nominal, there is no risk Security researchers have slammed Palo Alto Networks firewalls, claiming to have…
Read More
PayPal fined by New York for cybersecurity failures
PayPal has been fined $2 million for cybersecurity failures New York State Department of Financial Services fine follows a 2022 data breach DFS says PayPal failed to properly train workers on security practices Regulators in New York have issued a $2 million fine to financial service giant PayPal over cybersecurity…
Read More
This devious phishing site repurposes legitimate web elements like CAPTCHA pages for malware distribution
Phishing campaign mimics CAPTCHA to deliver hidden malware commands PowerShell command hidden in verification leads to Lumma Stealer attack Educating users on phishing tactics is key to preventing such attacks CloudSek has uncovered a sophisticated method for distributing the Lumma Stealer malware which poses a serious threat to Windows users.…
Read More