Category: security

Thousands of web domains hijacked in “sitting ducks” attack

“Sitting Ducks” attack allows crooks to take full control of target domain Almost a million websites vulnerable to takeover, experts warn Tens of thousands of websites already compromised this way “Sitting Ducks” might not be a particularly known method of cyberattacks, but it is still quite widespread, and pretty disruptive,…

Read More

Congress questions Amazon over ‘dangerous and unwise’ TikTok partnership

Amazon’s shopping partnership with TikTok questioned by US congress members The partnership allows users to purchase on Amazon but remain on the TikTok site TikTok is facing a ban in the US, but has successfully fought it so far The House Select Committee on China has expressed concerns over Amazon’s…

Read More

Children’s shoemaker Start-Rite confirms major security incident, full customer details leaked

Start-Rite notifies customers of a major data breach which saw credit card data exposed The details about the attackers are unknown at this time Users with purchases between October 14 and November 7 should scrutinize their bank statements Children’s footwear brand Start-Rite has confirmed suffering a painful data breach in…

Read More

This devious new malware is going after macOS users with a whole barrel of tricks

Security researchers from Group-IB discover unique new piece of malware It abuses extended attributes for macOS files to deploy the payload The malware is most likely built by North Korean state-sponsored actors Cybersecurity researchers have stumbled upon yet another malware variant for macOS likely built by the notorious North Korean…

Read More

Another major US healthcare organization has been hacked, with potentially major consequences

American Associated Pharmacies allegedly fell prey to a ransomware attack The attackers are saying the company paid for the decryptor The group is asking for more money, to keep the stolen files private American Associated Pharmacies (AAP) is joining the ever-growing list of American healthcare organizations to have suffered a…

Read More

Beware — that dream job offer could be malware sent by Iranian hackers

Iranian state-sponsored actors are targeting aerospace pros with fake jobs The goal is to install backdoors and exfiltrate important data The style mimics that of Lazarus, a known North Korean actor Iranian state-sponsored hackers have been observed targeting victims in the aerospace industry with fake job offers, which resulted in…

Read More