Tag: security
Children’s shoemaker Start-Rite confirms major security incident, full customer details leaked
Start-Rite notifies customers of a major data breach which saw credit card data exposed The details about the attackers are unknown at this time Users with purchases between October 14 and November 7 should scrutinize their bank statements Children’s footwear brand Start-Rite has confirmed suffering a painful data breach in…
Read More
This devious new malware is going after macOS users with a whole barrel of tricks
Security researchers from Group-IB discover unique new piece of malware It abuses extended attributes for macOS files to deploy the payload The malware is most likely built by North Korean state-sponsored actors Cybersecurity researchers have stumbled upon yet another malware variant for macOS likely built by the notorious North Korean…
Read More
Another major US healthcare organization has been hacked, with potentially major consequences
American Associated Pharmacies allegedly fell prey to a ransomware attack The attackers are saying the company paid for the decryptor The group is asking for more money, to keep the stolen files private American Associated Pharmacies (AAP) is joining the ever-growing list of American healthcare organizations to have suffered a…
Read More
Beware — that dream job offer could be malware sent by Iranian hackers
Iranian state-sponsored actors are targeting aerospace pros with fake jobs The goal is to install backdoors and exfiltrate important data The style mimics that of Lazarus, a known North Korean actor Iranian state-sponsored hackers have been observed targeting victims in the aerospace industry with fake job offers, which resulted in…
Read More
It’s official — FBI, CISA, and NSA reveal the most exploited vulnerabilities of 2023
Five Eyes alliance has revealed the most exploited vulnerabilities of 2023 Zero-day exploits were the primary concern, with CVE-2023-3519 was at the top of the list Businesses urged to patch as soon as possible to stay safe The Five Eyes intelligence alliance has revealed the most routinely exploited vulnerabilities for…
Read More
GitHub users targeted by dangerous new phishing threat
Researchers discover Golssue – a new tool for extracting GitHub user emails It is being sold for $700 on the dark web Such a high-precision tool could lead to dangerous supply chain attacks GitHub users are allegedly being targeted in a brand new phishing campaign, according to SlashNext. The company…
Read More