Tag: security

Legacy IT infrastructure hosted Chinese spies inside a US engineering firm for months

Chinese state-sponsored hackers were snooping around a US-based global engineering firm for months, trying to steal classified information, blueprints, login credentials, and other sensitive data. An exclusive report by The Register, discussed the news with John Dwyer, Director of Security Research at Binary Defense, a managed detection and response firm…

Read More

Lockbit says it has hit eFile.com, again

American online tax filing platform, eFile.com, appears to have suffered (yet another) ransomware attack. Earlier this week, ransomware operators LockBit added the company to their extortion site, threatening to leak the files stolen during the raid, The Register reports. However, the company has not yet confirmed, nor denied, the attack.…

Read More

Temu denies data breach — but hacker claims to have leaked 87 million strong database

A cybercriminal claims to have breached Temu and stolen millions of customer records, but the ecommerce giant is vehemently denying the claims. A hacker with the alias ‘smokinthashit’ took to BreachForums, one of the most popular underground forums out there, and advertised a new database, allegedly stolen from the company.…

Read More

Accounting software brute force attacks hit construction companies

Hackers are targeting construction companies with brute-force attacks, breaking into their networks and executing different commands remotely. This is according to cybersecurity researchers Huntress, who recently observed the attacks in the wild. As per the researchers, cybercriminals are going after Foundation – a piece of software used by construction companies…

Read More

Intellexa hit by additional sanctions by US government

The US government has initiated a new round of sanctions against commercial spyware makers and their organizations. In a press release published by the US Department of the Treasury, the country’s government outlined further punishments on Intellexa executives, associates, and organizations that were part of the consortium. In March 2024,…

Read More

Researchers uncover RCE exploit in Google Cloud, millions of servers at risk

There was a major flaw in Google Cloud Platform (GCP) that could have allowed hackers to run malicious code remotely, on millions of servers and underlying systems. The flaw was discovered by cybersecurity researchers from Tenable, who reported their findings to Google. The company has since addressed the issue and…

Read More