Tag: security
It looks like CDK paid a $25 million ransom in crypto to finally end its outage
CDK Global has apparently paid up in order to end the ransomware attack which recently crippled its operations, and brought a large part of North American car dealership businesses to a screeching halt. Citing multiple anonymous sources familiar with the matter, CNN claims CDK has paid the attackers $25 million…
Read More
Millions of spyware customers exposed in mega data breach
Another spyware company has been breached, with sensitive data held on its customers leaked online, researchers have revealed. This time, it’s the Ukrainian company Brainstack, which builds and maintains mSpy, which currently has around 1.5 million users. The breach came after unidentified threat actors reportedly broke into the company’s Zendesk…
Read More
Two top PDF tools have been found leaking user documents and data online
Two top PDF maker tools, both owned by the same company, reportedly operated a misconfigured database leaking sensitive user data to the wider internet via an exposed Amazon S3 bucket. Researchers from Cybernews claim PDF Pro and Help PDF have so far leaked more than 89,000 documents, and apparently continue…
Read More
GitLab warns of critical security flaw which could allow hacker takeovers
GitLab has upgraded its Community and Enterprise editions to fix a critical vulnerability which allowed malicious actors to run pipeline jobs as any other platform user. In its patch release notes, published on the GitLab website, the company said it “strongly” recommends users upgrade their installations to the latest versions…
Read More
Bookworms beware — this sneaky malware disguises itself as ebooks
Researchers have warned reading fans of a new malware strain disguising itself as eBooks, and being distributed via torrents. Usually, threat actors sharing malware via torrents would disguise the files as popular movies, or cracks for expensive, commercial software, since these are popular and allow the attackers to distribute the…
Read More
Snowflake is bringing in some big MFA changes following recent security incidents
Snowflake is upgrading its security posture, giving admins the option to make multi-factor authentication (MFA) mandatory, as well as adding more security customization options and introducing a new platform for monitoring, and enforcing, MFA policies. Admins will be allowed to decide whether to push MFA on all users, those using…
Read More