Tag: security
FBI and CISA tell devs to crack down on security issues before releasing
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI), published a new joint security alert earlier this week, urging software developers to keep path traversal in mind when developing software products. Path traversal is a software vulnerability also known as directory traversal, or directory…
Read More
Dropbox confirms eSign tool hit by major data breach, confirms customer info leaked
E-signature service providers DropBox Sign suffered a cyberattack recently, in which hackers stole some seriously sensitive customer information. As per the data breach notification published on the DropBox Sign website, an unidentified threat actor managed to compromise a service account that was part of the product’s back-end. The company did…
Read More
Hibernating cluster wakes up to map the entire Internet – but what could it be planning?
Chinese state-sponsored actors are apparently mapping out the entire internet, but it’s hard to determine why. Some media speculate that it might be in preparation for a large-scale cyberattack. Cybersecurity researchers from Infoblox recently reported that an activity cluster known as Muddling Meerkat has suddenly woken up. This activity was…
Read More
Another major pharmacy chain shuts following possible cyberattack
Canadian retail pharmacy chain London Drugs experienced a cyber-incident which forced the company to temporarily shut down its stores across Western Canada. On Sunday night, the company published a short update on X, saying it “experienced an operational issue”. “Pharmacists are standing by to support with urgent pharmacy needs,” the…
Read More
US Post Office phishing sites saw almost as much traffic as real website
Fake US Postal Service (USPS) websites, designed to steal people’s sensitive information and payment data through phishing, get almost as much traffic as the actual USPS website. In fact, the real USPS site recorded less traffic than its impersonators during the holiday season, a new report from cybersecurity researchers Akamai…
Read More
North Korean hackers are sending out fake job adverts to try and steal victim’s data
Software developers are being targeted, once again, by fake job ads. The goal of the newly observed campaign is the same as the ones seen before – to drop remote access trojans (RAT) on compromised endpoints, steal passwords, and other sensitive data. This is according to a new report from…
Read More