Tag: security
Cisco Duo says a third-party data breach stole MFA SMS logs
Cisco Duo has confirmed some sensitive customer data was stolen after a third-party cyber-incident. In a breach notification letter sent to affected customers, Cisco Duo said that its telephony provider, which it didn’t name, was compromised on April 1 2024. Unidentified threat actors mounted a phishing attack against the third…
Read More
Ransomware attack hits top chipmaker Nexperia, huge hoard of data set to be leaked
Top chipmaker Nexperia suffered a ransomware attack last month which saw threat actors get away with a terabyte of sensitive corporate data. “Nexperia has become aware that an unauthorized third party accessed certain Nexperia IT servers in March 2024,” the company said in a statement shared with BleepingComputer. “We promptly…
Read More
You haven’t actually got a massive road toll bill – it’s a phishing scam, FBI warns
If you get an SMS message from a toll service, claiming you owe $12.51 in unpaid fees and that if you don’t move fast, you’ll be fined an additional $50, don’t fret – it’s not real. The Federal Bureau of Investigation (FBI) has issued a warning concerning an ongoing smishing…
Read More
BMC flaw left unchecked for 6 years hits Intel and Lenovo servers
The lack of communication that happened six years ago resulted in thousands of devices being vulnerable to a remotely exploitable heap out-of-bounds (OOB) read vulnerability – today. Among the vulnerable devices are Intel and Lenovo servers. Here is what happened: Six years ago, the maintainers of Lighttpd discovered the above-mentioned…
Read More
Sisense customers told to reset passwords following possible attack — CISA warns users they could be at risk
American business intelligence company Sisense warned its customers to reset practically all passwords, key, and tokens, used within the Sisense application. It said it suffered a data breach earlier this week, hinting that the miscreants obtained different login credentials and session tokens. As reported by KrebsOnSecurity, last Wednesday, Sisense’s Chief…
Read More
DuckDuckGo offers an all-in-one privacy package combining a VPN, identity theft protection and information removal
DuckDuckGo, the company behind the privacy-first search engine of the same name, just launched a new subscription service to help users boost their online privacy and take more control over their data. The service is called Privacy Pro, and it bundles three tools: an anonymous VPN, Personal Information Removal, and…
Read More