Tag: security

Are you an Apple Mac user? Cybercriminals are using this popular website to target you with malware and infostealers – here’s what you need to stay safe

Atomic Stealer malware installs silently via fake GitHub Pages targeting Mac users Attackers create multiple GitHub accounts to bypass platform takedowns repeatedly Users copying commands from unverified websites risk serious system compromise Cybersecurity researchers are warning Apple Mac users about a campaign using fraudulent GitHub repositories to spread malware and…

Read More

Top auto insurance firm leaked over 5 million records – here’s what we know

ClaimPix exposed 5.1 million sensitive insurance files on an unsecured public database Documents included personal data, vehicle details, and internal company records ClaimPix restricted access and pledged code updates after researcher alerted them ClaimPix, a company which streamlines car insurance claims, was leaking sensitive customer data on the clearweb, including…

Read More

GitHub is finally tightening up security around npm following multiple attacks

GitHub will enforce 2FA and deprecate legacy tokens to improve package publishing security Trusted Publishing will expand, and token-based publishing will be restricted by default Shai-Hulud worm breached npm, prompting removal of over 500 compromised packages Following a number of recent high-profile attacks and hacking attempts, GitHub has decided to…

Read More

“It could be catastrophic to the city” – US Secret Service takes down massive million-dollar network of SIM cards it says was capable of taking down comms across New York

A massive communications network was uncovered in New York The network is made of 300 servers containing 100,000 SIM cards Only part of the network was deployed, with more equipment discovered ready to be added to the network The US Secret Service has uncovered and dismantled a telecommunications network in…

Read More

Unhackable backup storage could have helped in the M&S hack case by keeping data physically offline – but it comes at a cost

Recent Marks & Spencer attack reveals flaws in current enterprise backup strategies HyperBUNKER pushes offline storage while critics question cost and practicality Data diodes create one-way channels, keeping vaults disconnected from networks Major UK retailer Marks & Spencer (M&S) was recently hit by a ransomware attack WHICH disrupted internal systems…

Read More

Huge theft reportedly sees 2TB of private data stolen – police files hit in major breach

Maida.health allegedly leaks 2.3TB of Brazilian military police medical and personal data Cybercriminals advertised stolen records including diagnostics, ID cards, and healthcare contracts online Healthcare remains a top target due to sensitive data and risk of identity theft or fraud Maida.health, a Brazilian health technology company, allegedly suffered a data…

Read More