Tag: security

China’s APT40 targets new vulnerabilities and can abuse them within hours

Chinese state-sponsored threat actors, tracked by Western cybersecurity agencies as APT40, work fast. They hunt for previously undisclosed vulnerabilities, quickly build exploits, and rush to deploy them as soon as possible. In some instances, the entire process, from vulnerability discovery to exploitation, only lasted a couple of hours. This is…

Read More

Shopify points to third-party app for data breach

A hacker recently advertised selling a database allegedly stolen from the e-commerce giant Shopify. However, the company says the archives did not come from its systems, but rather a third party. Last week, a threat actor with the alias ‘888’ took to BreachForums to try and sell a database containing…

Read More

NHS at risk of being hit again as NCSC exec says IT systems “out of date”

The UK’s National Health Service (NHS) is at risk of even more devastating cyberattacks, since parts of its IT infrastructure are outdated. Professor Ciaran Martin, the first CEO of the National Cyber Security Centre (NCSC) warned about the state of the NHS after a major cyberattack that struck the organization…

Read More

This new ransomware scam will hassle you with phone calls until you pay up

A new ransomware group has been discovered harassing its victims on the phone until they pay up.  A report from anti-ransomware company, Halycon said that Volcano Demon was seen going after “several” targets in the last couple of weeks, deploying a new encryptor called LukaLocker.  Its methodis relatively simple –…

Read More

Google needs to stop blocking VPNs on Android Auto – Here’s how to fix it

I never thought I’d need to deal with this. I’ve been using Android VPNs for years now, and after getting a new car, I wanted to hit the roads and blast some Sleep Token. As you can imagine, I hit something of a snag – Android Auto blocks your connection…

Read More

Tabletop gamers hit by data breach affecting Roll20 gaming site

Online tabletop and role-playing game company Roll20 have revealed suffered a data breach that resulted in sensitive user data being exposed.  The company confirmed the news in an FAQ post published on its website, noting an unauthorized individual accessed its systems on June 29, using a compromised admin account. From…

Read More