12/28/2023

Russian Military Hackers Target Ukraine With New MASEPIE Malware

The ‘Most Dangerous’ People on the Internet in 2023

Bill Gates Predicts a ‘Massive Technology Boom’ From AI Coming Soon

Blockchain Dev’s Wallet Emptied in “Job Interview” Using Npm Package

A Tale of 2 Casino Ransomware Attacks: One Paid Out, One Did Not

Cybersecurity Teams Need New Skills Even as They Struggle to Manage Legacy Systems
Eagers Automotive Halts Trading in Response to Cyberattack

Kroll Reveals FTX Customer Info Exposed in August Data Breach

Game Mod on Steam Breached to Push Password-Stealing Malware

New Rugmi Malware Loader Surges with Hundreds of Daily Detections

Google Cloud Platform Resolves Privilege Escalation Flaw Impacting Kubernetes Service

Microsoft Disables MSIX Protocol Handler Abused in Malware Attacks

12/27/2023

India Targets Apple Over Its Phone Hacking Notifications

Cybersecurity in the Year Ahead: Think 2023 on Steroids

How Cybercriminals Will Sway 2024 US Elections, Or Try To

LockBit Ransomware Disrupts Emergency Care at German Hospitals

Hackers See Wealth of Information to Steal in Children’s School Records

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

iPhone Triangulation Attack Abused Undocumented Hardware Feature

This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy
Ohio Lottery Hit by Cyberattack Claimed by DragonForce Ransomware

Trinidad and Tobago Social Security Agency Hit With Post-christmas Ransomware Attack

Mortgage Firm LoanCare Warns 1.3 Million People of Data Breach

Yakult Australia Confirms ‘Cyber Incident’ After 95 GB Data Leak

Panasonic Discloses Data Breach After December 2022 Cyberattack

New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

Chinese Hackers Exploited New Zero-Day in Barracuda’s ESG Appliances

12/26/2023

Eight Cybersecurity Trends To Watch For 2024

Cybersecurity Funding in 2024: Survival of the Financially Fittest

What VCs Are Looking For in the Next Wave of Cybersecurity Startups

Carbanak Banking Malware Resurfaces with New Ransomware Tactics

GitHub Warns Users to Enable 2FA Before Upcoming Deadline
CBS, Paramount Owner National Amusements Says It Was Hacked

Fidelity National Financial Subsidiary Says 1.3 Million Affected by November Cyberattack

Integris Health Patients Get Extortion Emails After Cyberattack

1 Million Corewell Health Patients Could Be Impacted by Second Data Breach

RingGo, ParkMobile Owner EasyPark Suffers Data Breach, User Data Stolen

12/22-25/2023

UK Justice Secretary in Deepfake General Election Warning

UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware

Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities

Europol Warns 443 Online Shops Infected With Credit Card Stealers

Ransomware Leak Site Victims Reached Record-High in November

Cyber Sleuths Reveal How They Infiltrate the Biggest Ransomware Gangs

‘Wall of Flippers’ Detects Flipper Zero Bluetooth Spam Attacks

Scammers Are Ruining Facebook Marketplace

Congress Sure Made a Lot of Noise About Kids’ Privacy in 2023—and Not Much Else

British LAPSUS$ Teen Members Sentenced for High-Profile Attacks

Google Chrome Now Scans for Compromised Passwords in the Background
Mint Mobile Discloses New Data Breach Exposing Customer Data

Australia’s St Vincent’s Health Says Data Stolen in Cyber Attack

Ubisoft Says It’s Investigating Reports of a New Security Breach

Nissan Australia Cyberattack Claimed by Akira Ransomware Gang

GTA 5 Source Code Reportedly Leaked Online a Year After Rockstar Hack

Fake VPN Chrome Extensions Force-Installed 1.5 Million Times

Cloud Atlas’ Spear-Phishing Attacks Target Russian Agro and Research Companies

Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware

Ransomware Attackers Abuse Multiple Windows CLFS Driver Zero-Days

Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft

2023 Rewind: The Year in Cybersecurity

12/21/2023

Microsoft: Hackers Target Defense Firms With New FalseFont Malware

Experts Detail Multi-Million Dollar Commercial Licensing Model of Predator Spyware

Remote Encryption Increasingly Adopted by Ransomware Operations

Regulators Got Tough on Cyber in 2023 as Crime Soared

BidenCash Darkweb Market Gives 1.9 Million Credit Cards for Free

Fake Delivery Websites Surge By 34% in December

Microsoft Deprecates Defender Application Guard for Some Edge Users

Lapsus$ Teen GTA VI Hacker Sentenced to Life in a Secure Hospital
First American Takes IT Systems Offline After Cyberattack

Crypto Drainer Steals $59 Million From 63K People in Twitter Ad Push

Toronto Public Library ‘Remains a Crime Scene’ After Ransomware Attack

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication

BattleRoyal Cluster Signals DarkGate Surge

Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware

OpenAI Rolls Out Imperfect Fix for ChatGPT Data Leak Flaw

Attacks on Critical Infrastructure Are Harbingers of War: Are We Prepared?

12/20/2023

Biden Administration Takes First Step Toward Writing Key AI Standards

German Police Takes Down Kingdom Market Cybercrime Marketplace

Krebs: BlackCat Ransomware Raises Ante After FBI Disruption

Fake F5 BIG-IP Zero-Day Warning Emails Push Data Wipers

Remote Encryption Attacks Surge: How One Vulnerable Device Can Spell Disaster

New Phishing Attack Steals Your Instagram Backup Codes to Bypass 2FA

Crypto Scammers Abuse X ‘Feature’ to Impersonate High-Profile Accounts

Manchester’s Finest Drowning in Paperwork as Freedom of Information Requests Pile Up
Ukraine’s Kyivstar Says It Is Fully Operational After Cyber Attack

Healthcare Software Provider ESO Solutions Data Breach Impacts 2.7 Million

Nearly 70k Social Security Numbers Leaked in Kimco Staffing Services (CA) Data Breach

Hospitality Industry Faces New Password-Stealing Malware

New Go-Based JaskaGO Malware Targeting Windows and macOS Systems

Attackers Exploit 6-Year-Old Microsoft Office Bug to Spread Spyware

Ivanti Releases Patches for 13 Critical Avalanche RCE Flaws

Google Fixes 8th Chrome Zero-Day Exploited in Attacks This Year

12/19/2023

Iranian Hackers Using MuddyC2Go in Telecom Espionage Attacks Across Africa

FBI Posts Takedown Notice on ALPHV/BlackCat Ransomware Group’s Website

Decryption Key Offered to Victims

FBI: ALPHV Ransomware Raked in $300 Million From Over 1,000 Victims

How the FBI Seized Blackcat (ALPHV) Ransomware’s Servers

Ransomware Gang ‘Unseizes’ Its Site and Issues New Threats Just Hours After FBI Takedown

Qakbot’s Backbot: FBI-Led Takedown Keeps Crims at Bay for Just 3 Months

Behind the Scenes of Matveev’s Ransomware Empire: Tactics and Team

Interpol Operation Arrests 3,500 Cybercriminals, Seizes $300 Million

Foreign Actors Targeted 2022 U.S. Elections, Intelligence Community Reveals

Impact of Log4Shell Bug Was Overblown, Say Researchers

NSA Publishes 2023 Cybersecurity Year in Review

Navigating The Cybersecurity Landscape In 2024: Anticipating Challenges And Opportunities
Smishing Triad Targets UAE Residents in Identity Theft Campaign

Comcast Says Hackers Stole Data of Close to 36 Million Xfinity Customers

Insomniac Games Wolverine Project Leaked

Spider-Man 3 and More

Manatee Memorial Hospital (FL) Reporting Ransomware Attack, Patient Info Affected

Neurosurgeons of New Jersey Confirms Cyber Attack Resulting in Recent Data Breach

Washington County (AR) Says Weekend Cyber Attack Foiled

New Malvertising Campaign Distributing PikaBot Disguised as Popular Software

New Web Injections Campaign Steals Banking Data From 50,000 People

Terrapin Attacks Can Downgrade Security of OpenSSH Connections

8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware

Hackers Abusing GitHub to Evade Detection and Control Compromised Hosts

12/18/2023

Iran Petrol Stations Hit by Cyberattack, Oil Minister Says

Israel Announces Iran, Hezbollah Were Behind Ziv Hospital Cyber Attack

National Grid Latest UK Org to Zap Chinese Kit From Critical Infrastructure

Pro-China Campaign Targeted YouTube With AI Avatars

OpenAI Outlines AI Safety Plan, Allowing Board to Reverse Decisions

Scammers Are Tricking Anti-Vaxxers Into Buying Bogus Medical Documents

Insurer’s UK Honeypots Attacked 17 Million Times Per Day

Intelligence Researchers to Study Computer Code for Clues to Hackers’ Identities

Why Apple Is Halting U.S. Sales of Its Watch Series 9 and Ultra 2 Models (And Where to Buy Them Now)

Former IT Manager Pleads Guilty to Attacking NJ High School Network

Alleged LockBit Operator to Face New Cybercrime Charges in Canada
Vans Owner VF Corp’s Order Fulfillment Operations Hit by Cyber Incident

As the SEC’s New Data Breach Disclosure Rules Take Effect, Here’s What You Need to Know

Comcast’s Xfinity Flags Data Security Incident

Mortgage Giant Mr. Cooper Data Breach Affects 14.7 Million People

ALPHV Second Most Prominent Ransomware Strain Before Reported Downtime

FBI: Play Ransomware Breached 300 Victims, Including Critical Orgs

The Rise Of Ransomware As A Service (RaaS) And Implications For Business Security

Beware: Experts Reveal New Details on Zero-Click Outlook RCE Exploits

Microsoft Discovers Critical RCE Flaw in Perforce Helix Core Server

Novel SMTP Smuggling Technique Slips Past DMARC, Email Protections

12/15-17/2023

China Issues Draft Contingency Plan for Data Security Incidents

U.S. Congress Pushes Warrantless Wiretapping Decision off Until April Next Year

Google Just Denied Cops a Key Surveillance Tool

7 Months Inside an Online Scam Labor Camp

The Startup That Transformed the Hack-for-Hire Industry

McDonald’s Ice Cream Machine Hackers Say They Found the ‘Smoking Gun’ That Killed Their Startup

Four Charged in Connection With $80m Pig Butchering Scheme

Ex-Amazon Engineer Pleads Guilty to Hacking Crypto Exchanges

CISA Urges Tech Manufacturers to Stop Using Default Passwords

Microsoft Unveils New, More Secure Windows Protected Print Mode

What to Do When Receiving Unprompted MFA OTP Codes

Clorox, Boeing, MGM and More: Why Big Hacks Have Surged in 2023
Central Bank of Lesotho Facing Outages After Cyberattack

Delta Dental of California Data Breach Exposed Info of 7 Million People

MongoDB Suffers Security Breach, Exposing Customer Data

Hunters International  Ransomware Gang Behind Threats to Fred Hutch Cancer Patients

Qbot Malware Returns in Campaign Targeting Hospitality Industry

WordPress Hosting Service Kinsta Targeted by Google Phishing Ads

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds

Rhadamanthys Stealer Malware Evolves With More Powerful Features

New NKAbuse Malware Abuses NKN Blockchain for Stealthy Comms

QNAP VioStor NVR Vulnerability Actively Exploited by Malware Botnet

3CX Warns Customers to Disable SQL Database Integrations

12/14/2023

Kyivstar May Need Weeks to Restore All Services After Cyber Attack – CEO

Iranian State-Sponsored OilRig Group Deploys 3 New Malware Downloaders

New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities

Microsoft’s Digital Crime Unit Goes Deep on How It Disrupts Cybercrime

Krebs: Ten Years Later, New Clues in the Target Breach

UniFi Devices Broadcasted Private Video to Other Users’ Accounts

FCC Updates Data Breach Notification Rules
U.S. Nuclear Research Lab Data Breach Impacts 45,000 People

ChatGPT Back Online After ‘Major Outage,’ OpenAI Says

Kraft Heinz Reviewing Claims of Cyberattack but Internal Systems ‘Operating Normally’

GambleForce Group Targets Websites With SQL Injection

Ledger dApp Supply Chain Attack Steals $600K From Crypto Wallets

Ten New Android Banking Trojans Targeted 985 Bank Apps in 2023

116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems

12/13/2023

Hacker Group Linked to Russian Military Claims Credit for Cyberattack on Ukrainian Telecom

U.S. Officials Say Russian Targeting JetBrains Servers for Potential SolarWinds-Style Operations

Think Tank Report Labels NSO, Lazarus as ‘Cyber Mercenaries’

LockBit Ransomware Now Poaching BlackCat, NoEscape Affiliates

New Cybercrime Market ‘OLVX’ Gains Popularity Among Hackers

UK Ministry of Defence Fined For Afghan Data Breach

SEC Cyber Rules Loom Over Public Companies

French Police Arrests Russian Suspect Linked to Hive Ransomware

Microsoft Seizes Domains Used to Sell Fraudulent Outlook Accounts
Hacktivists Interrupt UAE TV Streams With a Message About Gaza

Nearly a Million Non-profit Donors’ Details Left Exposed in Unsecured DonorView Database

District Court in Switzerland ‘Victim of a Cyber Attack’

Regional Family Medicine (AR) Confirms Data Breach Resulting from Recent IT Outage

BazaCall (aka BazarCall) Phishing Scammers Now Leveraging Google Forms for Deception

Stealthy KV-Botnet Hijacks SOHO Routers and VPN Devices

Hackers Are Exploiting Critical Apache Struts Flaw Using Public PoC

Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

12/12/2023

Ukraine Mobile Network Kyivstar Hit by ‘Cyber-Attack’

Ukrainian Military Says It Hacked Russia’s Federal Tax Agency

Russian APT28 Hackers Targeting 13 Nations in Ongoing Cyber Espionage Campaign

Ted Cruz Wants to Stop the FCC From Updating Data-Breach Notification Rules

U.S. Senate Confirms New National Cyber Director Harry Coker Jr.

Widespread Security Flaws Blamed for Northern Ireland Police Data Breach

Threat Actor TA4557 Targets Recruiters With Malware

How Cybercriminals Are Using Wyoming Shell Companies for Global Hacks

Cloud Engineer Wreaks Havoc on Bank Network After Getting Fired
Sony Is Investigating an Alleged Ransomware Attack on Insomniac

Citrin Cooperman Advisors Files Notice of Data Breach Following Cyberattack

New MrAnon Stealer Malware Targeting German Users via Booking-Themed Scam

Microsoft: OAuth Apps Used to Automate BEC and Cryptomining Attacks

Over 1,450 pfSense Servers Exposed to RCE Attacks via Bug Chain

New Critical RCE Vulnerability Discovered in Apache Struts 2 – Patch Now

Sophos Backports RCE Fix After Attacks on Unsupported Firewalls

Krebs: Microsoft Patch Tuesday, December 2023 Edition

Data’s Perilous Journey & Lessons Not Learned From the Target Breach

12/11/2023

China’s Cyber Army Is Invading Critical U.S. Services

Lazarus Group Targets Log4Shell Flaw Via Telegram Bots

Researchers Unmask Sandman APT’s Hidden Link to China-Based KEYPLUG Backdoor

How a Social Engineering Hack Turned These Facebook Pages Into a Dumping Ground for Spam

Europol Raises Alarm on Criminal Misuse of Bluetooth Trackers

Ukraine Is Crowdfunding Its Reconstruction

Europe Agrees Landmark AI Regulation Deal

Kelvin Security Hacking Group Leader Arrested in Spain
Toyota Warns Customers of Data Breach Exposing Personal, Financial Info

Cold Storage and Logistics Giant Americold Discloses Data Breach After April Malware Attack

Heart of Texas Behavioral Health Network Warns of Data Breach

Counter-Strike 2 HTML Injection Bug Exposes Players’ IP Addresses

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions

50K WordPress Sites Exposed to RCE Attacks by Critical Bug in Backup Plugin

Apple Emergency Updates Fix Recent Zero-Days on Older iPhones

12/8-10/2023

N. Korea’s Kimsuky Targeting South Korean Research Institutes with Backdoor Attacks

Geopolitics to Blame For DoS Surge in Europe, Says ENISA

Top White House Cyber Aide Says Recent Iran Hack on Water System Is Call to Tighten Cybersecurity

ALPHV Ransomware Site Outage Rumored to be Caused by law Enforcement

Be Skeptical About QR Codes, Warns the FTC

That Call Center Tech Scammer Could Be a Human Trafficking Victim

Privilege Elevation Exploits Used in Over 50% Of Insider Attacks

UK ICO Warns of Fines for “Nefarious” AI Use

Competing Section 702 Surveillance Bills on Collision Path for U.S. House Floor

Amazon Sues REKK Fraud Gang That Stole Millions in Illicit Refunds
Norton Healthcare Discloses Data Breach After May Ransomware Attack

Seattle Cancer Center Patients Receiving Threatening Emails After Last Month’s Data Breach

Hinsdale Schools (NH) Struck by Ransomware Attack

AutoSpill Attack Steals Credentials From Android Password Managers

Researchers Unveal GuLoader Malware’s Latest Anti-Analysis Techniques

New 5G Modem Flaws Affect iOS Devices and Android Models from Major Brands

Over 30% Of Log4J Apps Use a Vulnerable Version of the Library

6 Predictions About Cybersecurity Challenges In 2024

2023 Cyber Review: The Year GenAI Stole the Show

Increased Cyber Regulation in the Offing as Attacks Mount

12/7/2023

Russia Hacking: ‘FSB in Years-Long Cyber Attacks on UK’, Says Government

Moscow Says No Evidence for British Allegations of Cyber Spying – Agencies Cite Embassy

Russian Hackers Targeted U.S. Intel Officers in ‘Sophisticated Spear Phishing Campaign,’ DOJ Says

Russian Military Hackers Target NATO Fast Reaction Corps

Elijah Wood and Mike Tyson Cameo Videos Were Used in a Russian Disinformation Campaign

U.S. and EU Infosec Authorities Pen Intel-Sharing Pact

Why It Took Meta 7 Years to Turn on End-to-End Encryption for All Chats

New Report: Over 40% of Google Drive Files Contain Sensitive Info

Cyber-Attacks More Likely Than Fire or Theft, Aviva Research Finds

Coming EU Rules on AI May Shape Companies’ Use of Automated Systems

23andMe Updates User Agreement to Prevent Data Breach Lawsuits

Russia Man Pleads Guilty to Running Crypto-Exchange Used by Ransomware Gangs
Cambridge Hospitals Admit Two Excel-Based Data Breaches

Shoe Retailer Aldo Says LockBit Posting Is Related to System at Franchise Partner

Cardiovascular Consultants (MA) Confirms Data Breach in SEC Filing

New Stealthy ‘Krasue’ Linux Trojan Targeting Telecom Firms in Thailand

‘HeadCrab’ Malware Variants Commandeer Thousands of Servers

Microsoft Warns of COLDRIVER’s Evolving Evading and Credential-Stealing Tactics

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

New SLAM Attack Steals Sensitive Data From AMD, Future Intel CPUs

WordPress Fixes POP Chain Exposing Websites to RCE Attacks

Apple-Backed Data Breach Report Says 2.6 Billion Records Leaked in 2 Years

12/6/2023

Dragos Launches Program to Provide Water, Electric Utilities With Free Cybersecurity Tools Following Attacks

Navy Contractor Austal USA Confirms Cyberattack After Data Leak

‘No Impact on Operations’

The Binance Crackdown Will Be an ‘Unprecedented’ Bonanza for Crypto Surveillance

Police Can Spy on Your iOS and Android Push Notifications

Krebs: ICANN Launches Service to Help With WHOIS Lookups

Police Arrest 1000 Suspected Money Mules

A Year On, CISA Realizes Debunked Vuln Actually a Dud and Removes It From Must-Patch List

23andMe Hack Is a Wake-Up Call for Your Password Habits

Strategy, Harmony & Research: Triaging Priorities for OT Cybersecurity

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts
Nissan Is Investigating Cyberattack and Potential Data Breach

Schools in Maine, Indiana and Georgia Contend With Ransomware Attacks

Advantis Global Confirms Recent Data Breach in Filing with the Office of the California Attorney General

Trojan-Proxy Threat Expands Across macOS, Android and Windows

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Sierra:21 – Flaws in Sierra Wireless Routers Expose Critical Sectors to Cyber Attacks

Millions of Patient Scans and Health Records Spilling Online Thanks to Decades-Old Protocol Bug: DICOM

Just About Every Windows and Linux Device Vulnerable to New LogoFAIL Firmware Attack

Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution

12/5/2023

Sellafield Nuclear Site Hacked by Groups Linked to Russia and China

Britain Says No Evidence of Sellafield Nuclear Site Hacking

Hackers Breach U.S. Gov’t Agencies Using Adobe ColdFusion Exploit

U.S. Federal Agencies Miss Deadline for Incident Response Requirements

Disney+ Cyber Scheme Exposes New Impersonation Attack Tactics

Russia’s AI-Powered Disinformation Operation Targeting Ukraine, U.S., and Germany

A New Trick Uses AI to Jailbreak AI Models—Including GPT-4

Due to AI, “We Are About to Enter the Era of Mass Spying,” Says Bruce Schneier

Japanese Tech Lobby Warns Against EU Cybersecurity Labelling Scheme

BlackCat Ransomware Crims Threaten to Directly Extort Victim’s Customers
Hackers Claim to Breach Israeli Defense Force Medical Data

HTC Global Services Confirms Cyberattack After Data Leaked Online

Threat Actors Target Austal USA in Ransomware Attack, U.S. Navy Data at Risk

DePauw University Warns of Data Breach as Ransomware Attacks on Colleges Surge

WGRE Reports DePauw Attacked by Black Suit Ransomware Gang

SpyLoan Scams Target Android Users With Deceptive Apps

Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack

15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

Multiple NFT Collections at Risk by Flaw in Open-Source Library

Kali Linux 2023.4 Released with GNOME 45 and 15 New Tools

12/4/2023

U.S. Confirms Iranian Attacks on Water Companies: IRGC’s ‘CyberAv3ngers’

St. Johns River Water Management District (FL) Latest to Confirm Cyber Incident as Feds Warn of Nation-State Attacks

New AeroBlade Hackers Target Aerospace Sector in the U.S.

Russian Hackers Exploiting Outlook Bug to Hijack Exchange Accounts

Establishing New Rules for Cyber Warfare

EU Council and Parliament Reach Agreement on Cyber Resilience Act

Fake WordPress Security Advisory Pushes Backdoor Plugin

Exposed Hugging Face API Tokens Offered Full Access to Meta’s Llama 2
Tipalti Investigates Claims of 256GB of Data Stolen, including From Roblox and Twitch, in ALPHV Ransomware Attack

Hershey Phishes! – Crooks Snarf Chocolate Lovers’ Creds

23andMe Confirms Hackers Stole Ancestry Data on 6.9 Million Users

Long Beach (CA) Says City Data Was Compromised in Cyber Attack

Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware

Rust-Based Botnet P2Pinfect Targets MIPS Architecture

Two New Versions of OpenZFS Fix Long-Hidden Corruption Bug

December Android Updates Fix Critical Zero-Click RCE Flaw

12/1-3/2023

Meta Will Enforce Ban on AI-Powered Political Ads in Every Nation, No Exceptions

French Government Recommends Against Using Foreign Chat Apps

NCSC Urges UK Water Companies to Secure Control Systems

U.S. Health Dept Urges Hospitals to Patch Critical Citrix Bleed Bug

Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.

How to Not Get Hacked by a QR Code

Russian Hacker Vladimir Dunaev Convicted for Creating TrickBot Malware

Google Chrome’s New Cache Change Could Boost Performance
Scores of U.S. Credit Unions Offline After Ransomware Infects Backend Cloud Outfit

23andMe Says Hackers Accessed ‘Significant Number’ of Files About Users’ Ancestry

Blue Shield of California Members’ Data Stolen — ‘A Gold Mine for Thieves’

New Proxy Malware Targets Mac Users Through Pirated Software

UEFI Flaws Allow Bootkits to Pwn Potentially Hundreds of Devices Using Images

Over 20,000 Vulnerable Microsoft Exchange Servers Exposed to Attacks

Linux Version of Qilin Ransomware Focuses on VMware ESXi

VMware Fixes Critical Cloud Director Auth Bypass Unpatched for 2 Weeks