Security

Australia bans government use of Kaspersky software due to ‘unacceptable security risk’

Australia has become the latest country to ban government officials from using software made by Russian cybersecurity firm Kaspersky, arguing that the software poses an “unacceptable security risk.”  Australia’s Department of Home Affairs last week issued a directive that prohibits government agencies from installing Kaspersky products or web services on official systems and devices, citing […]

Australia bans government use of Kaspersky software due to ‘unacceptable security risk’ Read More »

Researchers accuse North Korea of $1.4 billion Bybit crypto heist

On Friday, hackers stole around $1.4 billion in Ethereum cryptocurrency from crypto exchange Bybit, in what is the largest crypto heist of all time. After the hack, several blockchain monitoring firms, as well as the well-known crypto investigator ZachXBT, have all pointed to the North Korean government hacking group known as Lazarus Group as the

Researchers accuse North Korea of $1.4 billion Bybit crypto heist Read More »

A single default password exposes access to dozens of apartment buildings

A security researcher says the default password shipped in a widely used door access control system allows anyone to easily and remotely access door locks and elevator controls in dozens of buildings across the U.S. and Canada. Hirsch, the company that now owns the Enterphone MESH door access system, won’t fix the vulnerability, saying that

A single default password exposes access to dozens of apartment buildings Read More »

Apple pulls iCloud end-to-end encryption feature for UK users after government demanded backdoor

Apple confirmed Friday that it “can no longer” offer a security feature that allows users in the United Kingdom to encrypt their iCloud data.  In a statement provided to TechCrunch, Apple spokesperson Fred Sainz said the company’s Advanced Data Protection feature will no longer be available to new users and current U.K. users “will eventually

Apple pulls iCloud end-to-end encryption feature for UK users after government demanded backdoor Read More »

A huge trove of leaked Black Basta chat logs expose the ransomware gang’s key members and victims

A trove of chat logs allegedly belonging to the Black Basta ransomware group has leaked online, exposing key members of the prolific Russia-linked gang.  The chatlogs, which include over 200,000 messages spanning from September 18, 2023, to September 28, 2024, were shared with threat intelligence company Prodaft by a leaker. The cybersecurity firm says the

A huge trove of leaked Black Basta chat logs expose the ransomware gang’s key members and victims Read More »

Your Android phone could have stalkerware. Here’s how to remove it

Consumer-grade spyware apps that covertly and continually monitor your private messages, photos, phone calls and real-time location are an ongoing problem for Android users. This guide can help you identify and remove common surveillance apps from your Android phone, including TheTruthSpy, Cocospy and Spyic, among others. Consumer-grade spyware apps are frequently sold under the guise

Your Android phone could have stalkerware. Here’s how to remove it Read More »

Hacked, leaked, exposed: Why you should never use stalkerware apps

There is a whole shady industry for people who want to monitor and spy on their families. Multiple app makers market their software — sometimes referred to as stalkerware — to jealous partners who can use these apps to access their victims’ phones remotely.  Yet, despite how sensitive this data is, an increasing number of

Hacked, leaked, exposed: Why you should never use stalkerware apps Read More »

Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people

A security vulnerability in a pair of phone-monitoring apps is exposing the personal data of millions of people who have the apps unwittingly installed on their devices, according to a security researcher who found the flaw.  The bug allows anyone to access the personal data — messages, photos, call logs, and more — exfiltrated from

Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people Read More »

California privacy regulator seeks to fine Florida data broker after huge breach of Social Security numbers

California’s privacy regulator is asking a court to fine a data broker that lost hundreds of millions of Social Security numbers in one of last year’s biggest data breaches. The California Privacy Protection Agency (CPPA), which enforces California’s state rules on data protection and privacy rights, known as CCPA, said Thursday that it is seeking

California privacy regulator seeks to fine Florida data broker after huge breach of Social Security numbers Read More »

UK healthcare giant HCRG confirms hack after ransomware gang claims theft of sensitive data

U.K. healthcare giant HCRG Care Group has confirmed it’s investigating a cybersecurity incident after a ransomware gang claimed to have breached the company’s systems to steal troves of sensitive data.  HCRG Care Group is one of the largest independent providers of community health and care services in the United Kingdom. The organization, previously known as

UK healthcare giant HCRG confirms hack after ransomware gang claims theft of sensitive data Read More »