cybersecurity

Hundreds of Cisco customers are vulnerable to new Chinese hacking campaign, researchers say

On Wednesday, Cisco revealed that a group of Chinese government-backed hackers is exploiting a vulnerability to target its enterprise customers who use some of the company’s most popular products. Cisco has not said how many of its customers have already been hacked, or may be running vulnerable systems. Now, security researchers say there are hundreds […]

Hundreds of Cisco customers are vulnerable to new Chinese hacking campaign, researchers say Read More »

Tech provider for NHS England confirms data breach

DXS International, a U.K.-based company that provides healthcare tech for England’s National Health Service (NHS), disclosed a cyberattack in a statement on Thursday. In a filing with the London Stock Exchange, the company said it experienced a “a security incident affecting its office servers,” discovered on December 14. The company said it “immediately” contained the

Tech provider for NHS England confirms data breach Read More »

Cisco says Chinese hackers are exploiting its customers with a new zero-day

On Wednesday, Cisco announced hackers are exploiting a critical vulnerability in some of its most popular products that allows the full takeover of affected devices. Worse, there are no patches available at this time. In a security advisory, Cisco said it discovered a hacking campaign on December 10 targeting Cisco AsyncOS software, and in particular

Cisco says Chinese hackers are exploiting its customers with a new zero-day Read More »

Hacking group says it’s extorting Pornhub after stealing users’ viewing data

The hacking group Scattered Lapsus$ Hunters, which includes members of a gang known as ShinyHunters, said it is attempting to extort porn site Pornhub, after claiming to have stolen personal information belonging to the website’s premium members.  On Friday, Pornhub confirmed it was among several companies affected by an earlier breach at the widely used

Hacking group says it’s extorting Pornhub after stealing users’ viewing data Read More »

Data breach at credit check giant 700Credit affects at least 5.6 million

At least 5.6 million people had their names, addresses, dates of birth, and Social Security numbers stolen in a data breach at 700Credit, a company that runs credit checks and identity verification services for auto dealerships across the United States. In a statement on its website, the Michigan-based 700Credit blamed the October data breach on

Data breach at credit check giant 700Credit affects at least 5.6 million Read More »

Home Depot exposed access to internal systems for a year, says researcher

A security researcher said Home Depot exposed access to its internal systems for a year after one of its employees published a private access token online, likely by mistake. The researcher found the exposed token and tried to privately alert Home Depot to its security lapse, but was ignored for several weeks.  The exposure is

Home Depot exposed access to internal systems for a year, says researcher Read More »

Flaw in photo booth maker’s website exposes customers’ pictures

A company that makes photo booths is exposing pictures and videos of its customers online thanks to a simple flaw in its website where the files are stored, according to a security researcher.   The researcher, who goes by Zeacer, alerted TechCrunch to the security issue in late November after reporting the vulnerability in October to

Flaw in photo booth maker’s website exposes customers’ pictures Read More »

Security flaws in Freedom Chat app exposed users’ phone numbers and PINs

Messaging app Freedom Chat has fixed a pair of security flaws: one that allowed a security researcher to guess registered users’ phone numbers, and another that exposed user-set PINs to others on the app. Freedom Chat, released in June, bills itself as a secure messaging app, and claims on its website that users’ phone numbers

Security flaws in Freedom Chat app exposed users’ phone numbers and PINs Read More »

CEO of South Korean retail giant Coupang resigns after massive data breach

Park Dae-jun has resigned as chief executive of South Korean retail giant Coupang after a data breach exposed the personal information of more than half of the country’s population. In a statement, Park apologized for the breach, citing a “deep sense of responsibility for the outbreak and the subsequent recovery process.” Coupang has replaced Park

CEO of South Korean retail giant Coupang resigns after massive data breach Read More »