cybersecurity

Citizen Lab director warns cyber industry about US authoritarian descent

The director of Citizen Lab, one of the most prominent organizations investigating government spyware abuses, is sounding the alarm to the cybersecurity community and asking them to step up and join the fight against authoritarianism.  On Wednesday, Ron Deibert will deliver a keynote at the Black Hat cybersecurity conference in Las Vegas, one of the […]

Citizen Lab director warns cyber industry about US authoritarian descent Read More »

Google says hackers stole its customers’ data in a breach of its Salesforce database

Google has confirmed that some customers’ information has been stolen in a recent breach of one of its databases. In a blog post late on Tuesday, Google’s Threat Intelligence Group said one of its Salesforce database systems, used to store contact information and related notes for small and medium businesses, was breached by a hacking

Google says hackers stole its customers’ data in a breach of its Salesforce database Read More »

Hacker used a voice phishing attack to steal Cisco customers’ personal information

A cybercriminal tricked a Cisco representative into granting them access to steal the personal information of Cisco.com users, the company said on Tuesday. Cisco said it discovered the breach on July 24, blaming the incident on a voice phishing or “vishing” call. The hackers accessed and exported “a subset of basic profile information” from the

Hacker used a voice phishing attack to steal Cisco customers’ personal information Read More »

SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks

Enterprise security company SonicWall is urging its customers to disable a core feature of its most recent line-up of firewall devices after security researchers reported an uptick in ransomware incidents targeting SonicWall customers.  In a statement this week, SonicWall said it had observed a “notable increase” of security incidents targeting its Generation 7 firewalls where

SonicWall urges customers to disable SSLVPN amid reports of ransomware attacks Read More »

Google says its AI-based bug hunter found 20 security vulnerabilities

Google’s AI-powered bug hunter has just reported its first batch of security vulnerabilities.  Heather Adkins, Google’s vice president of security, announced Monday that its LLM-based vulnerability researcher Big Sleep found and reported 20 flaws in various popular open source software. Adkins said that Big Sleep, which is developed by the company’s AI department DeepMind as

Google says its AI-based bug hunter found 20 security vulnerabilities Read More »

North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike

Researchers at security giant CrowdStrike say they have seen hundreds of cases where North Koreans posing as remote IT workers have infiltrated companies to generate money for the regime, marking a sharp increase over previous years. Per CrowdStrike’s latest threat hunting report, the company has identified over 320 incidents over the past 12 months, up

North Korean spies posing as remote workers have infiltrated hundreds of companies, says CrowdStrike Read More »

Sex toy maker Lovense threatens legal action after fixing security flaws that exposed users’ data

Lovense, a maker of internet-connected sex toys, has confirmed it has fixed a pair of security vulnerabilities that exposed users’ private email addresses and allowed attackers to remotely take over any user’s account. While the company said the bugs were “fully resolved,” its chief executive is now considering taking legal action following the disclosure. In

Sex toy maker Lovense threatens legal action after fixing security flaws that exposed users’ data Read More »

Authorities seize BlackSuit ransomware gang’s servers

German prosecutors say a joint U.S.-European operation has seized infrastructure belonging to the BlackSuit ransomware gang, a notorious hacking group blamed for several major cyberattacks in recent years. In a new statement this week, officials in Germany said they had seized the gang’s servers and systems as part of an operation on July 24. The

Authorities seize BlackSuit ransomware gang’s servers Read More »

Hackers stole Social Security numbers during Allianz Life cyberattack

Hackers who breached U.S. insurance giant Allianz Life earlier this month stole reams of customer Social Security numbers, according to notifications filed with several U.S. states and seen by TechCrunch. Allianz Life disclosed the July 16 breach this past weekend, confirming to TechCrunch the unidentified hackers stole the personally identifiable information belonging to the “majority”

Hackers stole Social Security numbers during Allianz Life cyberattack Read More »

Minnesota activates National Guard as cyberattack on Saint Paul disrupts public services

Minnesota Gov. Tim Walz has activated the state’s National Guard following a cyberattack on the state’s capital, Saint Paul. City officials have not yet disclosed the nature of the cyberattack, but the July 25 breach continues to disrupt city operations and some public services.  Saint Paul is one of the largest cities in the U.S.

Minnesota activates National Guard as cyberattack on Saint Paul disrupts public services Read More »