Category Security

A growing number of US small businesses are taking preventative security measures, despite the share suffering a data or security breach surging to 81% last year, according to the Identity Theft Resource Center (ITRC). The non-profit collated publicly reported breaches…

Security experts have sounded another US election warning after claiming that the majority of US county websites could be copied to spread disinformation and steal info. Comparitech analyzed the websites and official contact email addresses for 3144 US counties to…

Oct 30, 2024The Hacker NewsVulnerability / Compliance Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria these frameworks demand,…

Apple has released security patches for 90 of its services and operating systems, fixing some critical vulnerabilities. This major security update, released on October 29, included all Apple operating systems (macOS, iOS, iPadOS, watchOS, tvOS, visionOS) as well as Apple services…

Cybersecurity researchers have uncovered an ongoing malvertising campaign that abuses Meta’s advertising platform and hijacked Facebook accounts to distribute information known as SYS01stealer. “The hackers behind the campaign use trusted brands to expand their reach,” Bitdefender Labs said in a…

A vulnerability in the LiteSpeed Cache plugin for WordPress, which has over 6 million active installations, has been discovered allowing unauthenticated visitors to gain administrator-level access by exploiting a security flaw in the plugin’s role simulation feature. This flaw permitted…

Oct 30, 2024Ravie LakshmananRansomware / Threat Intelligence Threat actors in North Korea have been implicated in a recent incident that deployed a known ransomware family called Play, underscoring their financial motivations. The activity, observed between May and September 2024, has…

A newly evolved form of malware called FakeCall, known for its advanced use of vishing (voice phishing), has been identified by cybersecurity researchers. Uncovered by Zimperium’s zLabs team, this malware variant exploits voice calls, often posing as legitimate institutions, to deceive…

Oct 30, 2024Ravie Lakshmanan Browser Security / Vulnerability A now-patched security flaw in the Opera web browser could have enabled a malicious extension to gain unauthorized, full access to private APIs. The attack, codenamed CrossBarking, could have made it possible…

The US Cybersecurity and Infrastructure Security Agency (CISA) has published its first ever international strategic plan, designed to boost international cooperation in combatting cyber threats to critical infrastructure. The plan acknowledges the complex and geographically dispersed nature of cyber risks,…