Category Security

A network of 792 people has been arrested in Lagos, Nigeria’s most populated city, for their alleged involvement in a large-scale cryptocurrency fraud scheme and romance scam activity. The arrest was made public on December 16 by Ola Olukoyede, the…

Dec 18, 2024Ravie LakshmananCyber Fraud / Social engineering INTERPOL is calling for a linguistic shift that aims to put to an end to the term “pig butchering,” instead advocating for the use of “romance baiting” to refer to online scams…

The European Commission has launched a new investigation into whether TikTok contravened the Digital Services Act (DSA) by allowing foreign actors to interfere in recent Romanian elections. A second round of voting in the presidential election was cancelled by the…

Dec 18, 2024Ravie LakshmananCyber Attack / Vulnerability Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution. The issue, tracked as CVE-2024-53677, carries a CVSS score of…

Dec 18, 2024Ravie LakshmananData Breach / Privacy Meta Platforms, the parent company of Facebook, Instagram, WhatsApp, and Threads, has been fined €251 million (around $263 million) for a 2018 data breach that impacted millions of users in the bloc, in…

Third and fourth-party ecosystems have emerged as a major source of security risk, after new research highlighted that all (100%) of Europe’s biggest financial services companies suffered a breach via their suppliers in the past year. SecurityScorecard assessed the region’s…

Newly deployed and potentially unprotected APIs are being discovered in under half a minute, at extremely low cost to threat actors, according to new research from Wallarm. The security firm designed what it claims to be the first ever API…

Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. “Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks,” Morphisec researcher…

In episode 29 of The AI Fix, an AI company makes the bold step of urging us to “stop hiring humans”, Graham is wrong about GB AI, parents prepare their kids for the imminent Moxie-mageddon, Google releases Gemini 2.0, and…

New research from Check Point has revealed how cybercriminals are bypassing email security measures by using Google Calendar and Drawings to send seemingly legitimate invites containing malicious links. The study highlighted how cybercriminals are bypassing email security policies that previously…