Security Affairs

APRIL 7, 2025

Cybercriminals exploit compromised accounts for EDR-as-a-Service (Emergency Data Requests – EDR), targeting major platforms According to a detailed analysis conducted by Meridian Group, an increasingly complex and structured phenomenon, commonly referred to as EDR-as-a-Service, is taking hold in the cybersecurity landscape.

Cybercrime 140

Cybercrime Social Engineering Accountability Government 140

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. They deceive you into divulging confidential information so they can steal your money. Document disposal Shred sensitive documents.

Consumer Protection 99

Consumer Protection Identity Theft Scams Social Engineering 99

Security Affairs

NOVEMBER 3, 2024

The operators maintain the botnet to launch distributed brute-force attacks on VPNs, Telnet, SSH, and Microsoft 365 accounts. Some of these clusters specifically target Axentra media servers, Ruckus wireless routers and Zyxel VPN appliances. These routers are used to relay brute-force attacks on Microsoft 365 accounts.

Passwords 136

Passwords Wireless VPN Accountability 136

Security Affairs

OCTOBER 16, 2024

“All information related to the cybercriminal has already been handed over to the authorities. Among them, it was possible to identify tax registration, email addresses, registered domains, IP addresses, social media accounts, telephone number and city. The man used of the same email and phrases across social media and forums.

Data breaches 130

Data breaches Media Cybercrime Accountability 130

Security Affairs

OCTOBER 29, 2024

The cybersecurity firm’s recommendations for malware victims are: Consult an expert : For thorough malware removal and system security, seek professional help if needed. Change passwords : After malware removal, update passwords for key accounts (email, banking, work, social media) and enable two-factor authentication.

Identity Theft 128

Identity Theft Malware Passwords Banking 128

Security Affairs

DECEMBER 4, 2020

Security researchers have uncovered a new technique to inject a software skimmer onto checkout pages, the malware hides in social media buttons. Security experts at Sansec have detailed a new technique used by crooks to inject a software skimmer into checkout pages. ” Pierluigi Paganini.

Media 144

Media Software Malware Social Engineering 144

Malwarebytes

NOVEMBER 12, 2024

All the company’s social media accounts haven’t been updated since 2023 at the latest. Only share the personal information you absolutely have to provide with the genetic testing company. Lie if you must and create a separate free email account so the information can’t be tied to your main account.

Insurance 145

Insurance Accountability Risk Data breaches 145

Security Affairs

JANUARY 4, 2024

The X account of cybersecurity giant Mandiant was hacked, attackers used it to impersonate the Phantom crypto wallet and push a cryptocurrency scam. Crooks hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. “Sorry, change password please.”

Cryptocurrency 136

Cryptocurrency Scams Accountability Hacking 136

Security Affairs

JULY 31, 2024

BingoMod is a new Android malware that can wipe devices after stealing money from the victims’ bank accounts. Researchers at Cleafy discovered a new Android malware, called ‘BingoMod,’ that can wipe devices after successfully stealing money from the victims’ bank accounts. ” continues the report.

Banking 143

Banking Accountability Malware Mobile 143

Security Affairs

AUGUST 9, 2021

Experts spotted a new Android trojan, dubbed FlyTrap, that compromised Facebook accounts of over 10,000 users in at least 144 countries since March 2021. Zimperium’s zLabs researchers spotted a new Android trojan, dubbed FlyTrap , that already compromised Facebook accounts of over 10,000 users in at least 144 countries since March 2021.

Accountability 139

Accountability Social Engineering Malware Media 139

SecureList

JANUARY 18, 2023

The media routinely report incidents and leaks of data that end up publicly accessible on the dark web. Media blackmail: businesses to learn they were hacked from hackers’ public posts with a countdown to publication. These add up to 144 million annually. This sets a pace for businesses, which are forced to adapt.

Media 140

Media Social Engineering Ransomware Hacking 140

Security Affairs

DECEMBER 6, 2024

Impacts vary depending on users’ browsers, cookies, and third-party account activity. ” The potential exposed data includes IP addresses, third-party identifiers/cookies, and, in some cases, information about a patient’s treatment or provider if included in a URL or button text. added Atrium Health.

Data breaches 114

Data breaches Identity Theft Accountability Technology 114

Security Affairs

FEBRUARY 3, 2025

“In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.”

Media 118

Media Authentication Hacking Accountability 118

Security Affairs

FEBRUARY 3, 2024

A vulnerability impacting the decentralized social network Mastodon can be exploited by threat actors to impersonate and take over any account. A security flaw, tracked as CVE-2024-23832 (CVSS score 9.4), in the decentralized social network Mastodon can be exploited to impersonate and take over any account.

Accountability 140

Accountability Media Hacking Information Security 140

Zero Day

JUNE 6, 2025

Collectively, they could easily put affected customers at risk for account takeovers and identity theft. million former account holders. This leak reportedly included full names, dates of birth email addresses, mailing addresses, phone numbers, social security numbers, and AT&T account numbers.

Password Management 128

Password Management Passwords Artificial Intelligence Software 128

Security Affairs

JULY 24, 2022

million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform. The bug exists due to the proccess of authorization used in the Android Client of Twitter, specifically in the procces of checking the duplication of a Twitter account.” Threat actor leaked data of 5.4

Accountability 144

Accountability Advertising Authentication Hacking 144

Security Affairs

JULY 27, 2022

Researchers uncovered an ongoing operation, codenamed DUCKTAIL that targets Facebook Business and Ad Accounts. Researchers from WithSecure (formerly F-Secure Business) have discovered an ongoing operation, named DUCKTAIL, that targets individuals and organizations that operate on Facebook’s Business and Ads platform.

Accountability 135

Accountability Malware Marketing Media 135

Security Affairs

SEPTEMBER 18, 2023

Software development company Retool was the victim of a smishing attack that resulted in the compromise of 27 accounts of its cloud customers. Software development company Retool revealed that 27 accounts of its cloud customers were compromised as a result of an SMS-based social engineering attack.

Accountability 139

Accountability Social Engineering Authentication VPN 139

Security Affairs

JANUARY 11, 2024

The X account of cybersecurity firm Mandiant was likely hacked through a brute-force password attack, the company revealed. Last week, threat actors hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. and “Check bookmarks when you get account back.”

Accountability 139

Accountability Hacking Cryptocurrency Cybersecurity 139

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 129

Banking Accountability Mobile Cryptocurrency 129

Daniel Miessler

MAY 14, 2020

Good passwords are long, random, and unique to each account, which means it’s impossible for a human to manage them on their own. Pick either 1Password or LastPass , go through all your accounts, and for each one…reset the password to something created by (and stored in) your password manager. Automatic Logins Using Lastpass.

Risk 345

Risk Password Management Passwords Accountability 345

Security Affairs

OCTOBER 11, 2024

These scripts sometimes leveraged publicly available pentesting tools and security services to programmatically find vulnerable infrastructure.” The group used the chatbot to receive support in Android malware development and to create a scraper for the social media platform Instagram. ” reads the OpenAI’s report.

Malware 139

Malware Social Engineering Engineering Hacking 139

Security Affairs

APRIL 24, 2025

The feature blocks chat exports, auto-media downloads, and the use of messages in AI features, ensuring conversations stay private and within the app. “When the setting is on, you can block others from exporting chats, auto-downloading media to their phone, and using messages for AI features. .”

Media 95

Media Encryption Hacking Accountability 95

Security Affairs

FEBRUARY 2, 2025

This is the latest example of why spyware companies must be held accountable for their unlawful actions. There are no official reports about the spyware campaign, but media reports that threat actors may have used a specially crafted PDF file as bait. In December, WhatsApp won a legal case against NSO Group in a U.S.

Spyware 112

Spyware Hacking Surveillance Malware 112

Security Affairs

JANUARY 10, 2024

Threat actors hacked the X account of the US Securities and Exchange Commission (SEC) and used it to publish the fake news on the Bitcoin ETF approval. Hackers hijacked the X account of the US Securities and Exchange Commission (SEC) and used it to publish fake news on the Bitcoin ETF approval. ” Gensler wrote.

Accountability 132

Accountability Hacking Cryptocurrency Surveillance 132

Security Affairs

JUNE 6, 2025

. “Maxim Alexandrovich Rudometov (Максим Александрович Рудомётов), born in 1999 in the Luhansk region of Ukraine, developed and has sold “information stealer” malware known as RedLine.” Use a password manager : Simplifies managing strong, unique passwords across accounts. ” continues the announcement.

Malware 88

Malware Passwords Identity Theft Accountability 88

Krebs on Security

OCTOBER 5, 2022

The fabricated LinkedIn identities — which pair AI-generated profile photos with text lifted from legitimate accounts — are creating major headaches for corporate HR departments and for those managing invite-only LinkedIn groups. Another “swarm” of LinkedIn bot accounts flagged by Taylor’s group.

Accountability 316

Accountability Scams Artificial Intelligence Cryptocurrency 316

Security Affairs

MARCH 25, 2025

The Record Media first reported the news of a cyber attack on Ukraines national railway operator Ukrzaliznytsia that disrupted online ticket services, causing long lines at Kyivs station. Ukrzaliznytsia is investigating the attack and restoring the affected systems with the help of the Cyber Department of the Security Service of Ukraine.

Backups 121

Backups Cyber Attacks Media Hacking 121

Security Affairs

APRIL 25, 2023

Google announced that its Authenticator app for Android and iOS now supports Google Account synchronization. Google announced that its Google Authenticator app for both iOS and Android now supports Google Account synchronization that allows to safely backup users one-time codes to their Google Account.

Authentication 98

Authentication Accountability Backups Education 98

Security Boulevard

NOVEMBER 24, 2024

In Episode 356, Tom and Kevin discuss the increasing role of deepfake technology in bypassing biometric checks, accounting for 24 percent of fraud attempts. The conversation shifts to social media platforms Twitter, Blue […] The post Deepfake Fraud, Data Brokers Tracking Military Personnel appeared first on Shared Security Podcast.

Media 64

Media Technology Accountability Surveillance 64

Daniel Miessler

MAY 8, 2020

Use a password manager to make and store good passwords that are different for every account/device. The second most important thing to do is make sure you keep all your computers and devices updated with security fixes. Most peoples’ highest risk systems are their primary email account and their mobile phone account.

Passwords 255

Passwords DNS Accountability IoT 255

Security Affairs

OCTOBER 13, 2024

CISA adds Windows and Qualcomm bugs to its Known Exploited Vulnerabilities catalog Three new Ivanti CSA zero-day actively exploited in attacks Ukrainian national pleads guilty in U.S.

Data breaches 119

Data breaches Cryptocurrency Cybercrime Artificial Intelligence 119

Krebs on Security

APRIL 20, 2023

In many cases, the phony profiles spoofed chief information security officers at major corporations , and some attracted quite a few connections before their accounts were terminated. We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. Microsoft Corp.

Malware 331

Malware Software Technology Accountability 331

Security Affairs

MAY 1, 2023

The IT giant also announced it has banned 173k developer accounts and prevented over $2 billion in fraudulent and abusive transactions. ” The company explained that in 2022, the App Security Improvements program helped developers to address approximately 500K security weaknesses affecting approximately 300K apps.

Accountability 98

Accountability Education Media Hacking 98

Security Affairs

FEBRUARY 2, 2025

Those payments would instead be redirected to a financial account the perpetrators controlled, resulting in significant losses to victims.” Employees inadvertently exposed their ties through social media. ” reads the press release published by DoJ.

Cybercrime 112

Cybercrime Advertising Phishing Hacking 112

Security Affairs

NOVEMBER 7, 2024

The latest campaign mirrors an August 2024 macOS malware attack and uses notarized malware signed with hijacked Apple developer accounts. BlueNoroff used Namecheap and hosting providers like Quickpacket, Routerhosting, and Hostwinds to set up crypto-themed infrastructure. ” concludes the report.

Malware 126

Malware Risk Architecture Cryptocurrency 126

Security Affairs

FEBRUARY 5, 2025

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. reads the advisory.

Media 78

Media Authentication Hacking Accountability 78