Security Affairs

JANUARY 27, 2025

The vulnerability is a privilege escalation vulnerability that impacts the Core Media framework. The Apple Core Media framework supports multimedia tasks like playback, recording, and manipulation of audio and video on iOS and macOS devices. “A malicious application may be able to elevate privileges.

Spyware 123

Spyware Surveillance Media Hacking 123

Security Affairs

OCTOBER 22, 2024

Google researchers reported that the vulnerability explained that the issue resides in a driver that provides hardware acceleration for media functions like JPEG decoding and image scaling. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Samsung)

Firmware 145

Firmware Mobile Spyware Media 145

Security Affairs

NOVEMBER 5, 2024

Canadian authorities arrested a suspect linked to multiple hacks following a breach of cloud data platform Snowflake earlier this year. “Canadian authorities have arrested a man suspected of being behind a string of hacks involving as many as 165 customers of Snowflake Inc., Charges remain undisclosed.

Unstructured Data 124

Unstructured Data Media Cybercrime Hacking 124

Security Affairs

NOVEMBER 8, 2024

Law enforcement warns that securely stored iPhones awaiting forensic examination are mysteriously rebooting, making them harder to unlock, reported 404 Media. 404 Media obtained the document from a mobile forensics source and verified it with another source. . ” reported 404 Media.

Media 123

Media Mobile Passwords Hacking 123

Security Affairs

JANUARY 2, 2025

Some blocked Russian media outlets are RIA Novosti , NTV , Rossiya 1 , and Rossiyskaya Gazeta. “ Restrictions apply to several Russian state-run or controlled media outlets, including RIA Novosti, Izvestia, Rossiya 1, Channel One, NTV, and Rossiyskaya Gazeta.” ” reported the Kyivindependent. ” said Zakharova.

Media 129

Media Hacking Information Security 129

Security Affairs

MAY 21, 2022

The media company Nikkei has disclosed a ransomware attack and revealed that the incident might have impacted customer data. The Japanese-based media company Nikkey is focused on the business and financial industry, it is the world’s largest financial newspaper. SecurityAffairs – hacking, Nikkei). Pierluigi Paganini.

Media 145

Media Ransomware Data breaches Hacking 145

Security Affairs

MAY 12, 2025

Fake AI tools spread via social media and scam websites like “Dream Machine” or “CapCut” bait users into uploading media. Users are tricked into downloading a malicious ZIP (“VideoDreamAI.zip”) after uploading media. It contains a fake video file (“Video Dream MachineAI.mp4.exe”)

Malware 114

Malware Media Cybercrime Scams 114

Security Affairs

APRIL 8, 2025

Its value stems from WhatsApp’s massive user base and the potential for covert access to private chats, media, and device-level control. The hacking campaign targeted 90 users and was disrupted in December, WhatsApp immediately alerted targeted users of a possible compromise of their devices.

Spyware 119

Spyware Media Surveillance Hacking 119

Security Affairs

NOVEMBER 6, 2024

Security researcher Rick de Jager demonstrated the vulner ability, called RISK:STATION by cybersecurity firm Midnight Blue, at the Pwn2Own Ireland 2024 hacking contest. Midnight Blue took 3rd at Pwn2Own Ireland 2024 , the team demonstrated five zero-day flaws in routers, printers, security cameras, and NAS devices.

Firmware 127

Firmware Manufacturing Hacking Media 127

Krebs on Security

JULY 18, 2023

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] LeakedSource also tried to pass itself off as a legal, legitimate business that was marketing to security firms and professionals. In 2019, a Canadian company called Defiant Tech Inc.

Hacking 240

Hacking Accountability Data breaches Marketing 240

Security Affairs

APRIL 26, 2025

. “New court documents reveal security cameras captured Bowie wandering around the hospital on August 6, where he tried to get into multiple offices until he stumbled upon two computers. ” reported the media outlet KOCO 5 News. One of those computers was for employees only.”

Malware 145

Malware Cybersecurity Healthcare Media 145

Security Affairs

NOVEMBER 30, 2024

Some of the malicious apps were promoted through deceptive advertising on social media. “ SpyLoan apps exploit official app stores like Google Play, deceptive branding, and social media ads to appear credible. The researchers reported the apps to Google who notified the developers that their apps violate Google Play policies.

Social Engineering 132

Social Engineering Media Mobile Scams 132

Security Affairs

APRIL 7, 2025

OPERATIONAL MANUALS AND DECEPTION STRATEGIES As further evidence of the increasing professionalization of this illicit sector, Meridian Group reports the publication of informational content designed to guide the proper use of EDR services, presented as a detailed guide on how to correctly complete and unlawfully submit the requests.

Cybercrime 140

Cybercrime Social Engineering Accountability Government 140

Security Affairs

OCTOBER 7, 2024

Russian state media VGTRK faced a major cyberattack, which a Ukrainian source claimed was conducted by Kyiv’s hackers. A Ukrainian government source told Reuters that Kyiv’s hackers are behind the cyber attack that disrupted operations at the Russian state media company VGTRK on Putin’s birthday.

Media 138

Media Cyber Attacks Backups Government 138

Security Affairs

OCTOBER 16, 2024

“All information related to the cybercriminal has already been handed over to the authorities. Among them, it was possible to identify tax registration, email addresses, registered domains, IP addresses, social media accounts, telephone number and city. The man used of the same email and phrases across social media and forums.

Data breaches 130

Data breaches Media Cybercrime Accountability 130

Security Affairs

OCTOBER 13, 2024

The Mexican Drug Cartels Want You Casio: Notice of Partial Service Outage and Information Leak Caused by Ransomware Attack He founded a “startup” to access sanctioned Russian websites: the cyber police of Khmelnytskyi region exposed the hacker Hacked ‘AI Girlfriend’ Data Shows Prompts Describing Child Sexual Abuse Malware Over 300,000!

Data breaches 119

Data breaches Cryptocurrency Cybercrime Artificial Intelligence 119

SecureList

JANUARY 18, 2023

The media routinely report incidents and leaks of data that end up publicly accessible on the dark web. We often see people use work email addresses to register with third-party sites and services, which can be hacked and exposed to a data leak, putting the security of the company that owns the email at risk.

Media 140

Media Social Engineering Ransomware Hacking 140

Security Affairs

OCTOBER 11, 2024

Rather than using advanced hacking techniques, they exploited systems with default credentials to compromise target networks. The group used the chatbot to receive support in Android malware development and to create a scraper for the social media platform Instagram.

Malware 139

Malware Social Engineering Engineering Hacking 139

Security Affairs

NOVEMBER 1, 2024

LightSpy can steal files from multiple popular applications like Telegram, QQ, and WeChat, as well as personal documents and media stored on the device. Destructive plugin: capable of deleting media files from the device PushMessage 1.0.0 Destructive plugin: capable of deleting media files from the device PushMessage 1.0.0

Spyware 143

Spyware Media Malware Hacking 143

Security Affairs

APRIL 17, 2025

Processing an audio stream in a maliciously crafted media file may result in code execution. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, iOS users )

Surveillance 121

Surveillance Media Authentication Hacking 121

Security Affairs

FEBRUARY 3, 2025

“In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.”

Media 118

Media Authentication Hacking Accountability 118

Security Affairs

OCTOBER 29, 2024

The two infostealers allowed operators to harvest usernames, passwords, contact info, and crypto-wallets from victims, the threat actors sold this data to criminals for financial theft and hacking. Use a password manager : Simplifies managing strong, unique passwords across accounts.

Identity Theft 128

Identity Theft Passwords Malware Banking 128

Security Affairs

APRIL 24, 2025

The feature blocks chat exports, auto-media downloads, and the use of messages in AI features, ensuring conversations stay private and within the app. “When the setting is on, you can block others from exporting chats, auto-downloading media to their phone, and using messages for AI features. .”

Media 95

Media Encryption Hacking Accountability 95

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 137

Hacking Government Marketing Spyware 137

Security Affairs

NOVEMBER 10, 2024

” reads the statement “Their attacks mainly consist of hacking of civilian targets or distributed denial of service (DDoS) attacks targeting government agencies’ websites.” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, South Korea)

DDOS 116

DDOS Government Cyber threats Hacking 116

Security Affairs

APRIL 16, 2025

cybersecurity agency told media [ 1 , 2 ]. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,MITRE) . ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,MITRE)

Government 134

Government Risk Cybersecurity Media 134

Security Affairs

MARCH 3, 2025

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming. reads the advisory.

Hacking 71

Hacking Spyware Technology Surveillance 71

Security Affairs

OCTOBER 20, 2024

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

Data breaches 121

Data breaches Cybercrime Cyber Insurance Marketing 121

Security Affairs

FEBRUARY 2, 2025

A joint law enforcement operation led to the seizure of 39 domains tied to a Pakistan-based HeartSender cybercrime group (aka Saim Raza and Manipulators Team) known for selling hacking and fraud tools. Employees inadvertently exposed their ties through social media.

Cybercrime 112

Cybercrime Advertising Phishing Hacking 112

Security Affairs

DECEMBER 9, 2023

Threat actors hacked a small water utility in Ireland and interrupted the water supply for two days. According to the Irish media , the residents of the Binghamstown/Drum were without their water supply on Thursday and Friday. ” Mr Walsh announced that the water facility is currently improving their security systems.

Hacking 145

Hacking Firewall Cyber Attacks Media 145

Security Affairs

JANUARY 4, 2024

The X account of cybersecurity giant Mandiant was hacked, attackers used it to impersonate the Phantom crypto wallet and push a cryptocurrency scam. Crooks hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. “Sorry, change password please.”

Cryptocurrency 136

Cryptocurrency Scams Accountability Hacking 136

Security Affairs

NOVEMBER 3, 2024

Some of these clusters specifically target Axentra media servers, Ruckus wireless routers and Zyxel VPN appliances. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Quad7 botnet) ” concludes Microsoft.

Passwords 136

Passwords Wireless VPN Accountability 136

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. In December 2019, German media reported that hackers suspected to be members of the Vietnam-linked APT Ocean Lotus ( APT32 ) group breached the networks of the car manufacturers BMW and Hyundai.

Hacking 144

Hacking Ransomware Data breaches Manufacturing 144

Security Affairs

MARCH 5, 2022

Anonymous announced to have hacked more than 2,500 websites linked to the Russian and Belarusian governments, state-owned media outlets spreading disinformation, Russian private organizations, banks, hospitals, airports. SecurityAffairs – hacking, Anonymous). Follow me on Twitter: @securityaffairs and Facebook.

Hacking 145

Hacking Government Banking Media 145

Troy Hunt

MARCH 19, 2020

Recently, a collection of data allegedly taken from the [your service] was sent to me and I believe there’s a high likelihood your site was indeed hacked. The data consists of an extensive number of records containing personal information. Could someone responsible for information security please get in touch with me.

Data breaches 301

Data breaches Media Hacking Passwords 301

Security Affairs

OCTOBER 4, 2024

Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, iOS ) Apple is not aware of attack in the wild exploiting the above vulnerabilities.

Passwords 135

Passwords Media Hacking Mobile 135

Security Affairs

MAY 1, 2025

The financially-motivated group targeted organizations in the media, tourism, finance, insurance, manufacturing, energy, telecommunications, biotechnology and retail sectors. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,malware)

Malware 89

Malware Phishing Telecommunications Retail 89