Kevin Mitnick, former most wanted hacker, dies at 59
Kevin Mitnick, who became one of the world's most wanted hackers in the 1990s, has died at the age of 59 from pancreatic cancer. Mitnick also made a name for himself as a security consultant, author and speaker.
"Much of his life reads like a fiction story. The word that most of us who knew him ... Read more
Chinese email hack only detectable with most expensive Microsoft subscription
Among Microsoft's cloud computing services are detection tools that could have detected the Chinese email hack. The right tools are only part of the most comprehensive and most expensive subscription. In the US, they want to see things changed.
The Biden administration wonders if Microsoft shou... Read more
‘Chinese email hack affects Western European governments’
Microsoft revealed this week that Chinese hackers were conducting spying operations on U.S. organizations. The leaked information would include email messages from Commerce Secretary Gina Raimondo, who plays a crucial role in export restrictions to China surrounding computer chips.
The email hac... Read more
Hackers spread malware in Windows kernel through open-source software
Hackers use open-source software to sneak in Windows malware and bypass Microsoft's driver restrictions. In addition, they are penetrating the most critical layer of the operating system: the Windows kernel.
Hackers are abusing two software tools from GitHub to spread malware on Windows devices... Read more
MSI leak undermines UEFI/BIOS security, what can you do?
April's MSI hack led to the distribution of Intel Boot Guard keys on the dark web. The leak allows malicious actors to create UEFI/BIOS firmware that gets past a key security layer on countless PCs.
A ransomware attack led to the loss of 1.5 terabytes of data at MSI in April, which the attackers... Read more
Microsoft Bing penetrated through misconfiguration in Azure Active Directory
Researchers from security specialist Wiz Research penetrated the backend of Microsoft Bing through a misconfiguration in Azure App Services and Azure Functions. This allowed them to manipulate search results and add malicious code.
The security specialists discovered the so-called BingBang vulne... Read more
Hackers steal sensitive data from US federal police
The US Marshals Service (USMS) has been hit by a ransomware attack. Among the affected systems is a computer system containing sensitive information for police operations, such as personal information about targets and ongoing investigations.
The police organization, which takes care of federal ... Read more
Hackers sell data center login credentials of large multinationals
Cybercriminals put stolen login data from large companies up for sale in late January. The data came from a number of the companies' Asian data centers.
This was discovered by security specialist Resecurity in an investigation ongoing since September 2021. According to the investigation, severa... Read more
Uber faces yet another data breach
Uber's data has hit the streets once more. Employee information became public after an attack on Teqtivity, one of the company's software vendors.
Cybercriminals managed to penetrate Teqtivity's AWS backup environment, BleepingComputer reports. The IT asset management provider has since confirme... Read more
Hackers hijack Linux devices using PRoot-isolated file systems
Hackers are using BYOF (bring your own filesystem) attacks to abuse the open-source Linux PRoot utility and develop a consistent source of harmful tools compatible with Linux devices.
A BYOF attack involves a threat actor building a malicious file system on their devices that includes a typical ... Read more