Tag Archive

Updates for QNAP’s network-attached storage (NAS) systems have been released to address a critical security flaw that might allow arbitrary code injection. Customers of QNAP are being advised to update their QTS and QuTS firmware in order to fix a …

Increasingly, organized crime organizations are operating as businesses rather than criminal organizations, advertising jobs on the dark web with a number of advantages for members. A recent Kaspersky study found that 61% of job ads posted by hacking and APT …

A cyber attack that targeted JD Sports Fashion Plc (“JD Sports”) led to unauthorized access to a system that held customer information for some online orders done between November 2018 and October 2020.  The JD, Size?, Millets, Blacks, Scotts, and …

A former neonatologist received an 8-year prison sentence and was mandated to pay over $25,000 in compensation, along with a $100,000 fine. Ronald Craig Ilg, age 56, received an 8-year sentence for arranging assaults and kidnappings through hitmen hired on …

Recently the cybersecurity experts at Dr. Web antivirus reported that over 20 million devices have recently downloaded a highly successful new category of activity-tracking apps from the Google Play Store. Among the features offered by these applications are pedometers, the …

The Internet Systems Consortium (ISC) released security advisories on January 25, 2023, to address flaws in the DNS software suite BIND.  A denial of service could occur if these vulnerabilities are exploited. The flaws that were resolved have the potential …

An investigation by cyber security experts at Palo Alto Network’s Unit 42 team recently revealed that a variation of PlugX malware has the ability to conceal harmful files on USB drives and subsequently infect Windows systems upon connection. A new …

A new strain of ransomware named Mimic has been uncovered recently by security experts at Trend Micro in June 2022. Mimic takes advantage of the APIs of the ‘Everything’ a file search tool for Windows to search for files to …

In the latter half of 2022, a significant number of cyber attacks utilizing a remote code execution vulnerability in Realtek Jungle SDK were reported. These attacks, numbering 134 million, aimed to compromise smart devices. The vulnerability in question grants unauthorized …

Akamai researchers have made available a demonstration exploit code for a significant vulnerability in Windows CryptoAPI that was identified by the National Security Agency (NSA) and the United Kingdom’s National Cyber Security Centre (NCSC). The exploit allows for the forging …