GoTo Says Hackers Stole Customer Data and Encryption Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoTo, formerly LogMeIn Inc., has acknowledged that a threat actor stole an encryption key that gave access to a portion of the backup files that were encrypted. Information about certain customers was stolen from a third-party cloud storage service that LastPass …

FBI: Lazarus Group Is Responsible For $100 Million Harmony Crypto Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been officially confirmed by the Federal Bureau of Investigation (FBI) that the cyber-attacks on the cryptocurrency exchange, Harmony Horizon, which resulted in the theft of $100 million worth of Ethereum, were orchestrated by state-sponsored hacking groups, Lazarus and …

Experian Glitch Exposing Credit Files Lasted 47 Days

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, …

Warning! Apple Fixes Actively Exploited iOS Zero-Day on iPhones & iPads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an effort to ensure the safety and security of its customers, Apple has taken the necessary steps to address a potentially dangerous vulnerability that has been marked as “Zero-Day” by releasing updates for older iPhone and iPad models. The …

Hackers Use Shapeshifting Tactics to Steal Information Stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Cyble Research and Intelligence Labs (CRIL) discovered Aurora Stealer malware imitating popular applications on phishing sites to infect as many users as possible. To target a variety of well-known applications, the threat actors behind this attack are actively changing and …

Twitter Engineers Can Tweet as any Account Using ‘GodMode’ Claims Whistleblower

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to The Washington Post, a new Twitter whistleblower has come forward, confirming the alarming evidence from last year regarding the dismal status of the company’s privacy protections and stating that the company continues to break the law under new owner …

NSA Published IPv6 Security Guidance – Cybersecurity Information Sheet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

To assist the Department of Defense (DoD) and other system administrators in identifying and minimising security risks related to the transition to Internet Protocol version 6 (IPv6), the National Security Agency (NSA) has released IPv6 Security Guidance. The most recent …

Administrator of RSOCKS Proxy Botnet Pleads Guilty

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Denis Emelyantsev, a 36-year-old Russian man accused of running a massive botnet called RSOCKS that stitched malware into millions of devices worldwide, pleaded guilty to two counts of computer crime violations in a California courtroom this week. The plea comes …

Chinsese Hackers Using Golang Source Code Interpreter To Bypass Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered a new uncommon technique employed by Chinese threat actors in which Golang Source Code Interpreter used to evade detection in the Dragonspark malware campaign. DragonSpark is the first malicious campaign that utilizes SparkRAT, an open-source tool, and targets …

Roaming Mantis Uses Android Malware that Hijacks DNS by Exploiting Wi-Fi Routers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Roaming Mantis is a cyberattack campaign that has been active for an extended period of time. The attackers behind this campaign use malicious APK files, which are the files used to install apps on Android devices, to gain control of …