February 22, 2024 2 Comments A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side …
Apple Adds PQ3 post-quantum Encryption for iMessage
Apple has released its new PQ3 (post-quantum) cryptographic protocol, claimed to be the first-ever messaging protocol to reach Level 3 security. Apple announced its cryptographic protocol change in 2019 when …
Hackers launched 250,000+ Attacks to Exploit Ivanti VPN 0-Day
Ivanti Connect Secure vulnerabilities were disclosed in January 2024 as a potential gateway for threat actors to penetrate corporate networks. The two vulnerabilities, CVE-2023-46805 and CVE-2024-21887 were associated with authentication …
Hackers Heavily Abusing Google Cloud Run to Deliver Banking Malware
Large-scale malware distribution campaigns are abusing Google Cloud Run to transmit banking trojans, including Astaroth (also known as Guildma), Mekotio, and Ousaban, to European and Latin American targets. With Cloud …
VoltSchemer – Wireless Charger Attack Boils Phone and Injects Voice Commands
Threat actors target wireless chargers for multiple malicious activities, such as implanting malware or conducting power-related attacks. The rising popularity of wireless charging brings convenience. Still, recent research by Zihao …
Wyze webcam Flaw let strangers see into some users’ homes
Five months after a similar issue, Wyze cameras are back in the headlines for a privacy nightmare. The Verge reports that dozens of users could see images from strangers’ homes, …
NSA Announces Retirement of Cybersecurity Director Rob Joyce
In a significant announcement from the National Security Agency (NSA), Rob Joyce, the esteemed Director of Cybersecurity, is set to retire on March 31, 2024, after a distinguished 34-year career …
Signal Introduces Username to keep Your Phone Number More private
Signal, the privacy-focused messaging app, has introduced a significant update allowing users to keep their phone numbers private using usernames. This move is a part of Signal’s ongoing efforts to …
Google Chrome 122 Released With Fix For Critical Security Flaws
Google has announced the release of Chrome 122, marking a pivotal moment for the popular web browser. This latest version, now available for Windows, Mac, and Linux, introduces a series …
ScreenConnect Security Flaw Let Attackers Bypass Authentication
In a critical security advisory, ConnectWise has alerted users of its ScreenConnect remote access software to patch their systems immediately due to two severe vulnerabilities discovered in versions 23.9.7 and …