Crisis24’s OnSolve CodeRED platform was hacked, disrupting emergency alerts used by U.S. government agencies. Data including personal information was stolen, and the INC Ransom gang claimed responsibility, auctioning the stolen data. #INC Ransom #CodeRED #EmergencyNotificationSystems
Category: Cyber Security News
The FBI warns about increasing account takeover (ATO) frauds using social engineering via texts, calls, and emails, resulting in over $262 million in losses since January. Cybercriminals exploit fears of fake charges and impersonate legitimate institutions, especially during the holiday season, while AI-driven scams and malicious domains are on the rise….
Researchers discovered that developer platforms unintentionally share thousands of sensitive secrets through code formatting tools and shareable links. These vulnerabilities expose credentials for major cloud services, financial institutions, and other critical systems. #JSONFormatter #CodeBeautify #CloudCredentials #DataLeakage #ThreatActors…
This article emphasizes strategic year-end cybersecurity spending focusing on measurable security improvements and risk reduction. It highlights prioritizing security gaps, strengthening identity controls, and consolidating tools to maximize the impact of limited budgets. #ActiveDirectory #IncidentResponse
Microsoft is enhancing Microsoft Teams for Windows by introducing a new call handler process in January 2026 to improve call performance and startup times. This architectural update will not impact user experience but requires IT administrators to allowlist the new process for security and troubleshooting purposes. #MicrosoftTeams #WindowsSecurity #ms-teams_modulehost.exe
Microsoft is investigating an outage affecting Exchange Online and classic Outlook desktop clients, causing mailbox access and login issues in Asia Pacific and North America. Microsoft recommends using Outlook on the Web as a workaround while they analyze the root cause. #ExchangeOnline #OutlookOutage
Tor has upgraded its encryption system from the outdated tor1 relay encryption to the advanced Counter Galois Onion (CGO) protocol to enhance network resilience and user anonymity. This transition aims to address vulnerabilities like traffic modification, key reuse, and weak authentication, ensuring a more secure and modern Tor experience. #CGO #CounterGaloisOnion
The FBI reports a significant increase in account takeover (ATO) fraud, with cybercriminals stealing over $262 million through impersonation schemes targeting financial institutions. Victims face difficult fund recovery as attackers often move money to cryptocurrency wallets and lock account owners out. #FBI #AccountTakeover #CyberFraud #CryptoTheft
Multiple cyber threat actors are actively exploiting commercial spyware to target messaging app users worldwide, using techniques like phishing, QR codes, zero-click exploits, and impersonation. These threats primarily aim at high-value individuals, including government officials and civil society organizations, emphasizing the need for enhanced mobile communication security. #Spyware #ZeroClickExploits…
Harvard University experienced a data breach through a vishing attack targeting its Alumni Affairs and Development systems, exposing personal contact and donation information. The incident also involved a limited breach related to the Cl0p ransomware group, which leaked additional data from Harvard’s Oracle E-Business Suite. #Vishing #Cl0p #HarvardAlumni #OracleEBS…
A ransomware group called Devman claimed responsibility for a cyberattack on the Georgia Superior Court Clerks’ Cooperative Authority, resulting in website downtime and a cybersecurity threat. The attack involved data theft and ransom demands, highlighting the growing threat of ransomware to government systems. #Devman #GeorgiaSuperiorCourtClerks…
A memory flaw in Firefox’s WebAssembly implementation remained hidden for six months, affecting over 180 million users and risking arbitrary code execution. This incident highlights the importance of AI-driven security research and continuous patch management for safeguarding modern browsers. #Firefox #WebAssembly #MemorySafety…
A new cyber campaign, dubbed JackFix, uses Fake Windows updates and adult websites to trick users into executing malicious commands. The attack employs obfuscated scripts, PowerShell payloads, and steganography to deploy various malware, risking data theft and system compromise. #ClickFix #JackFix #PowerShellPayload…
Recent research reveals that sensitive credentials from organizations across various sectors have been leaked through online formatting tools like JSONformatter and CodeBeautify. These tools’ popularity and shareable links have led to widespread exposure and misuse of confidential data. #JSONformatter #CodeBeautify #CredentialLeakage…
A young Russian cybersecurity entrepreneur, Timur Kilin, was arrested on treason charges after criticizing the government’s messaging app Max and anti-cybercrime laws. His case reflects the increasing pressure on Russia’s tech community and concerns over surveillance and data security. #TimurKilin #MaxApp #RussianTechOppression…