An Illinois county on the border with Iowa is the latest local government in the U.S. to fall victim to a ransomware attack. Henry County has been dealing with a wide-ranging cyberattack since March 18, Mat Schnepple, director of the Emergency Management (OEM) office in Henry County, confirmed to Re…
Researchers disclosed vulnerabilities today that impact 3 million Saflok electronic RFID locks deployed in 13,000 hotels and homes worldwide, allowing the researchers to easily unlock any door in a hotel by forging a pair of keycards. The series of security flaws, dubbed “Unsaflok,” was discove…
The US government has published new distributed denial-of-service (DDoS) attack guidance for public sector entities to help prevent disruption to critical services.The document is designed to serve as a comprehensive resource to address the specific needs and challenges faced by federal, state and l…
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks. Tracked as CVE-2023-48788, this security flaw is an SQL injection in the DB2 Administrat…
Alarming reports have surfaced indicating that a threat actor is purportedly offering for sale a substantial cache of data, totaling 30 GB, allegedly obtained from Keller Williams Realty’s website (kw.com). Established in 1983, Keller Williams Realty stands as a prominent international real estate c…
A malicious ad for the popular admin tool PuTTY leads victims to a fake site that downloads malware….
Amid the constant drumbeat of successful cyberattacks, some fake data breaches have also cropped up to make sensational headlines. Unfortunately, even fake data breaches can have real repercussions. Earlier this year, a hacker on a criminal forum claimed to have stolen data on some 50 million Europc…
The Department of Transportation (DOT) will review data collection practices for the country’s 10 largest airlines in a bid to improve passenger privacy protections, Secretary Pete Buttigieg said on Thursday. The department said it will examine airline policies and training in handling passeng…
The South China Athletic Association (SCAA) was rocked by a cyberattack as unauthorized third parties breached the organization’s computer servers, sparking concerns over the security of member data. In response to the SCAA cyberattack, the Association swiftly implemented measures to address the bre…
WebCopilot is an open-source automation tool that enumerates a target’s subdomains and discovers bugs using various free tools. It simplifies the application security workflow and reduces reliance on manual scripting. “I built this solution to streamline the application security process, specificall…
A threat actor has purportedly leaked extensive data pertaining to around 2.5 million New Zealand citizens, sourced from MediaWorks (mediaworks.co.nz). Initially intending to sell the information for $30,000, the actor encountered a lack of interest due to the hefty price tag. Consequently, they hav…
Group-IB uncovered ResumeLooters, a threat actor group specializing in victimizing job hunters to steal their personally identifiable information (PII).
The Rhysida ransomware group claims it was responsible for the cyberattack at US luxury yacht dealer MarineMax earlier this month. MarineMax, which posted multibillion-dollar revenues last year, disclosed a cyberattack to the Securities and Exchange Commission (SEC) on March 10, saying portions of i…
Federal authorities are warning healthcare sector entities about email bomb attacks, which can overwhelm inboxes and servers. (Image: Getty) Imagine a hospital’s email system suddenly filled with thousands of spam messages sent by bots. The unexpected traffic degrades network server performance, and…
An unpatchable vulnerability in Apple’s M-series chips has been reported. The Apple M-series chip vulnerability could potentially leak secret encryption keys. This flaw, embedded deep within the architecture of the chips, poses a challenge for the tech giant in terms of addressing security concerns…