Election cyber threats come from various places, including compromised voting machines, AI deepfakes, and potential physical harm to workers. But CISA has been working diligently with various public and private partners to stymie the risk.
ConnectWise disclosed two critical ScreenConnect vulnerabilities (CVE-2024-1708 path traversal and CVE-2024-1709 authentication bypass) that were actively exploited in a campaign dubbed “SlashAndGrab,” enabling unauthorized access and ransomware deployment by …
Overview The SonicWall Capture Labs threat research team became aware of a couple of noteworthy vulnerabilities — an authentication bypass vulnerability and a path traversal vulnerability — in JetBrains TeamCity, assessed their impact and developed […]
Researchers demonstrated how they could conduct a Man-in-the-Middle (MiTM) phishing attack to compromise Tesla accounts, unlocking cars, and starting them. The attack works on the latest Tesla app, version 4.30.6, and Tesla software version 11.1 2024.2.7. […]
AnyCubic has released new Kobra 2 firmware to fix a zero-day vulnerability exploited last month to print security warnings on 3D printers worldwide. […]
Recently, in a telecommunications setback, damage to submarine cables in the Red Sea is causing disruptions in communication networks, affecting a quarter of the traffic between Asia, Europe, and the Middle East, including internet services. Four major telecom networks, including Hong Kong’s HGC Glo…
Change Healthcare breachThere is evidence that the ransomware group behind the Change Healthcare breach, which has caused chaos for hospitals and pharmacies attempting to handle prescriptions, may have received $22 million from UnitedHealth Group.Researchers studying security issues discovered a pos…
Spike in new versions of an old Trojan — which mimic legitimate VMware domains — alarms security researchers.
France-based Zama, which describes itself as an open source cryptography company, on Thursday announced raising $73 million in a Series A funding round. The investment, which Zama says is one of the largest venture rounds in France’s history, was led by Multicoin Capital and Protocol Labs, with part…
Handing over your business data to artificial intelligence companies comes with inherent risks.
The US Health and Human Services Department (HHS) announced Tuesday that it would assist doctors and hospitals in locating alternate claims processing platforms to help restart the flow of business following a cyberattack on a UnitedHealth Group (UNH) subsidiary that crippled operations of a large s…
In today’s tech-driven world, APIs (Application Programming Interfaces) are like the connective tissue that allows different software to talk to each other, making our digital experiences seamless. But because they are so crucial, they are also prime targets for hackers. They could break in to…
The U.S. Department of Justice (DoJ) has announced the unsealing of an indictment against Linwei (Leon) Ding, 38, a former software engineer at Google, suspected of stealing Google AI trade secrets for Chinese companies. […]
A large-scale pig-butchering campaign is targeting investors in India using fake trading apps distributed via compromised developer accounts on Google Play and the App Store, supported by phishing sites, social media ads, and WhatsApp/Telegram recruitment. Sca…
The FBI’s Internet Crime Complaint Center (IC3) has published its annual report for 2023, which reveals that the number of cybercrime complaints received by the agency increased by nearly 10% compared to the previous year. Cybercrime victims in the United States filed more than 880,000 complaints wi…