intelligence gathering
-
Brokerage platform Robinhood discloses data breach affecting 7 million customers
Stock trading platform Robinhood has disclosed a data breach after its systems were hacked, with a threat actor gaining access to the personal information of approximately 7 million customers. The attack occurred on November 3, when the attacker called customer support...
-
Ukraine accuses Gamaredon cyber espionage group of ties to Russia's FSB
Ukraine's main law enforcement and counterintelligence agency on Thursday revealed the true identities of five people it said were involved in the hack, believed to be part of a cyberespionage group called Gamaredon, and linked the members to Russia's Federal Security Service. Ukrainian security…
-
US sanctions Pegasus maker NSO Group and 3 other spyware companies
The U.S. Commerce Department on Wednesday added four companies, including Israeli spyware companies NSO Group and Candiru, to a list of entities engaged in "malicious cyber activity." The agency said the two companies were placed on the list based on "these entities...
-
GitLab Unauthenticated In-the-Wild Remote Code Execution (RCE) Vulnerability
Recently, researchers discovered that a patched critical remote code execution (RCE) vulnerability in GitLab's web page has been detected and exploited as a 0day in the wild, making a large number of Internet-facing GitLab instances extremely vulnerable to attacks. The risk…
-
In the Tianfu Cup Hacking Competition, white hat hackers gained the highest control rights of iPhone 13
Introduction: The "Tianfu Cup" International Network Security Competition strives to become the world's No. 1 cracking competition and openly solicits contestants and projects for all security practitioners. Competitors register for events based on target event settings, and the competition sets awards for champion, runner-up, and third runner-up. Competition…
-
Newly discovered Tomiris backdoor linked to hackers behind SolarWinds cyber attack
Cybersecurity researchers on Wednesday disclosed a previously undocumented backdoor that may have been designed and developed by the Nobelium advanced persistent threat (APT) that supported last year's SolarWinds supply chain attack, adding...
-
Sensitive personal information of 70 million AT&T customers sold on the black market
Last week, ShinyHunters posted a promotion for “AT&T Database + 70M (SSN/DOB)” on the popular darknet market RaidForums. Threat actors target 200,000…
-
Critical Cosmos database vulnerability affects thousands of customers
Cloud infrastructure security company Wiz on Thursday revealed details of a now-fixed Azure Cosmos database vulnerability that could be exploited to grant any Azure user full administrator access to other customer database instances.…
-
Hackers steal 100 million T-Mobile user data in retaliation for US
Latest News T-Mobile has confirmed that a data breach occurred. But at the same time, T-Mobile added that it was not yet able to determine the exact number of affected customers. The company said it has begun an in-depth technical review of the situation across the system to determine any...
-
British education giant Pearson fined $1 million for covering up data breach
On August 16, the U.S. Securities and Exchange Commission (SEC) announced that Pearson, a British transnational education publishing services company, had reached a settlement with allegations of improper handling of the disclosure process in the 2018 data breach. Education giant trains…