Cybersecurity researchers discover a critical flaw in the popular Evernote Chrome extension that could have allowed hackers to hijack your browser and steal sensitive information from any website you accessed. Evernote is a popular service that helps people taking notes and organize their to-do task lists, and over 4,610,000 users have been using its Evernote Web Clipper Extension for Chrome…
Security researchers have been warning about a critical vulnerability they discovered in one of a popular WordPress Live Chat plugin, which, if exploited, could allow unauthorized remote attackers to steal chat logs or manipulate chat sessions. The vulnerability, identified as CVE-2019-12498, resides in the “WP Live Chat Support” that is currently being used by over 50,000 businesses to…
Flipboard, a popular social sharing and news aggregator service used by over 150 million people, has disclosed that its databases containing account information of certain users have been hacked. According to a public note published yesterday by the company, unknown hackers managed to gain unauthorized access to its systems for nearly 10 months—between June 2, 2018, and March 23, 2019, and…
As cyber attacks on municipalities mount, is it time to start treating them like the manmade disasters they are? The post Do Cities deserve Federal Disaster Aid after Cyber Attacks? appeared first on The Security Ledger. Related StoriesChinese APT Group, Used Stolen NSA Hacking Tools Before Shadow BrokersDHS Warns That Drones Made in China Could Steal U.S. DataFBI: Cybercrime Accounted for $2.7B in Losses in 2018 …
Cyber Security researchers at Guardicore Labs today published a detailed report on a widespread cryptojacking campaign attacking Windows MS-SQL and PHPMyAdmin servers worldwide. Dubbed Nansh0u, the malicious campaign is reportedly being carried out by an APT-style Chinese hacking group who has already infected nearly 50,000 servers and are installing a sophisticated kernel-mode rootkit on…
Less than 24 hours after publicly disclosing an unpatched zero-day vulnerability in Windows 10, the anonymous hacker going by online alias “SandboxEscaper” has now dropped new exploits for two more unpatched Microsoft zero-day vulnerabilities. The two new zero-day vulnerabilities affect Microsoft’s Windows Error Reporting service and Internet Explorer 11. Just yesterday, while releasing a…
Cybersecurity experts all echo the same thing – cyber attacks are going to get more rampant, and they will continue to pose severe threats against all technology users. Businesses, in particular, have become prime targets for cybercriminals due to the nature of data and information they process and store. 2018 saw a slew of data breaches targeting large enterprises that resulted in the theft…
The Department of Homeland Security is warning U.S. firms that drones made in China may be spying on them and sending sensitive data to the Chinese government. The post DHS Warns That Drones Made in China Could Steal U.S. Data appeared first on The Security Ledger. Related StoriesChinese APT Group, Used Stolen NSA Hacking Tools Before Shadow BrokersReport: Companies Still Grappling with IoT SecurityIsraeli Group Exploited WhatsApp to Spy on Users …
Note: We have updated this story to reflect new information after Stack Overflow changed its original announcement and shared more details on the security incident. Stack Overflow, one of the largest question and answer site for programmers, revealed today that unknown hackers managed to exploit a bug in its development tier and then almost a week after they gained unauthorized access to its…
The United States Justice Department today announced charges against a Chinese hacker and his hacking team member for their alleged role in the 2015 massive data breach at health insurance giant Anthem and three other unnamed American companies. Fujie Wang (王 福 杰) and another hacker named John Doe with three different aliases—Deniel Jack, Kim Young, and Zhou Zhihong—are charged with four…
A group with links to the government of China was using hacking tools developed by the NSA even before they are believed to have been stolen, a new report contends. The post Chinese APT Group, Used Stolen NSA Hacking Tools Before Shadow Brokers appeared first on The Security Ledger. Related StoriesWarning: Trump Terrorist Designation May Prompt Iranian Cyber AttacksMysterious Trisis Malware Strikes AgainAsus ShadowHammer suggests Supply Chain Hacks are the New Normal …
The U.S. Department of Justice today announced charges against nine individuals, 6 of which are members of a hacking group called “The Community” and other 3 are former employees of mobile phone providers who allegedly helped them steal roughly $2.5 million worth of the cryptocurrency using a method known as “SIM Swapping.” According to the 15-count indictment unsealed today, five Americans…
Researchers from Chinese cybersecurity firm Qihoo 360’s NetLab have revealed details of an ongoing credit card hacking campaign that is currently stealing payment card information of customers visiting more than 105 e-commerce websites. While monitoring a malicious domain, www.magento-analytics[.]com, for over last seven months, researchers found that the attackers have been injecting…
Data breaches relating to unsecured Internet of Things devices have jumped by more than 10 percent since 2017, suggesting security efforts aren’t keeping pace with the growth of the Internet of Things, a new study finds. The post Report: Companies Still Grappling with IoT Security appeared first on The Security Ledger. Related StoriesUnsecured Database Exposes Data of 80M U.S. HouseholdsNorsk Hydro Hit with ‘Severe’ LockerGoga Ransomware AttackRussian Cyber Criminal Named as Source of Massive Collection 1 Data Dump …
The saying that there are two types of organizations, those that have gotten breached and those who have but just don’t know it yet, has never been more relevant, making the sound incident response a required capability in any organization’s security stack. To assist in this critical mission, Cynet is launching a free IR tool offering, applicable to both IR service providers in need of a…
Google is giving you more control over how long you want the tech company to hold on to your location history and web activity data. Google has introduced a new, easier, privacy-focused auto-delete feature for your Google account that will allow you to automatically delete your Location History and Web and App Activity data after a set period of time. Google’s Location History feature, if…
