Russian hackers threaten to release Stalker 2 content if demands are not met
GSC Game World has been dealing with cyberattacks since the war began
International authorities bring NetWire's malware infrastructure to a standstill
The long suspected remote access trojan was sold without question and used to spy on unsuspecting users
Hackers accessed personal data from 9 million AT&T customers
No credit card information or social security numbers exposed
FBI admits to buying location data of US citizens without a warrant
Privacy advocates are outraged, and for good reason
WhatsApp and Signal would leave the UK rather than comply with potential requirement for weakened encryption
Many say the Online Safety Bill's requirements aren't possible without removing end-to-end encryption
Hackers are targeting SonicWall devices with malware that can survive firmware updates
The UNC4540 threat means to deploy persistent malware
New 'terms of service' pretends to absolve Canadian tax agency of all hacking liability
The CRA's online portal, which all Canadians must use, allegedly has poor cybersecurity measures
The Evolution of Ransomware: How Did We Get Here?
These days, not a month goes by that we hear about a new major ransomware attack. But how did we get to this point where our data and services could be held for ransom?
Personal data of US House and Senate members offered for sale following healthcare hack
The DC Health Link breach saw 170,000 records compromised
Google One expands VPN service to all subscribers, adds dark web monitoring
New privacy and security features coming to Google One
Acer confirms data breach after hacker lists trove of stolen material for sale
No customer or financial data was compromised
Meta is suing Freenom, cybercriminals' favorite domain registrar
The TLD service provider is not accepting free domain registrations anymore
White House supports Senate bill that would enable US to ban TikTok
TikTok has almost 100 million active users in the US
Two security flaws in the TPM 2.0 specs put cryptographic keys at risk
In-hardware security can be defeated with just two extra bytes
Multibillion dollar companies should do more to prevent cyberattacks, says the Biden administration
Cyberattacks are getting more sophisticated and existing security mechanisms are proving ineffective
BlackLotus UEFI bootkit can defeat Secure Boot protection
The myth is real now, and you can't protect yourself from the ghost in the machine
Bitdefender defeats Mortal Kombat ransomware with free decryptor
Unencrypt your files silently, with additional arguments and commands for automation
U.S. Marshals Service hack is the latest in a string of cybersecurity "incidents" over last two weeks
The big picture: The US government has had a bad run of cybersecurity-related incidents over the last couple of weeks. In the span of 12 days, officials from the FBI, DoD, and USMS have confirmed one data leak caused by human error and two separate attacks against government systems. So far, investigators have either not found any suspects or are keeping the lid on what they have discovered.
LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
EU Commission bans TikTok from employee devices over cybersecurity fears
TikTok says the ban "is misguided and based on fundamental misconceptions"
Google is hardening Android security at the firmware level
An arduous but necessary task to improve security for over 2.5 billion active users
Activision suffered a data breach in December, exposing confidential data and future gaming plans
The company confirmed the breach but denied data exfiltration
Misconfigured government mail server spilled sensitive military data for weeks
The drip has been contained
Twitter's SMS two-factor authentication is now a paid feature
Non-subscribers will still have access to 2FA via authentication apps and security keys
Stealthy malware that opens a backdoor into Windows web servers discovered
Putting some custom FREB code into your regular IIS connections