If you’re still running a website that is still using insecure HTTP then it’s time to wake up and drink the coffee. Because unless you take action soon, you’re going to find many of your visitors are going to distrust your website. The reason? Google is pushing ahead with its […]
World Cyber News
Government websites hijacked by cryptomining plugin
OVER 4000 WEBSITES THOUGHT TO HAVE BEEN HIT. More than 4000 websites, including many belonging to governments around the world, were hijacked this weekend by hackers who managed to plant CoinHive code designed to exploit the computer power of visiting PCs and mine for cryptocurrency. High profile websites impacted by […]
U.S., UK government websites infected with crypto-mining malware: report
(Reuters) – Thousands of websites, including ones run by U.S. and UK government agencies, were infected for several hours on Sunday with code that causes web browsers to secretly mine digital currencies, technology news site The Register reported. More than 4,200 sites were infected with a malicious version of a […]
Dark Web’s largest cybercrime group indicted after stealing $530M
Infraud organization is the largest group of cybercriminals on Dark Web – Their official motto is “In Fraud We Trust.” After managing to steal over $530 million, a cybercrime ring has finally been hammered by US law enforcement authorities and its 36 members have been indicted. The accused have close ties […]
Cyber Attack Disrupts Winter Olympics Website During Opening Ceremony
The Winter Olympics Games Organizing Committee is investigating a cyber attack on the event’s Internet and Wi-Fi system. The attack was carried out 45 minutes before the opening ceremony on Friday night in South Korea. According to the Committee’s spokeswoman, Nancy Park, the country’s Ministry of Defense and a cybersecurity team is investigating […]
Lenovo patches critical flaws that affect Broadcom’s chipsets in dozens of Lenovo ThinkPad
According to a security advisory issued by Lenovo, two critical vulnerabilities in Broadcom chipsets affects at least 25 models of Lenovo ThinkPad. The affected models are ThinkPad 10, ThinkPad L460, ThinkPad P50s, ThinkPad T460, ThinkPad T460p, ThinkPad T460s, ThinkPad T560, ThinkPad X260 and ThinkPad Yoga 260. One of the flaws was discovered in June […]
Russian Scientists Arrested for Using Nuclear Weapon Facility to Mine Bitcoins
Two days ago when infosec bods claimed to have uncovered what’s believed to be the first case of a SCADA network (a water utility) infected with cryptocurrency-mining malware, a batch of journalists accused other authors of making fear-mongering headlines, taunting that the next headline could be about cryptocurrency-miner detected in a nuclear […]
UDPOS PoS malware exfiltrates credit card data DNS queries
A new PoS malware dubbed UDPoS appeared in the threat landscape and implements a novel and hard to detect technique to steal credit card data from infected systems. The UDPoS malware was spotted by researchers from ForcePoint Labs, it relies upon User Datagram Protocol (UDP) DNS traffic for data exfiltration instead of HTTP that is the […]
Swisscom data breach Hits 800,000 Customers, 10% of Swiss population
Swisscom data breach – Telco company Swisscom confirmed it has suffered a data breach that affected roughly 800,000 of its customers, roughly 10% of the Swiss population. Swiss telco company Swisscom confirmed it has suffered a data breach that affected roughly 800,000 of its customers, roughly 10% of the Swiss population. According to Swisscom, unauthorized parties […]
Joomla 3.8.4 release addresses three XSS and SQL Injection vulnerabilities
Joomla development team has released the Joomla 3.8.4 that addresses many issues, including an SQL injection bug and three cross-site scripting (XSS) flaws. Joomla development team has released the Joomla 3.8.4 that addresses a large number of issues, including an SQL injection bug and three cross-site scripting (XSS) vulnerabilities. The latest release also includes several improvements. The XSS and SQL […]