04 Mar New TPM 2.0 flaws could let hackers steal cryptographic keys The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensitive data, such as cryptographic keys. […]
03 Mar The Week in Ransomware – March 3rd 2023 – Wide impact attacks This week was highlighted by a massive BlackBasta ransomware attack targeting DISH Network and taking down numerous subsidiaries, including SlingTV and Boost Mobile. […]
03 Mar BidenCash market leaks over 2 million stolen credit cards for free A carding marketplace known as BidenCash has leaked online a free database of 2,165,700 debit and credit cards in celebration of its first anniversary. […]
03 Mar Brave Search launches AI-powered summarizer in search results Brave Search has incorporated a new AI-powered tool named Summarizer, which gives a summarized answer to an inputted question before the rest of the search results. […]
03 Mar FBI and CISA warn of increasing Royal ransomware attack risks CISA and the FBI have issued a joint advisory highlighting the increasing threat behind ongoing Royal ransomware attacks targeting many U.S. critical infrastructure sectors, including healthcare, communications, and education. […]
03 Mar Play ransomware claims disruptive attack on City of Oakland The Play ransomware gang has taken responsibility for a cyberattack on the City of Oakland that has disrupted IT systems since mid-February. […]
02 Mar Microsoft releases Windows security updates for Intel CPU flaws Microsoft has released out-of-band security updates for ‘Memory Mapped I/O Stale Data (MMIO)’ information disclosure vulnerabilities in Intel CPUs. […]
02 Mar BlackLotus bootkit bypasses UEFI Secure Boot on patched Windows 11 The developers of the BlackLotus UEFI bootkit have improved the malware with Secure Boot bypass capabilities that allow it to infected even fully patched Windows 11 systems. […]
02 Mar Chick-fil-A confirms accounts hacked in months-long “automated” attack American fast food chain Chick-fil-A has confirmed that customers’ accounts were breached in a months-long credential stuffing attack, allowing threat actors to use stored rewards balances and access personal information. […]
02 Mar Chinese hackers use new custom backdoor to evade detection The Chinese cyber espionage hacking group Mustang Panda was seen deploying a new custom backdoor named ‘MQsTTang’ in attacks starting this year. […]