24 Jul Docker fixes critical 5-year old authentication bypass flaw Docker has issued security updates to address a critical vulnerability impacting certain versions of Docker Engine that could allow an attacker to bypass authorization plugins (AuthZ) under certain circumstances. […]
24 Jul Microsoft fixes bug behind Windows 10 Connected Cache delivery issues Microsoft has fixed a known Windows 10 update issue that broke Microsoft Connected Cache (MCC) node discovery on enterprise networks. […]
24 Jul KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack American cybersecurity company KnowBe4 says a person it recently hired as a Principal Software Engineer turned out to be a North Korean state actor who attempted to install information-stealing on its devices. […]
24 Jul Google Chrome now warns about risky password-protected archives Google Chrome now warns when downloading risky password-protected files and provides improved alerts with more information about potentially malicious downloaded files. […]
23 Jul Hamster Kombat’s 250 million players targeted in malware attacks Threat actors are taking advantage of the massive popularity of the Hamster Kombat game, targeting players with fake Android and Windows software that install spyware and information-stealing malware. […]
23 Jul Windows 10 KB5040525 fixes WDAC issues causing app failures, memory leak Microsoft has released the July 2024 preview update for Windows 10, version 22H2, with fixes for Windows Defender Application Control (WDAC) issues causing app crashes and system memory exhaustion. […]
23 Jul DeFi exchange dYdX v3 website hacked in DNS hijack attack Decentralized finance (DeFi) crypto exchange dYdX announced on Tuesday that the website for its older v3 trading platform has been compromised. […]
23 Jul BreachForums v1 hacking forum data leak exposes members’ info The private member information of the BreachForums v1 hacking forum from 2022 has been leaked online, allowing threat actors and researchers to gain insight into its users. […]
23 Jul FrostyGoop malware attack cut off heat in Ukraine during winter Russian-linked malware was used in a January 2024 cyberattack to cut off the heating of over 600 apartment buildings in Lviv, Ukraine, for two days during sub-zero temperatures. […]
22 Jul Greece’s Land Registry agency breached in wave of 400 cyberattacks The Land Registry agency in Greece has announced that it suffered a limited-scope data breach following a wave of 400 cyberattacks targeting its IT infrastructure over the last week. […]