July 2024 - Page 9 of 13

Signal downplays encryption key flaw, fixes it after X drama

Signal is finally tightening its desktop client’s security by changing how it stores plain text encryption keys for the data store after downplaying the issue since 2018. […]

11 Jul

Google increases bug bounty rewards five times, up to $151K

Google has announced a fivefold increase in payouts for bugs found in its systems and applications reported through its Vulnerability Reward Program, with a new maximum bounty of $151,515 for a single security flaw. […]

11 Jul

Dallas County: Data of 200,000 exposed in 2023 ransomware attack

Dallas County is notifying over 200,000 people that the Play ransomware attack, which occurred in October 2023, exposed their personal data to cybercriminals. […]

11 Jul

CRYSTALRAY hacker expands to 1,500 breached systems using SSH-Snake tool

A new threat actor known as CRYSTALRAY has significantly broadened its targeting scope with new tactics and exploits, now counting over 1,500 victims whose credentials were stolen and cryptominers deployed. […]

11 Jul

Advance Auto Parts data breach impacts 2.3 million people

Advance Auto Parts is sending data breach notifications to over 2.3 million people whose personal data was stolen in recent Snowflake data theft attacks. […]

10 Jul

Microsoft 365, Office users hit by wave of ‘30088-27’ update errors

Over the last month, Microsoft 365 and Microsoft Office users have been experiencing “30088-27” errors when attempting to update the application. […]

10 Jul

Huione Guarantee exposed as a $11 billion marketplace for cybercrime

The seemingly legitimate online marketplace Huione Guarantee is being used as a platform for laundering money from online scams, especially “pig butchering” investment fraud, researchers say. […]

10 Jul

GitLab: Critical bug lets attackers run pipelines as other users

GitLab warned today that a critical vulnerability in its product’s GitLab Community and Enterprise editions allows attackers to run pipeline jobs as any other user. […]

10 Jul

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

The latest variants of the ViperSoftX info-stealing malware use the common language runtime (CLR) to load and execute PowerShell commands within AutoIt scripts to evade detection. […]

10 Jul

CISA urges devs to weed out OS command injection vulnerabilities

CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping. […]

Month: July 2024

Signal downplays encryption key flaw, fixes it after X drama

Google increases bug bounty rewards five times, up to $151K

Dallas County: Data of 200,000 exposed in 2023 ransomware attack

CRYSTALRAY hacker expands to 1,500 breached systems using SSH-Snake tool

Advance Auto Parts data breach impacts 2.3 million people

Microsoft 365, Office users hit by wave of ‘30088-27’ update errors

Huione Guarantee exposed as a $11 billion marketplace for cybercrime

GitLab: Critical bug lets attackers run pipelines as other users

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

CISA urges devs to weed out OS command injection vulnerabilities