23 Jan Apple fixes actively exploited iOS zero-day on older iPhones, iPads Apple has backported security patches addressing a remotely exploitable zero-day vulnerability to older iPhones and iPads. […]
23 Jan CISA warns of critical ManageEngine RCE bug exploited in attacks The Cybersecurity and Infrastructure Security Agency (CISA) has added a remote code execution (RCE) affecting most Zoho ManageEngine products to its catalog of bugs known to be exploited in the wild. […]
23 Jan GTA Online bug exploited to ban, corrupt players’ accounts Grand Theft Auto (GTA) Online players report losing game progress, in-game money being stolen, and being banned from game servers due to an alleged vulnerability in the game’s PC version. […]
22 Jan FanDuels warns of data breach after customer info stolen in vendor hack The FanDuel sportsbook and betting site is warning customers that their names and email addresses were exposed in a January 2023 MailChimp security breach, urging users to remain vigilant against phishing emails. […]
22 Jan WhatsApp fined €5.5 million by Irish DPC for GDPR violation The Irish Data Protection Commission (DPC) has fined WhatsApp Ireland €5.5 million ($5.95M) after confirming that the communications service has violated the GDPR (General Data Protection Regulation). […]
21 Jan Riot Games hacked, delays game patches after security breach Riot Games, the video game developer and publisher behind League of Legends and Valorant, says it will delay game patches after its development environment was compromised. […]
21 Jan Hackers now use Microsoft OneNote attachments to spread malware Threat actors now use OneNote attachments in phishing emails that infect victims with remote access malware which can be used to install further malware, steal passwords, or even cryptocurrency wallets. […]
21 Jan Massive ad-fraud op dismantled after hitting millions of iOS devices A massive ad fraud operation dubbed ‘Vastflux’ that spoofed more than 1,700 applications from 120 publishers, mostly for iOS, has been disrupted by security researchers at cybersecurity company HUMAN. […]
20 Jan The Week in Ransomware – January 20th 2023 – Targeting Crypto Exchanges There has been quite a bit of ransomware news this week, with crypto exchanges being seized for alleged money laundering and researchers providing fascinating reports on the behavior of ransomware operators. […]
20 Jan Over 19,000 end-of-life Cisco routers exposed to RCE attacks Over 19,000 end-of-life Cisco VPN routers on the Internet are exposed to attacks targeting a remote command execution exploit chain. […]