12 Apr Telegram fixes Windows app zero-day used to launch Python scripts Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. […]
12 Apr Ex-Amazon engineer gets 3 years for hacking crypto exchanges Former Amazon security engineer Shakeeb Ahmed was sentenced to three years in prison for hacking two cryptocurrency exchanges in July 2022 and stealing over $12 million. […]
12 Apr Former AT&T customers get $6.3 million in data throttling refunds The Federal Trade Commission (FTC) is sending out $6,300,000 in partial refunds to 267,000 former AT&T Wireless customers as part of a data throttling settlement in 2019. […]
12 Apr Roku warns 576,000 accounts hacked in new credential stuffing attacks Roku warns that 576,000 accounts were hacked in new credential stuffing attacks after disclosing another incident that compromised 15,000 accounts in early March. […]
11 Apr CISA makes its “Malware Next-Gen” analysis system publicly available The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new version of “Malware Next-Gen,” now allowing the public to submit malware samples for analysis by CISA. […]
11 Apr OpenTable is adding your first name to previously anonymous reviews Restaurant reservation platform OpenTable says that all reviews on the platform will no longer be fully anonymous starting May 22nd and will now show members’ profile pictures and first names. […]
11 Apr LastPass: Hackers targeted employee in failed deepfake CEO call LastPass revealed this week that threat actors targeted one of its employees in a voice phishing attack, using deepfake audio to impersonate Karim Toubba, the company’s Chief Executive Officer. […]
11 Apr Optics giant Hoya hit with $10 million ransomware demand A recent cyberattack on Hoya Corporation was conducted by the ‘Hunters International’ ransomware operation, which demanded a $10 million ransom for a file decryptor and not to release files stolen during the attack. […]
11 Apr CISA orders agencies impacted by Microsoft hack to mitigate risks CISA has issued a new emergency directive ordering U.S. federal agencies to address risks resulting from the breach of multiple Microsoft corporate email accounts by the Russian APT29 hacking group. […]
11 Apr DuckDuckGo launches a premium Privacy Pro VPN service DuckDuckGo has launched a new paid-for 3-in-1 subscription service called ‘Privacy Pro,’ which includes a virtual private network (VPN), a personal data removal service, and an identity theft restoration solution. […]