28 Mar How Pentesting-as-a-Service can Reduce Overall Security Costs Penetration testing plays a critical role in finding application vulnerabilities before they can be exploited. Learn more from Outpost24 on the costs of Penetration-Testing-as-a-Service vs classic pentest offerings. […]
27 Mar New Darcula phishing service targets iPhone users via iMessage A new phishing-as-a-service (PhaaS) named ‘Darcula’ uses 20,000 domains to spoof brands and steal credentials from Android and iPhone users in more than 100 countries. […]
27 Mar Google fixes Chrome zero-days exploited at Pwn2Own 2024 Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition. […]
27 Mar INC Ransom threatens to leak 3TB of NHS Scotland stolen data The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service (NHS) of Scotland. […]
27 Mar CISA tags Microsoft SharePoint RCE bug as actively exploited CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks. […]
26 Mar Finland confirms APT31 hackers behind 2021 parliament breach The Finnish Police confirmed on Tuesday that the APT31 hacking group linked to the Chinese Ministry of State Security (MSS) was behind a breach of the country’s parliament disclosed in March 2021. […]
26 Mar $700 cybercrime software turns Raspberry Pi into an evasive fraud tool Cybercriminals are selling custom Raspberry Pi software called ‘GEOBOX’ on Telegram, which allows inexperienced hackers to convert the mini-computers into anonymous cyberattack tools. […]
26 Mar Germany warns of 17K vulnerable Microsoft Exchange servers exposed online The German national cybersecurity authority warned on Tuesday that it found at least 17,000 Microsoft Exchange servers in Germany exposed online and vulnerable to one or more critical security vulnerabilities. […]
25 Mar Panera Bread experiencing nationwide IT outage since Saturday Since Saturday, U.S. food chain giant Panera Bread has been experiencing a nationwide outage that has impacted its IT systems, including online ordering, POS systems, phones, and various internal systems. […]
25 Mar US sanctions crypto exchanges used by Russian darknet market, banks The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned three cryptocurrency exchanges for working with OFAC-designated Russian dark web markets and banks. […]