24 Jul Docker fixes critical 5-year old authentication bypass flaw Docker has issued security updates to address a critical vulnerability impacting certain versions of Docker Engine that could allow an attacker to bypass authorization plugins (AuthZ) under certain circumstances. […]
24 Jul KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack American cybersecurity company KnowBe4 says a person it recently hired as a Principal Software Engineer turned out to be a North Korean state actor who attempted to install information-stealing on its devices. […]
24 Jul Google Chrome now warns about risky password-protected archives Google Chrome now warns when downloading risky password-protected files and provides improved alerts with more information about potentially malicious downloaded files. […]
23 Jul Hamster Kombat’s 250 million players targeted in malware attacks Threat actors are taking advantage of the massive popularity of the Hamster Kombat game, targeting players with fake Android and Windows software that install spyware and information-stealing malware. […]
23 Jul DeFi exchange dYdX v3 website hacked in DNS hijack attack Decentralized finance (DeFi) crypto exchange dYdX announced on Tuesday that the website for its older v3 trading platform has been compromised. […]
23 Jul BreachForums v1 hacking forum data leak exposes members’ info The private member information of the BreachForums v1 hacking forum from 2022 has been leaked online, allowing threat actors and researchers to gain insight into its users. […]
23 Jul FrostyGoop malware attack cut off heat in Ukraine during winter Russian-linked malware was used in a January 2024 cyberattack to cut off the heating of over 600 apartment buildings in Lviv, Ukraine, for two days during sub-zero temperatures. […]
22 Jul Greece’s Land Registry agency breached in wave of 400 cyberattacks The Land Registry agency in Greece has announced that it suffered a limited-scope data breach following a wave of 400 cyberattacks targeting its IT infrastructure over the last week. […]
22 Jul Google rolls back decision to kill third-party cookies in Chrome Google has scrapped its plan to kill third-party cookies in Chrome and will instead introduce a new browser experience to allows users to limit how these cookies are used. […]
22 Jul US sanctions Russian hacktivists who breached water facilities The US government has imposed sanctions on two Russian cybercriminals for cyberattacks targeting critical infrastructure. […]