Collaborate Disseminate
Cybersecurity researchers discovered an unsecured 16TB database exposing 4.3 billion professional records, including names, emails, and LinkedIn data. Learn what happened, why this massive data leak enables new scams, and how to protect your PII. Continue reading 16TB of MongoDB Database Exposes 4.3 Billion Lead Gen Records
New report by Unit 42 reveals the Hamas-linked Ashen Lepus (WIRTE) group is using the AshTag malware suite to target Middle Eastern diplomatic and government entities with advanced, hidden tactics. Continue reading Hamas Linked Hackers Using AshTag Malware Against Diplomatic Offices
South Korean e-commerce giant Coupang faces intense scrutiny after CEO Park Dae-jun resigns over a data breach that exposed 33.7 million customer accounts. Read about the police raids, US lawsuit, and regulatory orders from PIPC. Continue reading Coupang CEO Steps Down After Data Breach Hits 33.7 Million Users
UK’s ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee’s personal PC led to the massive security failure. Continue reading UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach
UK’s ICO fines LastPass £1.2M for the 2022 data breach that exposed 1.6 million users’ data. Learn how a flaw in an employee’s personal PC led to the massive security failure. Continue reading UK’s ICO Fine LastPass £1.2 Million Over 2022 Security Breach
The Oyster backdoor (also known as Broomstick) is targeting the financial world, using malicious search ads for PuTTY, Teams, and Google Meet. Continue reading Fake Microsoft Teams and Google Meet Downloads Spread Oyster Backdoor
A new malware called PyStoreRAT is being through fake OSINT tools on GitHub targeting IT and OSINT pros. Read Morphisec’s report detailing how it uses AI and evades security. Continue reading New PyStoreRAT Malware Targets OSINT Researchers Through GitHub
VS Code developers beware: ReversingLabs found 19 malicious extensions hiding trojans inside a popular dependency, disguising the final malware payload as a standard PNG image file. Continue reading Malicious Visual Studio Code Extensions Hide Trojan in Fake PNG Files
Zimperium zLabs reveals DroidLock, a new Android malware acting like ransomware that can hijack Android devices, steal credentials via phishing, and stream your screen via VNC. Continue reading New ‘DroidLock’ Android Malware Locks Users Out, Spies via Front Camera
Cybersecurity researchers at Blackpoint Cyber discovered a new, evasive CastleLoader malware variant using Python and ClickFix social engineering to deliver RATs and info-stealers directly from memory. Continue reading CastleLoader Malware Now Uses Python Loader to Bypass Security