Collaborate Disseminate
We want to know what your biggest cloud security concerns and challenges are, and how your company is dealing with them. Weigh in with our exclusive poll! Continue reading What Are Your Top Cloud Security Challenges? Threatpost Poll
Cyberattackers made off with addresses, insurance information, dates of birth, and most worryingly, clinical information, such as diagnosis, procedures, and/or prescription information. Continue reading Planned Parenthood Breach Opens Patients to Follow-On Attacks
Cyberattackers had unfettered access to the technology giant’s file server for four months. Continue reading Panasonic’s Data Breach Leaves Open Questions
The North Korea-linked group is deploying the Chinotto spyware backdoor against dissidents, journalists and other politically relevant individuals in South Korea. Continue reading ScarCruft APT Mounts Desktop/Mobile Double-Pronged Spy Attacks
A temporary fix has been issued for CVE-2021-24084, which can be exploited using the LPE exploitation approach for the HiveNightmare/SeriousSAM bug. Continue reading Unpatched Windows Zero-Day Allows Privileged File Access
Customers of several brands that resell GoDaddy Managed WordPress have also been caught up in the big breach, in which millions of emails, passwords and more were stolen. Continue reading GoDaddy Breach Widens to Include Reseller Subsidiaries
Just weeks after a judge ruled that NSO Group did not have immunity in a suit brought by Facebook subsidiary WhatsApp, Apple is adding significant weight to the company’s woes. Continue reading Apple’s NSO Group Lawsuit Amps Up Pressure on Pegasus Spyware-Maker
The kingpin domain registrar has logged its fifth cyber-incident since 2018, after an attacker with a compromised password stole email addresses, SSH keys and database logins. Continue reading GoDaddy’s Latest Breach Affects 1.2M Customers
CloudLinux’ security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug. Continue reading Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeover
A politically motivated group is paralyzing Israeli entities with no financial goal — and no intention of handing over decryption keys. Continue reading MosesStaff Locks Up Targets, with No Ransom Demand, No Decryption