Collaborate Disseminate
Fertility Centers of Illinois’ security measures protected electronic medical records, but the attackers still got at extremely intimate data in admin files. Continue reading Cyberattackers Hit Data of 80K Fertility Patients
Activision is suing to shut down the EngineOwning cheat-code site and hold individual developers and coders liable for damages. Continue reading Activision Files Unusual Lawsuit over Call of Duty Cheat Codes
A look back at what was hot with readers in this second year of the pandemic. Continue reading The 5 Most-Wanted Threatpost Stories of 2021
Meta, Facebook’s parent company, said that the seven banned actors run fake accounts on its platforms to deceive users and plant malware on targets’ phones. Continue reading Facebook Bans Spy-for-Hire Firms for Targeting 50K People
It’s similar to Lazarus’s Manuscrypt malware, but the new spyware is splattering itself onto government organizations and ICS in a non-Lazarus-like, untargeted wave of attacks.
Continue reading ‘PseudoManuscrypt’ Mass Spyware Campaign Targets 35K Systems
Not only is the jaw-dropping flaw in the Apache Log4j logging library ubiquitous; Apache’s blanket of a quickly baked patch for Log4Shell also has holes.
Continue reading Apache’s Fix for Log4Shell Can Lead to DoS Attacks
It took just 15 seconds to hack the latest, greatest, shiniest iPhone 13 Pro on stage at the Tianfu Cup in October, using a now-fixed iOS kernel bug. Continue reading Apple iOS Update Fixes Cringey iPhone 13 Jailbreak Exploit
The focused attacks aimed at cyberespionage and lateral movement appear to hint at further ambitions by the group, including supply-chain threats. Continue reading ‘Seedworm’ Attackers Target Telcos in Asia, Middle East
Kronos, the workforce-management provider, said a weeks-long outage of its cloud services is in the offing, just in time to hamstring end-of-year HR activities like bonuses and vacation tracking. Continue reading Kronos Ransomware Outage Drives Widespread Payroll Chaos
The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could lead to a “Mini internet meltdown soonish.” Continue reading Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack