Collaborate Disseminate
A new version of NAT slipstreaming allows cybercriminals an easy path to devices that aren’t connected to the internet. Continue reading Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming
The personal data of 66,000 users was left wide open on a misconfigured Elasticsearch server, joining a growing list of companies with leaky clouds. Continue reading 23M Gamer Records Exposed in VIPGames Leak
Cook County, Ill., home to Chicago, has left a database exposed since at least September that contained sensitive criminal and family-court records. Continue reading Criminal, Domestic Violence Case Info Exposed in Cook County Leak
Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor. Continue reading North Korea Targets Security Researchers in Elaborate 0-Day Campaign
The ShinyHunters hacking group offer a raft of information, from location and contact info to dating preferences and bodily descriptions, as a free download. Continue reading 2.28M MeetMindful Daters Compromised in Data Breach
The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. Continue reading Cisco DNA Center Bug Opens Enterprises to Remote Attack
The new tools on Chrome and Edge will make it easier for browser users to discover – and change – compromised passwords. Continue reading Microsoft Edge, Google Chrome Roll Out Password Protection Tools
The “KindleDrip” attack would have allowed attackers to siphon money from unsuspecting victims. Continue reading Amazon Kindle RCE Attack Starts with an Email
A former ADT employee pleads guilty of accessing customers’ cameras so he could spy on them. Continue reading ADT Tech Hacks Home-Security Cameras to Spy on Women
The CursedGrabber malware has infiltrated the open-source software code repository. Continue reading Discord-Stealing Malware Invades npm Packages