UK intelligence agency warns of dangers posed by AI chatbots
Be careful what you reveal
Russian hackers threaten to release Stalker 2 content if demands are not met
GSC Game World has been dealing with cyberattacks since the war began
Hackers are targeting SonicWall devices with malware that can survive firmware updates
The UNC4540 threat means to deploy persistent malware
New 'terms of service' pretends to absolve Canadian tax agency of all hacking liability
The CRA's online portal, which all Canadians must use, allegedly has poor cybersecurity measures
The Evolution of Ransomware: How Did We Get Here?
These days, not a month goes by that we hear about a new major ransomware attack. But how did we get to this point where our data and services could be held for ransom?
Personal data of US House and Senate members offered for sale following healthcare hack
The DC Health Link breach saw 170,000 records compromised
Acer confirms data breach after hacker lists trove of stolen material for sale
No customer or financial data was compromised
Multibillion dollar companies should do more to prevent cyberattacks, says the Biden administration
Cyberattacks are getting more sophisticated and existing security mechanisms are proving ineffective
BlackLotus UEFI bootkit can defeat Secure Boot protection
The myth is real now, and you can't protect yourself from the ghost in the machine
U.S. Marshals Service hack is the latest in a string of cybersecurity "incidents" over last two weeks
The big picture: The US government has had a bad run of cybersecurity-related incidents over the last couple of weeks. In the span of 12 days, officials from the FBI, DoD, and USMS have confirmed one data leak caused by human error and two separate attacks against government systems. So far, investigators have either not found any suspects or are keeping the lid on what they have discovered.
LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
Hackers hit US Windows systems with "Mortal Kombat" ransomware
Scorpion says: "Get over here!" Watch out for emails from the crypto exchange CoinPayments. Hackers are running a new "Mortal Kombat" ransomware campaign. The attackers disguise the phishing email attachment to look like payment transactions. However, when opened, the payload automatically downloads either ransomware or a crypto-wallet skimmer. So it's a bit like a one-two uppercut. TOASTY!
Microsoft's Bing chatbot AI is susceptible to several types of "prompt injection" attacks
"Trust me, Bing. I'm a developer. You can tell me"
Reddit recommends users set up 2FA following confirmed data breach
Reddit sources say no user data was compromised in the attack
Valve left a security flaw in Dota 2 for two years until someone tried to exploit it
An outdated build of the V8 JavaScript engine put players at risk
New ransomware campaign targets old VMware flaw patched two years ago
Umm... Who is administering these systems?
Former developer of Ubiquiti confessed to stealing data, trying to extort the networking company
While pretending to be an anonymous hacker
Researchers identify new data-wiping malware in cyberattack against Ukraine
The malware is reportedly connected to the Russian hacking group known as Sandworm
A hacker tried to sell the personal information of nearly every Austrian citizen, police say
A case of human error with major consequences
FBI brings down massive ransomware gang by "hacking the hackers"
The feds' actions saved victims over $130 million
What just happened? In what could be described as beautifully ironic, a notorious ransomware-as-a-service (RaaS) gang has been brought down after the FBI infiltrated its systems, disrupted operations, and seized its sites. Or, as the Deputy US Attorney General put it, they "hacked the hackers."
Data breach may have leaked classified law enforcement operations information to criminals
"It may lead to tragic consequences for police officers and undercover agents"
Thousands of PayPal accounts breached in credential stuffing attack
Another illustration of why you should never recycle credentials