Skip to main content

Security News

Filter by:

T-Mobile: >40 Million Customers’ Data Stolen

Attackers stole tens of millions of current, former or prospective customers' personal data, the company confirmed. It's providing 2 years of free ID protection.
Threatpost 19 Aug 2021 929 Views

Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices.
Threatpost 18 Aug 2021 860 Views

Fortinet slams Rapid7 for disclosing vulnerability before end of 90-day window

Fortinet said it would be releasing a patch by the end of the week.
ZDnet 18 Aug 2021 1059 Views

LockBit 2.0 Ransomware Proliferates Globally

Fresh attacks target companies' employees, promising millions of dollars in exchange for valid account credentials for initial access.
Threatpost 18 Aug 2021 910 Views

Unpatched Fortinet Bug Allows Firewall Takeovers

Packet Storm 18 Aug 2021 16689 Views

Colonial Pipeline sends breach letters to more than 5,000 after ransomware group accessed SSNs, more

Colonial Pipeline said the leaks involved the personal information of current and former employees.
ZDnet 17 Aug 2021 907 Views

Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets

Valve plugs an API bug found in its Steam platform that that abused the Smart2Pay system to add unlimited funds to gamer digital wallets.
Threatpost 17 Aug 2021 911 Views

Cyberattackers Embrace CAPTCHAs to Hide Phishing, Malware

CAPTCHA-protected malicious URLs are snowballing lately, researchers said.
Threatpost 14 Aug 2021 1201 Views

SynAck ransomware group releases decryption keys as they rebrand to El_Cometa

Emsisoft is creating its own decryption utility based on the decryption keys released by the SynAck ransomware group.
ZDnet 14 Aug 2021 751 Views

Hackers reportedly threaten to leak data from Gigabyte ransomware attack

Gigabyte has been the victim of a cyberattack, which was reportedly the work of a ransomware outfit called RansomEXX.
The Verge 13 Aug 2021 900 Views