The U.S. House of Representatives has decided to ban the use of WhatsApp on all government-issued devices. This move comes after the House Office of Cybersecurity labeled the messaging app as a “high-risk application” due to concerns around data protection and transparency. In a recent internal memo, the House told all congressional staffers that they … Continued
A Chinese state-sponsored hacking group named Salt Typhoon has been linked to a cyberattack on a Canadian telecommunications company. This group used a serious vulnerability in Cisco networking equipment to carry out the attack. The incident was confirmed by the Canadian Centre for Cyber Security (CCCS) and the FBI. The hackers targeted Cisco IOS XE … Continued
A well known Russian hacking group named APT28, also known as Fancy Bear, has started using Signal, a private messaging app, to deliver malware to Ukrainian government systems. This method is unusual because Signal is considered one of the most secure apps in the world. It’s mostly used by journalists, government officials, and cybersecurity professionals … Continued
Security researchers have discovered two critical vulnerabilities in Amazon Elastic Kubernetes Service (EKS) that could allow attackers to access AWS credentials and escalate privileges. These flaws come from how container permissions are configured in certain scenarios and show how small misconfigurations can lead to serious security risks. Amazon EKS is a managed service by AWS … Continued
Recently, the largest steel producer in the United States, Nucor Corporation, confirmed that it was hit by a cyberattack where hackers stole company data. This incident forced the company to shut down some of its systems and also led to temporary production delays at multiple locations. The attack was made public in a document filed … Continued
A major cyberattack has recently set a new global record, and it’s one that security experts won’t forget any time soon. A powerful Distributed Denial-of-Service (DDoS) attack targeted a hosting provider, reaching a peak speed of 7.3 terabits per second and transferring over 37 terabytes of data in under a minute. Thankfully, the targeted company … Continued
In a recent discovery, security researchers have found more than 200 malicious repositories on GitHub that were part of a large-scale campaign targeting gamers and developers. These projects appeared to be normal open-source tools like game cheats, Telegram bots, or social media utilities. But behind the scenes, they were designed to deliver malware to anyone … Continued
A dangerous new version of the “Godfather” Android malware has been discovered, and this time it’s using a much more advanced method to hack into banking apps. Instead of showing fake login screens like before, this updated malware now runs real banking apps in a virtual environment on your phone, stealing everything you type without … Continued
A Russian government-backed hacking group known as APT29, or Cozy Bear, has launched a clever phishing campaign targeting Gmail users. What’s worrying is how they bypassed Google’s two-factor authentication (2FA) without needing to steal passwords directly. Instead, they tricked users into creating something called an app password, which lets hackers access the account without needing … Continued
A major cyberattack has hit Iran’s largest cryptocurrency exchange, Nobitex, resulting in the destruction of around $90 million worth of crypto assets. This wasn’t a theft, it was a deliberate burn. The group behind the attack is called Predatory Sparrow, also known by its Farsi name Gonjeshke Darande. They are believed to be linked to … Continued
