Security Stories for 2021

Sega Left One of Its European Servers Wide Open 5
'Critical' Polygon Bug Put $24 Billion in Tokens at Risk Until Recent Hard Fork 16
Microsoft Defender Log4j Scanner Triggers False Positive Alerts 18
Attackers in China Using Open-source Log4j Flaw 24
Iranian Hackers Behind Cox Media Group Ransomware Attack 4
T-Mobile Suffers Another Data Breach 6
Cyberattack On One of Norway's Largest Media Companies Shuts Down Presses 11
LastPass Says It Didn't Leak Your Password 25
Shutterfly Services Disrupted By Conti Ransomeware Attack 21
More Than 1,200 Phishing Toolkits Capable of Intercepting 2FA Detected in the Wild 52
Will It Take More Than Open Source Funding To Prevent the Next Log4j? 110
Personal and Salary Data for 637,138 Albanian Citizens Leaks Online 15
White House Enlists Software Industry To Improve Open-Source Security 63
New Log4J Flaw Caps Year of Relentless Cybersecurity Crises 77
Second Ransomware Family Exploiting Log4j Spotted In US, Europe 16
China Regulators Suspend Alibaba Cloud Partnership Over Log4Shell Reporting 29
A Growing Army of Hackers Helps Keep Kim Jong Un in Power 52
Belgian Defense Ministry Confirms Cyberattack Through Log4j Exploitation 10
UK National Crime Agency Finds 225 Million Previously Unexposed Passwords 11
Study Finds 'Serious Security Risks' In K-12 School Apps 16
The NCA Shares 585 Million Passwords With 'Have I Been Pwned' 20
More Than 35,000 Java Packages Impacted by Log4j Vulnerabilities, Google Says 39
Security Flaws Found in a Popular Guest Wi-Fi System Used in Hundreds of Hotels 25
Ransomware Attack on Major Payroll System Kronos May Take 'Weeks' to Repair 76
Security Firm Blumira Discovers Major New Log4j Attack Vector 91
Google Says NSO Pegasus Zero-Click 'Most Technically Sophisticated Exploit Ever Seen' 106
Firefox Fixes Password Leak via Windows Cloud Clipboard Feature 13
US Lawmakers Call For Sanctions Against Israel's NSO, Spyware Firms 25
Mitto Tells Clients That Co-Founder Departed After Allegations of Phone Spying 2
Hackers Backed by China Seen Exploiting Security Flaw in Internet Software 41
Ukraine Arrests 51 For Selling Data of 300 Million People In US, EU 11
Hackers Steal $140 Million From Users of Crypto Gaming Company 27
Spyware Firm NSO Mulls Shutdown of Pegasus Unit, Sale of Company 14
Software Flaw Sparks Global Race To Patch Bug 60
Data on Tens of Thousands of South Australian Government Employees Breached in Ransomware Attack 20
Brazil Health Ministry Website Hit By Hackers, Vaccination Data Targeted 17
Volvo Discloses Security Breach Leading To Data Theft 14
New Zero-Day In the Log4j Java Library Is Already Being Exploited 122
Microsoft Launches Center for Reporting Malicious Drivers 27
Cox Discloses Data Breach After Hacker Impersonates Support Agent 16
New German Government Coalition Promises Not To Buy Exploits 18
Over 40 Million People Had Health Information Leaked This Year 25
Missouri Planned To Thank 'Hacker' Journalist Before Governor Accused Him of Crimes 57
Microsoft Seizes Domains Used By Chinese Cyber-Espionage Group 'Nickel' 26
SolarWinds Hackers Have a Whole Bag of New Tricks For Mass Compromise Attacks 43
A Mysterious Threat Actor is Running Hundreds of Malicious Tor Relays 20
Someone Stole $120 Million in Crypto From a DeFi Website 72
Nine WiFi Routers Used by Millions Were Vulnerable to 226 Flaws 74
FBI Says the Cuba Ransomware Gang Made $43.9 Million from Ransom Payments 14
Former Ubiquiti Dev Charged For Trying To Extort His Employer 20
Really Stupid 'Smart Contract' Bug Let Hackers Steal $31 Million In Digital Coin 55
Thousands of AT&T Customers in the US Infected by New Data-stealing Malware 10
Over 300,000 Android Users Have Downloaded These Banking Trojan Malware Apps, Say Security Researchers 23
The Virtual Phone Farms Scammers Use To Set Up Fake Accounts 22
Finland Battles 'Exceptional' Malware Attack Spread by Phones 27
Israel and Iran Broaden Cyberwar To Attack Civilian Targets 31
New Windows Zero-Day With Public Exploit Lets You Become An Admin 57
Attackers Don't Bother Brute-forcing Long Passwords, Microsoft Engineer Says 100
GoDaddy Security Breach Exposes WordPress Users' Data 9
Ask Slashdot: Where Are All the Jobs Preventing Zero-Day Exploits? 112
GitHub Fixes a Private-Package-Names Leak and Serious Authorization Bug 21
Thousands of Firefox Users Accidentally Commit Login Cookies On GitHub 52
Russian Ransomware Gangs Start Collaborating With Chinese Hackers 11
Linux Has a Serious Security Problem That Once Again Enables DNS Cache Poisoning 66
US Says Iran-backed Hackers Are Now Targeting Organizations With Ransomware 18
Robinhood Hack Also Included Thousands of Phone Numbers 6
Cloudflare Blocked a Massive 2 Tbps DDoS Attack 18
Emotet Botnet Returns After Law Enforcement Mass-Uninstall Operation 6
High Severity BIOS Flaws Affect Numerous Intel Processors 43
HPE Says Aruba Customer Data Compromised After Data Breach 2
FBI Website Exploit Leads To Spam-Blast 'From' FBI.gov 14
Costco Disclosed Data Breach After Finding Credit Card Skimmer 17
Researchers Wait 12 Months To Report Vulnerability With 9.8 Out of 10 Severity Rating 36
Google Caught Hackers Using a Mac Zero-Day Against Hong Kong Users 13
REvil: Day of Reckoning For Notorious Cyber Gang 18
Robinhood Says It Was Hacked and Extorted But Nobody Lost Any Money 16
McAfee To Be Taken Private in $14 Billion Deal Including Debt 18
China Says a Foreign Spy Agency Hacked Its Airlines, Stole Passenger Records 20
CNN: Foreign Hackers Breached Nine Organizations to Steal 'Key Data' from 'Sensitive Targets' 28
SolarWinds Investors Allege Board Knew About Cyber Risks 12
N.L. Health-Care Cyberattack Is Worst In Canadian History 24
US Offers $10 Million Bounty For DarkSide Ransomware Operators 19
The Booming Underground Market for Bots That Steal Your 2FA Codes 91
Cyber Official Warns 'American Way of Life' at Risk From Hackers 42
Linux Foundation Adds Software Supply Chain Security To LFX 12
'Destructive' Cyberattack Hits National Bank of Pakistan 6
'Trojan Source' Bug Threatens the Security of All Code 88
Newly-Discovered 'AbstractEmu' Malware Rooted Android Devices, Evaded Detection 34
You Can Now Remotely Access Your Tesla's Camera - and Talk to People 41
Hive Ransomware Now Encrypts Linux and FreeBSD Systems 26
Ransomware Has Disrupted Almost 1,000 Schools In the US This Year 7
Zales.com Leaked Customer Data, Just Like Sister Firms Jared and Kay Jewelers Did In 2018 14
A Security Bug in Health App Docket Exposed COVID-19 Vaccine Records 49
A Cyberattack Paralyzed Every Gas Station In Iran 36
DeFi Protocol Cream Finance Loses $130 Million in Latest Crypto Hack 27
Ransomware Gang Claims Attack on NRA 210
FBI Raids Chinese Point-of-Sale Giant PAX Technology 35
Microsoft Says Russia Hacked at Least 14 IT Service Providers this Year 29
Traffic-Redirecting Rootkit Somehow Got a Microsoft-issued Digital Signature 26
The Man Who Stole and Then Sold Data on 178 Million Facebook Users Gets Sued by Facebook 70
Sinclair Workers Say TV Channels Are In 'Pandemonium' After Ransomware Attack 33
Governments Turn Tables On Ransomware Gang REvil By Pushing It Offline 20
Google Unmasks Two-year-old Phishing and Malware Campaign Targeting YouTube Users 19
Sinclair Broadcast Hack Linked To Notorious Russian Cybergang 22
About 26% of All Malicious JavaScript Threats Are Obfuscated 18
Hacker Steals Government ID Database for Argentina's Entire Population 41
Credit Card PINs Can Be Guessed Even When Covering the ATM Pad 58
US Treasury Says It Tied $5.2 Billion in BTC Transactions To Ransomware Payments 36
Sinclair TV Stations Disrupted Across the US After Ransomware Attack 59
International 'US Cyber Games' Competition Seeks Next Generation of Cybersecurity Experts 23
'Dirty Servers': The Untold Story of The Great Twitch Breach of 2014 8
US Govt Reveals Three More Ransomware Attacks on Water Treatment Plants This Year 10
Acer Confirms It Was Hacked Again As Culprits Flaunt 60GB of Stolen Customer Data 15
Apple Argues Against Allowing App Sideloading By Pointing Out Android's Malware Figures 66
How Coinbase Phishers Steal One-Time Passwords 9
Some of Verizon's Visible Cell Network Customers Say They've Been Hacked 3
Study Reveals Android Phones Constantly Snoop On Their Users 113
Woman Allegedly Hacked Flight School, Cleared Planes With Maintenance Issues To Fly 67
Olympus Confirms US Cyberattack, Weeks After BlackMatter Ransomware Hit EMEA Systems 12
Microsoft Says It Mitigated a 2.4 Tbps DDoS Attack, the Largest Ever 39
Google Unveils Cybersecurity Programs and Action Team 21
LibreOffice, OpenOffice Bug Allows Hackers To Spoof Signed Docs 7
Google Pulls 'Stalkerware' Ads That Promoted Phone Spying Apps 9
What Really Motivated the Breaches of Twitch and Epik? 21
New 'FontOnLake' Malware Family Can Target Linux Systems 26
Google Warns 14,000 Gmail Users Targeted By Russian Hackers 13
BrewDog Exposes Data of 200,000 Customers and Shareholders 13
Google To Give Security Keys To 'High Risk' Users Targeted by Government Hackers 23
Twitch Defaced With Pictures of Jeff Bezos 18
Car Thieves Arrested After Using $27,000 Game Boy Device 104
Hackers of SolarWinds Stole Data On US Sanctions Policy, Intelligence Probes 12
Microsoft: Russia Behind 58% of Detected State-backed Hacks 33
Twitch's Security Problems Started Long Before This Week's Hack 19
US To Tell Critical Rail, Air Companies To Report Hacks, Name Cyber Chiefs 23
Navy Facebook Account Hacked To Stream 'Age of Empires' 37
Twitch Source Code and Business Data Leaked 66
Google Is About To Turn On Two-Factor Authentication By Default For Millions of Users 108
Ransomware Bill Would Give Victims 48 Hours To Report Payments 89
Apache Fixes Actively Exploited Web Server Zero-day 34
UK Plans To Invest 5 Billion Pounds In Retaliatory Cyberattacks 57
Ukrainian Cops Cuff Two Over $150 Million Ransomware Gang Allegations, Seize $1.3 Million In Cryptocurrency 8
Researcher Refuses Telegram's Bounty Award, Discloses Auto-Delete Bug 6
Company That Routes Billions of Text Messages Quietly Discloses It Was Hacked 33
Millions Experience Browser Problems After Long-Anticipated Expiration of 'Let's Encrypt' Certificate 94
Neiman Marcus Discloses a 2020 Data Breach That Impacted 4.6 Million Customers 11
Hackers Bypass Coinbase 2FA To Steal Customer Funds 13
Former OnlyFans Employees Could Access Users' and Models' Personal Information 18
Apple Pay With Visa Hacked To Make Payments Via Unlocked iPhones 48
Telegram Bots Are Trying To Steal Your One-time Passwords 12
Chinese Espionage Group Deploys New Rootkit Compatible With Windows 10 Systems 18
Anonymous: We've Leaked Disk Images Stolen From Web Host Epik 107
New GriftHorse Malware Infects More Than 10 Million Android Phones 30
Apple AirTag Bug Enables 'Good Samaritan' Attack 29
German IT Security Watchdog Examines Xiaomi Mobile Phone 16
Russian Authorities Arrest Cybersecurity Giant Group-IB's CEO on Treason Charges 30
Microsoft Knew of Exchange Autodiscover Flaw Five Years Ago 22
NSA, CISA Publish Guide for Securing VPN Servers 31
Cloudflare Is Taking a Shot at Email Security 46
VoIP.ms Battles Week-Long Sustained DDoS-for-Ransom Attack 37
Microsoft Rushes To Register Autodiscover Domains Leaking Credentials 20
ExpressVPN Employees Complain About Ex-Spy's Top Role At Company 28
Researcher Dumps Three iOS Zero-days After Apple Failed To Fix Issues for Months 64
Hackers Breached Computer Network At Key US Port But Did Not Disrupt Operations 17
2021 Has Broken the Record For Zero-Day Hacking Attacks 17
US Committee Is Reviewing Zoom's $14.7 Billion Deal For Five9 On National-Security Grounds 11
FBI Held Back Ransomware Decryption Key From Businesses To Run Operation Targeting Hackers 45
Crypto Channels Targeted in Biden's Fight Against Ransomware 19
Researcher Discloses iPhone Lock Screen Bypass on iOS 15 Launch Day 25
BlackMatter Hits Grain Cooperative With Ransomware Attack 25
Alaska Discloses 'Sophisticated' Nation-State Cyberattack on Health Service 11
Web Host Epik Was Warned of a Critical Security Flaw Weeks Before it Was Hacked 31
A US Company Sold iPhone Hacking Tools To UAE Spies 19
Free REvil Ransomware Master Decrypter Released For Past Victims 7
Ransomware Encrypts South Africa's Entire Department of Justice Network 59
Travis CI Flaw Exposed Secrets of Thousands of Open Source Projects 28
ExpressVPN Knew 'Key Facts' of Executive Who Worked For UAE Spy Unit 11
Emergency Software Patches Are on the Rise 43
Anonymous Hacks Epik Web Hosting 61
SEC Charges App Annie With Securities Fraud in $10 Million Settlement 10
Apple Patches a NSO Zero-Day Flaw Affecting All Devices 29
Technology Giant Olympus Hit by BlackMatter Ransomware 15
Personal Data About Millions of Children Stolen from Schools, Leaked onto the Darkweb 32
Krebs Also Hit By Massive DDOS, Apparently Caused by Compromised Routers 31
Indonesian Intelligence Agency Compromised in Suspected Chinese Hack 26
Apple Pays Hackers Six Figures To Find Bugs in Its Software. Then It Sits On their Findings. 23
Wide-Ranging SolarWinds Probe Sparks Fear in Corporate America 22
Hacker Lawyer Jay Leiderman Is Dead at 50 79
Russia's Yandex Says It Repelled Biggest DDoS Attack in History 39
Notorious Russian Ransomware Group 'REvil' Has Reappeared 9
McDonald's Leaks Password For Monopoly VIP Database To Winners 33
Howard University Announces Ransomware Attack, Shuts Down Classes On Tuesday 52
Ghostscript Zero-Day Allows Full Server Compromises 40
Malware Found Preinstalled In Classic Push-button Phones Sold In Russia 40
In Novel Attack Technique, Salesforce Email Service Used For Phishing Campaign 21
Banksy Was Warned About Website Flaw Before NFT Hack Scam 29
Chinese Hackers Behind July 2021 SolarWinds Zero-day Attacks 13
Gift Card Gang Extracts Cash From 100K Inboxes Daily 10
Seemingly Normal Lightning Cable Will Leak Everything You Type 51
Juniper Breach Mystery Starts To Clear With New Details on Hackers and US Role 19
Code.org Will Teach 'Cybersecurity Hygiene' to Millions of Students 29
How Microsoft, Google, Apple, and IBM Will Help the US Improve Its Cybersecurity 19
T-Mobile Says Hacker Used Specialized Tools, Brute Force 20
Academics Bypass PINs for Mastercard and Maestro Contactless Payments 10
Microsoft Warns Thousands of Cloud Customers of Exposed Databases 43
T-Mobile Hacker Explains How He Breached Carrier's Security 26
China's Microsoft Hack May Have Had A Bigger Purpose Than Just Spying 43
Coinbase Slammed For Terrible Customer Service After Hackers Drain Accounts 57
Hackers Release Data Trove From Belarus in Bid To Overthrow Lukashenko Regime 56
FBI Sends Its First-Ever Alert About a 'Ransomware Affiliate' 8
Hundreds of Thousands of Realtek-based Devices Under Attack from IoT Botnet 13
38 Million Records Were Exposed Online -- Including Contact-Tracing Info 19
Gain Admin Privileges To a Windows Machine By Plugging In a Razer Mouse 85
Cloudflare Says It Mitigated a Record-Breaking 17.2 Million HTTP RPS DDoS Attack 10
T-Mobile Says At Least 47 Million Current and Former Customers Affected by Hack 51
Apple's NeuralHash Algorithm Has Been Reverse-Engineered 86
BlackBerry Resisted Announcing Major Flaw in Software Powering Cars, Hospital Equipment 40
Healthcare Provider Expected To Lose $106.8 Million Following Ransomware Attack 45
Critical Bug Impacting Millions of IoT Devices Lets Hackers Spy On You 42
Firewalls and Middleboxes Can Be Weaponized For Gigantic DDoS Attacks 65
The Mysterious Figure Stealing Books Before Their Release 19
Chinese Espionage Tool Exploits Vulnerabilities In 58 Widely Used Websites 23
Stop Using Zoom, Hamburg's DPA Warns State Government 25
Linux Glibc Security Fix Created a Nastier Linux Bug 74
T-Mobile Confirms It Was Hacked 20
Secret Terrorist Watchlist With 2 Million Records Exposed Online 87
Pearson To Pay $1 Million Fine for Misleading Investors About 2018 Data Breach 15
T-Mobile is Investigating an Alleged Data Breach That Would Affect 100 Million Users 37
Activist Raided By London Police After Downloading Docs Found On Google Search 139
Accenture Downplays Ransomware Attack as LockBit Gang Leaks Corporate Data 15
NortonLifeLock and Avast PLC To Merge In $8.4 Billion Transaction 19
Researchers Create 'Master Faces' To Bypass Facial Recognition 38
Microsoft To Require Admin Rights Before Using Windows Point and Print Feature 53
Cross-Chain DeFi Site Poly Network Hacked; Hundreds of Millions Potentially Lost 85
DEF CON: Security Holes In Deere, Case IH Shine Spotlight On Agriculture Cyber Risk 48
Google Drops Bluetooth Titan Security Keys In Favor of NFC Versions 19
Routers and Modems Running Arcadyan Firmware Are Under Attack 24
Disgruntled Member of 'Conti' Ransomware Gang Leaks Files 40
Researchers Discover Three-Way Cyberattack by Chinese Military Actors against Southeast Asian Telcos 18
How a Security Researcher Took Over a Hotel's IoT Devices 36
US Developer's Workstation Exposed State Department's Network Data, Researchers Find 16
Ransomware Attack Forces Indiana Hospital To Turn Ambulances Away 41
Motherboard Vendor GIGABYTE Hit By RansomExx Ransomware Gang 34
Apple Confirms It Will Begin Scanning iCloud Photos for Child Abuse Images 135
Microsoft Announces 'Super Duper Secure Mode' for Edge 51
US Taps Amazon, Google, Microsoft, Others To Help Fight Ransomware, Cyber Threats 24
The State Department and 3 Other US Agencies Earn a D For Cybersecurity 43
Passwordstate Customers Complain of Silence and Secrecy After Cyberattack 17
Amazon and Google Patch Major Bug in Their DNS-as-a-Service Platforms 11
Microsoft Exchange Used To Hack Diplomats Before 2021 Breach 5
Google Chrome To No Longer Show Secure Website Indicators 68

Page: 1 2 →

"It's the best thing since professional golfers on 'ludes." -- Rick Obidiah