Security Stories for 2023

Amnesty International Confirms Apple's Warning to Journalists About Spyware-Infected iPhones 75
Microsoft Disables MSIX Protocol Handler Abused in Malware Attacks 11
Cyberattack Targets Albanian Parliament's Data System, Halting Its Work 2
4-Year Campaign Backdoored iPhones Using Possibly the Most Advanced Exploit Ever 57
CBS, Paramount Owner National Amusements Says It Was Hacked 62
Mint Mobile Discloses New Data Breach Exposing Customer Data 14
US Water Utilities Hacked After Default Passwords Set to '1111', Cybersecurity Officials Say 84
Attack Discovered Against SSH 66
Comcast Discloses Data Breach of Close To 36 Million Xfinity Customers [UPDATE] 40
Insomniac Hacker Releases More Than 1.3 Million Stolen Files, Including Unannounced Games Info 18
Authorities Claim Seizure of Notorious ALPHV Ransomware Gang's Dark Web Leak Site 9
Mr. Cooper Hackers Stole Personal Data on 14 Million Customers 74
Delta Dental of California Data Breach Exposed Info of 7 Million People 20
China Issues Draft Contingency Plan for Data Security Incidents 5
Intelligence Researchers To Study Computer Code for Clues To Hackers' Identities 4
Supply Chain Attack Targeting Ledger Crypto Wallet Leaves Users Hacked 17
Apple's New iPhone Security Setting Keeps Thieves Out of Your Digital Accounts 19
Lazarus Cyber Group Deploys DLang Malware Strains 13
US Healthcare Giant Norton Says Hackers Stole Millions of Patients' Data During Ransomware Attack 27
Reports of Active Directory Vulnerability Allowing DNS Record Spoofs to Steal Secrets 14
Apple Report Finds Steep Increase in Data Breaches, Ransomware 12
Android Vulnerability Exposes Credentials From Mobile Password Managers 22
Nearly Every Windows and Linux Device Vulnerable To New LogoFAIL Firmware Attack 69
AI Models May Enable a New Era of Mass Spying, Says Bruce Schneier 37
Windows 10 Gets Three More Years of Security Updates, If You Can Afford Them 80
Exposed Hugging Face API Tokens Offered Full Access To Meta's Llama 2 11
23andMe Confirms Hackers Stole Ancestry Data on 6.9 Million Users 40
Gmail's AI-Powered Spam Detection Is Its Biggest Security Upgrade in Years 45
Sellafield Nuclear Site Hacked By Groups Linked To Russia and China 26
Is There Really a Shortage of Information Security Workers? 87
Rust Foundation Plans Training/Certification Program. Security Initiative Funded Through 2024 4
ownCloud Vulnerability With Maximum 10 Severity Score Comes Under 'Mass' Exploitation 20
Google Warns China Is Ramping Up Cyberattacks Against Taiwan 15
Dollar Tree Hit By Third-Party Data Breach Impacting 2 Million People 16
Okta Says Hackers Stole Data For All Customer Support Users 14
Hackers Spent 2+ Years Looting Secrets of Chipmaker NXP Before Being Detected 19
India's CERT Given Exemption From Right To Information Requests 5
Researchers Figure Out How To Bypass Fingerprint Readers In Most Windows PCs 25
Why Do So Many Sites Have Bad Password Policies? 242
How Python's New Security Developer Hopes To Help All Software Supply Chains 23
Personal Data Stolen in British Library Cyber-Attack Appears for Sale Online 5
Thousands of Routers and Cameras Vulnerable To New 0-Day Attacks By Hostile Botnet 18
Australia Beefs Up Cyber Defences After Major Breaches 6
USB Worm Unleashed By Russian State Hackers Spreads Worldwide 34
Third-Party Data Breach Affecting Canadian Government Could Involve Data From 1999 4
Nothing's iMessage App Was a Security Catastrophe, Taken Down In 24 Hours 47
Commercial Flights Are Experiencing 'Unthinkable' GPS Attacks 183
Microsoft Celebrates 20th Anniversary of 'Patch Tuesday' 17
Online Atrocity Database Exposed Thousands of Vulnerable People In Congo 6
Ransomware Group Reports Victim It Breached To SEC Regulators 32
Prison Phone Company Leaked 600,000 Users' Data and Didn't Notify Them 45
Developers Can't Seem To Stop Exposing Credentials in Publicly Accessible Code 59
Samsung Says Hackers Accessed Customer Data During Year-Long Breach 7
Children's Tablet Has Malware and Exposes Kids' Data, Researcher Finds 37
Intel Fixes High-Severity CPU Bug That Causes 'Very Strange Behavior' 22
A Lost Bitcoin Wallet Passcode Helped Uncover a Major Security Flaw 22
FBI Struggled To Disrupt Dangerous Casino Hacking Gang, Cyber Responders Say 30
Healthcare Giant McLaren Reveals Data On 2.2 Million Patients Stolen During Ransomware Attack 12
New York Plans Cyber Rules for Hospitals 24
In a First, Cryptographic Keys Protecting SSH Connections Stolen in New Attack 95
A SysAid Vulnerability Is Being Used To Deploy Clop Ransomware, Warns Microsoft 19
Highly Invasive Backdoors Hidden in Python Obfuscation Packages, Downloaded by 2,348 Developers 50
NY AG Issues $450K Penalty To US Radiology After Unpatched Bug Led To Ransomware 25
Microsoft Briefly Restricted Employee Access To OpenAI's ChatGPT, Citing Security Concerns 5
Cyber Attack Forces World's Biggest Bank to Trade via USB Stick 14
Maine Government Says Data Breach Affects 1.3 Million Residents 40
Mortgage Giant Mr. Cooper Shuts Down Systems Following Cyberattack 30
Google-led App Defense Alliance Joins Linux Foundation 17
US Military Members' Personal Data Being Sold By Online Brokers, Report Finds 32
Huawei and Tencent Spearhead China's Hold on Cybersecurity Patents 28
Microsoft Disputes Severity of Four Zero-Day Vulnerabilities Found in Exchange by Trend Micro 26
Okta Breach: 134 Customers Exposed in October Support System Hack 13
Fusus' AI-Powered Cameras Are Spreading Across the United States 33
US House Panel Seeks Ban On Federal Purchases of China Drones 33
Brave Responds To Bing and ChatGPT With a New 'Anonymous and Secure' AI Chatbot 11
Microsoft Overhauling Its Software Security After Major Azure Cloud Attacks 40
Two Russian Nationals Charged For Hacking Taxi System At JFK Airport 48
[Dot]US Harbors Prolific Malicious Link Shortening Service 17
Alliance of 40 Countries To Vow Not To Pay Ransom To Cybercriminals, US Says 52
Apple Warns Indian Opposition Leaders of State-Sponsored iPhone Attacks 29
Hackers Accessed 632,000 Email Addresses at US Justice, Defense Departments 9
Powerful Malware Disguised as Crypto Miner Infects 1M+ Windows, Linux PCs 19
Google Adds Generative AI Threats To Its Bug Bounty Program 3
Ukrainian Hackers and Intel Officers Partner Up In Apparent Hack of a Top Russian Bank 41
Hackers Can Force iOS and macOS Browsers To Divulge Passwords 29
US Conservatives Are Trying To Kill Government's Top Cyber Security Agency 267
Okta Cybersecurity Breach Wipes Out More Than $2 Billion In Market Cap 40
Google Falsely Flags Samsung Apps as 'Harmful,' Tells Users To Remove Them 45
1Password Discloses Security Incident Linked To Okta Breach 27
What's Behind the Cybersecurity Jobs Shortage? 137
OpenBSD 7.4 Released 8
Hackers Stole Access Tokens From Okta's Support Unit 26
The Latest High-Severity Citrix Vulnerability Under Attack Isn't Easy To Fix 3
Hackers Compromise Accounts of Kodex, Company That Vets Police Data Requests For Tech Giants 2
There's a New Way To Flip Bits in DRAM, and It Works Against the Latest Defenses 44
Google-Hosted Malvertising Leads To Fake Keepass Site That Looks Genuine 37
Android Will Now Scan Sideloaded Apps For Malware At Install Time 41
Hacker Leaks Millions More 23andMe User Records On Cybercrime Forum 20
Russia and China-backed Hackers Are Exploiting WinRAR Zero-Day Bug, Google Says 40
Why Switzerland's E-Voting System Is a Bad Idea 65
US Plans To Push Other Countries Not to Pay Hacker Ransoms 36
To 'Evolve' Windows Authentication, Microsoft Wants to Eventually Disable NTLM in Windows 11 68
Across US, Chinese Bitcoin Mines Draw National Security Scrutiny 23
Equifax Scores $13.6 Million Slap on Wrist Over 2017 Mega Breach 25
Cisco Can't Stop Using Hard-Coded Passwords 30
Europe Mulls Open Sourcing TETRA Emergency Services' Encryption Algorithms 18
Cloud Gaming Firm Shadow Says Hackers Stole Customers' Personal Data 7
State-backed Hackers Are Exploiting New 'Critical' Atlassian Zero-Day Bug 18
HTTP/2 Zero-Day Exploited To Launch Largest DDoS Attacks In History 25
Google Makes Passkeys the Default Sign-in Method For All Users 230
Hacktivism Erupts In Response To Hamas-Israel War 340
Red Hat, Ubuntu, Debian, and Gentoo Release Patches for 'Looney Tunables' Linux Vulnerability 22
For 'Cybersecurity Awareness Month' America's Cybersecurity Agency Shares Four Online Safety Tips 34
Android Devices With Backdoored Firmware Found In US Schools 36
23andMe Scraping Incident Leaked Data On 1.3 Million Users 25
NSA Shares Top Ten Cybersecurity Misconfigurations 31
MGM Says Computer Hack Will Cost It $100 Million In Lost Profit 59
Microsoft Won't Say If Its Products Were Exploited By Spyware Zero-Days 13
Linux Tries To Dump Windows' Notoriously Insecure RNDIS Protocol 35
Clorox Security Breach Linked to Group Behind Casino Hacks 23
The Google Pixel 8 is Official With 7 Years of Updates 77
FBI Most-Wanted Russian Hacker Reveals Why He Burned His Passport 124
Vulnerable Arm GPU Drivers Under Active Exploitation, Patches May Not Be Available 30
Dead Grandma Locket Request Tricks Bing Chat's AI Into Solving Security Puzzle 40
IronNet, Founded by Former NSA Director, Shuts Down 6
NSA Is Starting an AI Security Center 13
Bing Chat Responses Infiltrated By Ads Pushing Malware 14
Security Researcher Warns of Chilling Effect After Feds Search Phone At Airport 97
Backdoored Firmware Lets China State Hackers Control Routers With 'Magic Packets' 52
Russian Zero-Day Seller Offers $20 Million for Hacking Android and iPhones 33
GPUs From All Major Suppliers Are Vulnerable To New Pixel-Stealing Attack 26
Google Is Retiring Its Gmail Basic HTML View In January 2024 79
A Ransomware Group Claims To Have Breached 'All Sony Systems' 57
Behind the Scenes at 'Have I Been Pwned' 22
Did Teens Ally with Ransomware Gangs for MGM Breach? 24
MGM Resorts Computers Back Up After 10 Days as Analysts Eye Effects of Casino Cyberattacks 31
Chinese Hackers Have Unleashed a Never-Before-Seen Linux Backdoor 35
US Federal Agencies Seek to Streamline 'Hodgepodge' of Cyber Reporting Rules 7
Clorox Products In Short Supply After Cyberattack 37
Las Vegas Still Struggling to Recover from Last Sunday's Cyberattack 46
Lina Khan Got Stuck in the Fallout of the MGM Hack at Las Vegas 51
Iranian Hackers Target Satellite and Defense Firms, Microsoft Says 4
How Google Authenticator Made One Company's Network Breach Much, Much Worse 79
Hackers Claim It Only Took a 10-Minute Phone Call To Shut Down MGM Resorts 51
Password-Stealing Linux Malware Served For 3 Years and No One Noticed 54
Mozilla Patches Firefox, Thunderbird Against Zero-Day Exploited in Attacks 15
China Flags 'Security Incidents' With Apple's iPhones 40
Zara Finds Shoplifters Outsmarted Its New Security System 97
How a Breached Microsoft Engineer Account Compromised the Email Accounts of US Officials 38
'Security Concerns' Caused Three-Day Internet Outage at the University of Michigan Last Week 19
Wyze Security Camera Owners Were Briefly Able To See Feeds From Other Users 47
Apple Fixes Zero-Day Bugs Used To Plant Pegasus Spyware 20
New Flaw in Apple Devices Led To Spyware Infection, Researchers Say 35
Internet-Connected Cars Fail Privacy and Security Tests Conducted By Mozilla 26
Experts Fear Crooks Are Cracking Keys Stolen In LastPass Breach 74
Why Are GoDaddy's .US Domains Being Used For So Much Phishing? 23
Cybercrime To Cost Germany 206 Billion Euros in 2023, Survey Finds 9
LogicMonitor Customers Hit By Hackers, Because of Default Passwords 25
Russia Targets Ukraine With New Android Backdoor, Intel Agencies Say 24
Google Removes Fake Signal and Telegram Apps Hosted on Play 12
Hackers Shut Down 2 of the World's Most Advanced Telescopes 36
MTA Website 'Feature' Lets You Track Subway Riders' Locations 23
Benevolent Hackers Clear Stalking Spyware From 75,000 Phones 21
FBI Dismantles a Malware System That Took Millions in Ransom 19
Poland's Railways Halted by Radio Hack 58
Hackers Can Silently Grab Your IP Through Skype 56
Gmail To Start Issuing 2FA Challenges To Change 'Sensitive' Settings 89
WinRAR 0-Day That Uses Poisoned JPG and TXT Files Under Exploit Since April 30
Rust Users Push Back as Popular 'Serde' Project Ships Precompiled Binaries 17
WinRAR Flaw Lets Hackers Run Programs When You Open RAR Archives 41
White House Orders Federal Agencies To Shore Up Cybersecurity, Warns of Potential Exposure 15
Major US Energy Organization Targeted In QR Code Phishing Attack 13
Cyberattack On Listings Provider Halts US Real Estate Markets 24
Congressman Bacon Says His Emails Were Hacked in Campaign Linked To China 22
Discord.io Temporarily Shuts Down After Breach Affecting 760,000 Members 3
Millions of Americans' Health Data Stolen After MOVEit Hackers Targeted IBM 24
Bomb Threat Causes Mass Evacuation at DEF CON Hacking Convention 45
An Apple Malware-Flagging Tool Is 'Trivially' Easy To Bypass 9
Microsoft Spotted 15 High-Security Vulnerabilities in Industrial SDK Used by Power Plants 23
Teens Hacked Boston Subway Cards For Infinite Free Rides, and This Time Nobody Got Sued 38
US Spy Agencies Will Start Sharing More Cyber-Threat Intelligence with Private Companies 17
Homeland Security Report Details How Teen Hackers Exploited Security Weaknesses In Some of the World's Biggest Companies 31
Belarus Hackers Target Foreign Diplomats With Help of Local ISPs, Researchers Say 16
Researchers Watched 100 Hours of Hackers Hacking Honeypot Computers 34
Pentagon Launches AI Competition To Solicit Help Securing Computer Systems 7
Intel DOWNFALL: New Vulnerability In AVX2/AVX-512 With Big Performance Hits 68
Google Chrome Switching To Weekly Security Patch Updates 28
White House Holds First-Ever Summit On the Ransomware Crisis Plaguing the Nation's Public Schools 76
Millions of UK Voters' Data Accessible In Cyber Attack 14
Spyware Maker LetMeSpy Shuts Down After Hacker Deletes Server Data 20
New (Deep Learning-Enhanced) Acoustic Attack Steals Data from Keystrokes With 95% Accuracy 50
A Cyberattack Has Disrupted Hospitals and Health Care in Several States 20
Hackers Could Have Scored Unlimited Airline Miles By Targeting One Platform 5
Microsoft Comes Under Blistering Criticism For 'Grossly Irresponsible' Security 55
Canon Warns Printer Users To Manually Wipe Wi-Fi Settings Before Discarding 37
Could NIST Delays Push Post-Quantum Security Products Into the Next Decade? 45
AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs 40
MOVEit Hackers Accessed Health Data of 'At Least' 8 Million Individuals 12
Kenya Reports Cyber Attacks Causing Government System Outages 11
SEC Now Requires Companies To Disclose Cyberattacks In 4 Days 17
Hackers Are Infecting Call of Duty Players With a Self-spreading Malware 36
Researchers Find 'Backdoor' in Encrypted Police and Military Radios 105
Norway Government Ministries Hit By Cyber Attack 14
Roblox Data Leak Sees 4,000 Developer Profiles Including Identifying Information Made Public 10
Hacking of Government Email Was Traditional Espionage, NSA Official Says 20
Ukraine Takes Down Massive Bot Farm, Seizes 150,000 SIM Cards 128
Firmware Vulnerabilities In Millions of Computers Could Give Hackers Superuser Status 23
Google Messages To Support MLS Protocol For Interoperable E2E Encrypted Messaging 21
Microsoft To Offer Some Free Security Products After Criticism 16
Google Restricting Internet Access To Some Employees To Reduce Cyberattack Risk 58
US Government Launches Its Long-Awaited IoT Security Labeling Program 22
JumpCloud, an IT Firm Serving 200,000 Orgs, Says It Was Hacked By Nation-State 28
Typo Leaks Millions of US Military Emails To Mali Web Operator 52
Malicious Microsoft Drivers Could Number in the Thousands, Says Cisco Talos 36
SEO Expert Hired and Fired By Ashley Madison Turned on Company, Promising Revenge 28
macOS Sonoma Brings Apple Password Manager To Third-Party Browsers 19
Chinese Hackers Raided US Government Email Accounts By Exploiting Microsoft Cloud Bug 27
UK Battles Hacking Wave as Ransomware Gang Claims 'Biggest Ever' NHS Breach 26
France Passes New Bill Allowing Police To Remotely Activate Cameras On Citizens' Phones 132
Actively Exploited Vulnerability Threatens Hundreds of Solar Power Stations 23
Security Researchers Latest To Blast UK's Online Safety Bill As Encryption Risk 5
336,000 Servers Remain Unpatched Against Critical Fortigate Vulnerability 23
Despite Amazon Ban, Flipper Zero's 'Multi-Tool Device for Hackers' On Track for $80M in Sales 80
Schools Say US Teachers' Retirement Fund Was Breached By MOVEit Hackers 15
TSMC Says Some Of Its Data Was Swept Up in a Hack on a Hardware Supplier 1
High School in Illinois Changes Every Student's Password To 'Ch@ngeme!' 77
SEC Notice To SolarWinds CISO and CFO Roils Cybersecurity Industry 34
LetMeSpy, a Phone Tracking App Spying On Thousands, Says It Was Hacked 18
Smartwatches Are Being Used To Distribute Malware 17
Twitter Hacker Who Turned Celebrity Accounts Into Crypto Shills Gets Prison Sentence 14
Turn Your Phone Off Every Night For Five Minutes, Australian PM Tells Residents 126
Eight Teams of Hackers Will Compete To Breach U.S. Satellite In Space 9
Hospital Cyber Attacks Surge, Risking Struggling Bottom Lines 40
SMS Phishers Harvested Phone Numbers, Shipment Data From UPS Tracking Tool 12
Latest SUSE Linux Enterprise Goes All in With Confidential Computing 7
ASUS Urges Customers To Patch Critical Router Vulnerabilities 25
Microsoft Says Early June Disruptions To Outlook, Cloud Platform, Were Cyberattacks 25
Hackers Threaten To Leak 80GB of Confidential Data Stolen From Reddit 61
Security Expert Defeats Lenovo Laptop BIOS Password With a Screwdriver 31
Millions of Americans' Personal Data Exposed in Global Hack 17
US Government Agencies Hit In Global Cyberattack 19
Mandiant Says China-backed Hackers Exploited Barracuda Zero-Day To Spy on Governments 34
JPL Creates World's Largest PDF Archive to Aid Malware Research 21
Hackers Can Steal Cryptographic Keys By Video-Recording Power LEDs 60 Feet Away 26
UK Communications Regulator Ofcom Says Hackers Stole Confidential Data 5
Barracuda Urges Replacing, Not Patching, Its Email Security Gateways 90
Google's Password Manager Gains Biometric Authentication on Desktop 18
iOS 17 Automatically Removes Tracking Parameters From Links You Click On 54
Malwarebytes Faces Lawsuit For Classifying Rival's Anti-Spyware Program As a Threat 38
Microsoft Says Clop Ransomware Gang Is Behind MOVEit Mass-Hacks 12

Page: 1 2 →

"It's the best thing since professional golfers on 'ludes." -- Rick Obidiah