Google's Old Location Settings Cost It 403 Million Euros in Ireland
Ireland's Data Protection Commission has fined Google 403 million euros, about $463 million, for the way the company collected and kept location data…
Fake Job Interviews Infected 30,000 Developer Machines for North Korea, Agencies Say
The job offer looks real. The company has a website, the recruiter is friendly, and the technical interview comes with a small coding task: download…
One Hardcoded Cloudflare Key Turned Brevo Widgets Into a Malware Channel
For several hours on Monday, scripts that a very large number of websites load from the marketing platform Brevo were rewritten to attack the people…
Cisco Email Gateways Can Be Taken Over by a Single Crafted Message
An attacker who wants to take control of a Cisco Secure Email Gateway does not need a password, a stolen session or a way onto the network. They need…
GitLab Flaw Rated 10.0 Lets Outsiders Read Server Files, and Scans Have Begun
GitLab has fixed a vulnerability in its self managed product that lets someone with no account read arbitrary files from the server, and attackers…
The Company That Scans IDs at the Counter Says Its Cloud Was Breached
Anyone who has handed a driver's license across the counter at a car rental desk, a dispensary or a gun shop in the United States may have had it…
DoppelCart Network Runs 119,000 Fake Shops on the Identities of Real Brands
A German security company has traced roughly 119,000 web domains to a single fake shop operation, which it believes is the largest of its kind ever…
Latest
-
AppSecMagento Stores Hit Through an Unpatched Flaw as Adobe Rushes Out a Hotfix
Online stores built on Magento and Adobe Commerce have been under attack since Friday…
-
MalwareThousands of Small Business Sites Now Pull Fake CAPTCHA Malware From a Blockchain
A visitor loads the website of a local clinic or a plumbing firm, and the page blurs. A…
-
IdentityDropbox Accounts Were Opened Through Lenovo IDs the Owners Never Created
Dropbox has begun telling some of its users that a stranger was able to get into their…
-
Cloud & InfraEspionage Group Fire Ant Moves From Hypervisors to Cisco Routers and Login Servers
It started with a tunnel that should not have been there. Investigators from the incident…
-
VulnerabilitiesPaperCut Needed a Second Emergency Patch After Researchers Bypassed the First
Organizations that run PaperCut print management servers had a rough end to the week. On…
-
BreachesManchester Airports Group Confirms Theft of Parking and Lounge Booking Data
Manchester Airports Group, which runs Manchester, London Stansted and East Midlands…
-
CybercrimeUS Seizes Domains That Kept a Chinese Espionage Proxy Network Running
The US Justice Department and the FBI said on Wednesday that they have seized three…
-
MalwareAftermarket Android Car Stereos Were Fed Botnet Malware Through Their Own Updater
Car infotainment units have joined the list of devices that criminals quietly rent out as…
-
IdentityMicrosoft Fixed a Maximum Severity Entra ID Bug and Briefly Called It Exploited
For about a day this week, Microsoft's own security advisory said that a flaw with the…
-
Cloud & InfraFederal Advisory Warns of AI Built Attack Tools Aimed at Siemens Plant Controllers
Five US government agencies warned on Wednesday that attackers are using scripts written…