Discover

The threat actors tricked the employees of GoDaddy into transferring the ownership and control over targeted domains. This campaign was targeted towards the cryptocurrency trading platform liquid.com.

The flaw was discovered by Natalie Silvanovich of Google’s Project Zero bug-hunting team. The vulnerability could allow hackers to send a specially crafted message known as Sdpupdates which connects to the callees website before being answered.

Ransomware gangs are using hacked Facebook accounts to post adds of the stolen data which pressurise the victims into paying the ransom.

Microsoft patch Tuesday for November has issued patches for 112 newly discovered vulnerabilities. out of the 112 vilnerabilities17 are rated as critical, 93 as important and 2 as low severity.

Vertafore an insurance software firm fell victim to a data breach which exposed 27.7 million personal details and licences records. The breach occurred because three files where stored on an unprotected third party server which was accessed by unauthorised individuals.

A report from a security researcher found several security flaws in the world’s 3rd largest android Tv manufacturer TLC. The researchers did a remote desktop session and ran a trivial Nmap which showed numerous open ports.

SpiderSilk a Dubai based cybersecurity firm has identified the exposed database. This happened due to some configuration error has exposed sensitive data including passwords and private message contents.

Cyble reported that India’s largest grocery e-commerce site has become a victim to a cyber-attack. They have identified 15gb worth of file which has around 20 million customer records is being sold for $40000 on the dark web.

Cisco Talos researchers have identified that an APT group named as DoNot is exploiting googles firebase cloud messaging to spread Firestarter android malware and bypass detection.

Security researchers at WMC global have identified a new creative way of phishing where attackers invert the image used as background for landing pages to avoid getting detected by security solutions as malicious.

Gunnebo a Swedish based Physical security company which provides its service for more than 25 countries. Was under a cyber-attack on the march and they disclosed the breach after 5 months and they claimed that the quick action prevents ransomware from spreading to other computers. But this week a journalist report that the hackers have posted at least 38,000 sensitive documents including schematics of client bank vaults and surveillance systems on a public server.

The Wisconsin Republic Party has reported that they have fallen victim for a sophisticated phishing attack. The threat actors have stolen funds which were meant for the re-election of President Trump.

The researchers have found 21 apps which contain malicious adware which is hidden by design. These apps have anti-Uninstall and evasion functions.

Japan’s Nuclear Regulation Authority (NRA) published a warning on their website regarding the temporary suspension of email and have asked people to contact them over text or phone. The media reported that threat actors were able to gain unauthorized access to the NRA’s network.

A Dutch cyber Security researcher reviled that he logged into presidents trumps personal Twitter account. The password turned out to be MAGA2020 which is referred to Trump’s campaign Making America Great Again.

Rafay Baloch a Pakistani cybersecurity researcher discovered this vulnerability which affects mobile browsers such as Apple Safari and Opera Touch. The malware leaves an open door for spear-phishing attacks and malware delivery.