News | All Safe

17 December 2023

MongoDB's breach underscores the persistent threat of unauthorized access to corporate systems, potentially exposing sensitive customer information. The exploitation of an RCE...

16 December 2023

Ex-Amazon Engineer Pleads Guilty to Crypto Exchange Hacks. CISA Urges Manufacturers to Cease Default Password Practices. Threat Actors Employ Fingerprinting Techniques to Bypa...

15 December 2023

MITRE Introduces EMB3D for Critical Infrastructure Threat Modeling. Ten New Android Banking Trojans Target Nearly 1K Bank Apps. Delta Dental Data Breach Exposes Data of 7 Mill...

14 December 2023

EU's Proposed eIDAS 2.0 Raises Security Concerns. Scammers Employ Google Forms in BazarCall Attacks. Supply Chain Attack on Ledger dApp Steals $600K in Cryptocurrency. Microso...

13 December 2023

Microsoft Warns of OAuth-Based Attacks. DonorView Data Exposure of One Million Records. UK Ministry of Defence Fined for Afghan Evacuation Data Breach. Data Breach at Dubai’...

12 December 2023

Sophos Backports RCE Fix for Unsupported Firewalls. Ransomware Attack on Ukraine's Largest Mobile Carrier, Kyivstar. Code Repository Wiping Results in 2-Year Prison Sentence. ...

11 December 2023

Researchers Bypass Android Lock Screen Using Driving Mode Assistant. AutoSpill Attack Steals Passwords From Password Managers. Kelvin Security Hacking Group Leader Arrested in...

10 December 2023

Over 30% of Log4J Apps Use a Vulnerable Version of the Library. Researchers Exploited GOG Galaxy XPC for Privilege Escalation in macOS. New iPhone Hack Convinces Users With Fa...

09 December 2023

Norton Healthcare Discloses Data Breach After May Ransomware Attack. Researchers Automated Jailbreaking of LLMs With Other LLMs. Bypassing Major EDRs Using Pool Party Process ...

08 December 2023

Russian Military Hackers Target NATO Fast Reaction Corps. Meta Rolls Out Default End-to-End Encryption on Messenger, Facebook. Progress Software Discloses Two New CVEs in MOVE...

07 December 2023

New SLAM Attack Steals Sensitive Data from AMD, Future Intel CPUs. Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts. ENISA Publishes Threat Landscape Report on ...

06 December 2023

Vulnerabilities Impact Critical Infrastructure Routers. Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution. Federal Agency Breached Through Adobe Cold...

05 December 2023

Russian Hackers Exploiting Outlook Bug to Hijack Exchange Accounts. PDF Phishing: Beyond the Bait. December Android Updates Fix Critical Zero-Click RCE Flaw. Tipalti Investiga...

04 December 2023

The European Space Agency Explores Cybersecurity for Space Industry. Linux Version of Qilin Ransomware Focuses on VMware ESXi. Astrology Website WeMystic Exposes Over 13 Milli...

03 December 2023

Apple Patches WebKit Flaws Exploited on Older iPhones. OpenAI’s Custom Chatbots Are Leaking Their Secrets. Notepad++ Input Validation Flaws Lead to Uncontrolled Search Path ...

02 December 2023

Over 20,000 Vulnerable Microsoft Exchange Servers Exposed to Attacks. US Health Dept Urges Hospitals to Patch Critical Citrix Bleed Bug. TrickBot Malware Developer Pleads Guil...

01 December 2023

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws. WhatsApp's New Secret Code Feature Hides Your Locked Chats. Capital Health Hospi...

30 November 2023

North Korea's Lazarus Group Generates $3 Billion from Crypto Hacks. Black Basta Ransomware Nets Over $100 Million in Extortion. Hackers Exploit US Water Facility via Exposed P...

29 November 2023

Zero-Day Exploitation in Google Chrome. New Bluetooth Attack 'BLUFFS' Breaks Session Secrecy. Critical ownCloud Vulnerability Exploited by Hackers. Identity Attacks Rising, Ve...

28 November 2023

Ukraine Alleges Hacking of Russian Aviation Agency. North Korean Hackers' macOS Tactics Evolution. Microsoft Deprecates Defender Application Guard for Office. Police Dismantle...

27 November 2023

Google Drive Users Report Data Loss. Passive Extraction of Private RSA Keys in SSH Connections. Secure AI System Development Guidelines Released. New Rust-Based SysJoker Backd...

26 November 2023

General Electric Investigates Alleged Cyber Attack. Atomic Stealer Malware Targets macOS Through Fake Updates. New 'HrServ.dll' Web Shell Detected in APT Attack on Afghan Gove...

25 November 2023

Critical Vulnerabilities in ownCloud Raise Data Breach Risk. ownCloud File Sharing App Exposes Admin Passwords. CTS Cyberattack Affects Multiple UK Law Firms....

24 November 2023

Hamas-Linked SysJoker Backdoor Targets Israel. Exposed Kubernetes Secrets in Public Repositories Pose Threat. Konni Group Deploys Russian-Language Malicious Word Docs. Black F...

23 November 2023

Windows Hello Authentication Bypassed on Microsoft, Dell, Lenovo Laptops. Welltok Data Breach Exposes 8.5 Million US Patients' Data. Microsoft Alerts: Lazarus Hackers Breach C...

22 November 2023

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability. Microsoft Introduces Defender Bounty Program with Rewards Up to $20,000. CISA Directs Federal Agencies to Pa...

21 November 2023

NetSupport RAT Infections Targeting Multiple Sectors. Mustang Panda Targets Philippines Government Amid South China Sea Tensions. Canadian Government Data Breach After Contrac...

20 November 2023

Randstorm Exploit: Vulnerability in 2011-2015 Bitcoin Wallets. Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years...

19 November 2023

Exploit for CrushFTP RCE chain released, patch now. 8Base Group Deploying New Phobos Ransomware Variant via SmokeLoader. Google shares plans for blocking third-party cookies i...

18 November 2023

Google: Hackers exploited Zimbra zero-day in attacks on govt orgs. CISA warns of actively exploited Windows, Sophos, and Oracle bugs. The Week in Ransomware - November 17th 20...

17 November 2023

CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog. Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks. FBI shares tactics of...

16 November 2023

Russian Hackers Linked to 'Largest Ever Cyber Attack' on Danish Critical Infrastructure. Ransomware gang files SEC complaint over victim’s undisclosed breach. Samsung hit by...

15 November 2023

New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments. Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities. VMware Warns of Unpatched Criti...

14 November 2023

Vietnamese Hackers Using New Delphi-Powered Malware to Target Indian Marketers. CISA Sets a Deadline - Patch Juniper Junos OS Flaws. Ethereum Feature Abused to Steal $60 Milli...