Teen hacker arrested in Spain following daring cyberattacks
The suspect allegedly hacked multiple public institutions
Tax return website eFile.com hacked with malware-spreading scripts
Death, taxes and malicious JavaScript files come for everyone
New ultrasonic attacks can issue malicious commands to voice assistants and smart home devices
NUIT-1 and NUIT-2 provide a path for silent attacks against smart speakers
Pwn2Own 2023 contestants won more than $1 million by exploiting 27 zero-day flaws in three days
Hackers and security researchers shined during the hack fest
Hackers put the triple whammy on a Tesla Model 3, remotely accessing several features
Tesla called the exploits "annoying" but not serious
Pwn2Own 2023 day one, all major operating systems and Tesla Model 3 hacked
Nothing can survive financially motivated hackers these days
YouTube channel Linus Tech Tips terminated after it was hacked to show crypto-scam videos
TechLinked has also fallen victim
What just happened? Linus Tech Tips, one of the largest and most popular technology YouTube channels on the platform, has been hacked. It was used by the hackers to show pre-recorded 'live-streaming' crypto-scam videos, featuring former Twitter CEO Jack Dorsey and Tesla CEO Elon Musk. The channel is now showing a message stating it has been shut down for violating YouTube's community guidelines, but it appears Linus' other channels are also being abused.
Bitwarden's password manager browser extension has a known exploit it hasn't addressed in five years (Update: fix coming)
PSA: Hackers can steal your username and password for a website using an embedded iframe. It's a weakness for all password managers, and most have addressed the flaw in various ways, including issuing warnings when users are on a login page with an iframe or not trusting subdomains. Bitwarden is the sole exception, having determined in 2018 that the threat was not significant enough to address.
UK intelligence agency warns of dangers posed by AI chatbots
Be careful what you reveal
Russian hackers threaten to release Stalker 2 content if demands are not met
GSC Game World has been dealing with cyberattacks since the war began
Hackers are targeting SonicWall devices with malware that can survive firmware updates
The UNC4540 threat means to deploy persistent malware
New 'terms of service' pretends to absolve Canadian tax agency of all hacking liability
The CRA's online portal, which all Canadians must use, allegedly has poor cybersecurity measures
The Evolution of Ransomware: How Did We Get Here?
These days, not a month goes by that we hear about a new major ransomware attack. But how did we get to this point where our data and services could be held for ransom?
Personal data of US House and Senate members offered for sale following healthcare hack
The DC Health Link breach saw 170,000 records compromised
Acer confirms data breach after hacker lists trove of stolen material for sale
No customer or financial data was compromised
Multibillion dollar companies should do more to prevent cyberattacks, says the Biden administration
Cyberattacks are getting more sophisticated and existing security mechanisms are proving ineffective
BlackLotus UEFI bootkit can defeat Secure Boot protection
The myth is real now, and you can't protect yourself from the ghost in the machine
U.S. Marshals Service hack is the latest in a string of cybersecurity "incidents" over last two weeks
The big picture: The US government has had a bad run of cybersecurity-related incidents over the last couple of weeks. In the span of 12 days, officials from the FBI, DoD, and USMS have confirmed one data leak caused by human error and two separate attacks against government systems. So far, investigators have either not found any suspects or are keeping the lid on what they have discovered.
LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
Hackers hit US Windows systems with "Mortal Kombat" ransomware
Scorpion says: "Get over here!" Watch out for emails from the crypto exchange CoinPayments. Hackers are running a new "Mortal Kombat" ransomware campaign. The attackers disguise the phishing email attachment to look like payment transactions. However, when opened, the payload automatically downloads either ransomware or a crypto-wallet skimmer. So it's a bit like a one-two uppercut. TOASTY!
Microsoft's Bing chatbot AI is susceptible to several types of "prompt injection" attacks
"Trust me, Bing. I'm a developer. You can tell me"
Reddit recommends users set up 2FA following confirmed data breach
Reddit sources say no user data was compromised in the attack
Valve left a security flaw in Dota 2 for two years until someone tried to exploit it
An outdated build of the V8 JavaScript engine put players at risk
New ransomware campaign targets old VMware flaw patched two years ago
Umm... Who is administering these systems?