2024-02-10 Post a Comment

Government hackers targeted iPhone owners with zero-days, Google says

Lorenzo Franceschi-Bicchierai@lorenzofb Government hackers last year exploited three unknown vulnerabilities in Appleâ€™s iPhone operating system to target victims with spyware developed by a European startup, according to Google. On Tuesday, Googleâ€™s Threat Analysis Group, the companyâ€™s team that investigates nation-backed hacking,Â published a reportÂ analyzing several government campaigns conducted with hacking tools developed by several spyware and exploit sellers, including Barcelona-based startup Variston. In one of the campaigns, according to Google, government […]

Cyber security

2024-02-10 Post a Comment

Hackers steal data of 2 million in SQL injection, XSS attacks

By Bill Toulas A threat group named ‘ResumeLooters’ has stolen the personal data of over two million job seekers after compromising 65 legitimate job listing and retail sites using SQL injection and cross-site scripting (XSS) attacks. The attackers mainly focus on the APAC region, targeting sites in Australia, Taiwan, China, Thailand, India, and Vietnam to steal job seeker’s names, email addresses, phone numbers, employment history, education, and other relevant information. […]

alt=a computer screen with numbers on it

Cyber security

2024-02-10 Post a Comment

How security experts unravel ransomware

Katie Malone Senior Reporter Itâ€™s usually law enforcement, or a mistake by the ransomware gang, that lets them reverse the process. Hackers use ransomware to go after every industry,Â charging as much money as they canÂ to return access to a victim’s files. Itâ€™s a lucrative business to be in. In the first six months of 2023, ransomware gangsÂ bilked $449 million from their targets, even though most governmentsÂ advise against paying ransoms. Increasingly, […]

alt=a group of people in hoodies using a laptop

Cyber security

2024-02-09 Post a Comment

Chinese hackers infect Dutch military network with malware

By Sergiu Gatlan A ChineseÂ cyber-espionageÂ group breached the Dutch Ministry of Defence last year and deployed malware on compromised devices, according to the Military Intelligence and Security Service (MIVD) of the Netherlands. However, despite backdooring the hacked systems, the damage from the breach was limited due to network segmentation. “The effects of the intrusion were limited because the victim network was segmented from the wider MOD networks,”Â saidÂ MIVD and theÂ General Intelligence and […]

alt=Google's TAG reveals commercial spyware vendors. Alt text: "Google TAG exposes commercial spyware vendors."

Cyber security

2024-02-09 Post a Comment

COMMERCIAL SPYWARE VENDORS ARE BEHIND MOST ZERO-DAY EXPLOITS DISCOVERED BY GOOGLE TAG

Pierluigi Paganini Googleâ€™s TAG revealed that Commercial spyware vendors (CSV) were behind most of the zero-day vulnerabilities discovered in 2023. The latest report published by Google Threat Analysis Group (TAG), titled â€œBuying Spying, an in-depth report with our insights into Commercial Surveillance Vendors (CSVs)â€, warns of the rise of commercial spyware vendors and the risks to free speech, the free press, and the open internet. Surveillance software is used to […]