Category: Cyber Security
-
House of Commons hacked through a Microsoft vulnerability has exposed sensitive staff data and triggered a national cybersecurity investigation. Officials are working to determine the scale of the breach and secure affected systems. How the Breach Happened On August 8, attackers exploited a critical flaw in Microsoft software to gain unauthorized access to the House…
-
Cybercrime crypto seized across two global initiatives totals more than $300 million. Law enforcement and blockchain firms disrupted fraud and money laundering networks effectively in under a year. What Happened In September 2024, the T3 Financial Crime Unit (T3 FCU) launched the T3+ Global Collaborator Program. Partners include intelligence firm TRM Labs, TRON, Tether, and…
-
Critical internet flaw in the HTTP/2 protocol allows attackers to crash servers by overwhelming them with fake request streams. Security experts warn that unpatched systems face a significant risk of large-scale denial-of-service attacks. What Researchers Found Security researchers discovered a vulnerability, now nicknamed “MadeYouReset,” that targets the way HTTP/2 handles connection streams. Attackers can send…
-
Telegram bans channels for extortion and doxxing after receiving hundreds of detailed abuse reports from users. The decision follows the discovery of networks publishing personal data and demanding payment for its removal. What triggered the action According to the platform, administrators of several channels published damaging personal information about individuals, including private communications, addresses, and…
-
Pro-Russian hackers carried out a dam cyberattack in Bremanger, Norway. The incident opened floodgates for hours, alarming residents and raising concerns about the security of critical infrastructure. What happened at the dam On April 7, attackers accessed the dam’s control systems remotely. They opened a gate, releasing 500 litres of water per second for four…
-
Researchers discovered a hidden XZ Utils backdoor in multiple DockerHub images, posing a serious risk to developers and organizations. The malicious code could allow attackers to gain control over affected systems and compromise sensitive data. How the threat emerged Security researchers found that several Docker images contained a version of XZ Utils with a backdoor.…
-
A critical HTTP/1.1 flaw threatens over 24 million websites, enabling attackers to hijack accounts, steal sensitive data, and plant malicious code. The vulnerability hides in backend systems still using HTTP/1.1, even when front-end services appear modern and secure. How the flaw works HTTP/1.1 contains ambiguous request boundaries, which attackers exploit in request smuggling or “desync”…
-
Passkey attacks expose serious authentication weaknesses. Attackers use downgrade tricks to bypass FIDO2 passkeys and force weaker sign-in methods. Users are at risk unless they remove backup options and enforce strong access policies. How Downgrade Attacks Work Proofpoint researchers show that phishing kits can prompt users to sign in using passwords instead of passkeys—especially when…
-
Embargo ransomware has emerged as a sophisticated and high‑earning threat. The group racked up $34 million in crypto payments by targeting healthcare, manufacturing, and business services. Its Rust‑based toolkit and AI integration underline its advanced capabilities. High Earnings and Quiet Operations Blockchain analysts from TRM Labs estimate that Embargo commands around $34 million in incoming…
-
Russian military censorship has reached a new high, with authorities blocking more than 25,000 websites under wartime laws. This sharp increase highlights the Kremlin’s growing control over online communication and its determination to silence dissenting voices. Massive Growth in Blocks Independent watchdog Roskomsvoboda reports that Russian authorities added over 5,000 new websites to their blocked…