Category: Cyber Security
-
The NYC telecom threat dismantled by the U.S. Secret Service highlights how close attackers came to crippling communications in New York. Agents uncovered a sprawling SIM farm network hidden across multiple sites, designed to interfere with critical infrastructure. Authorities seized more than 300 SIM server boxes and 100,000 SIM cards within a 35-mile radius of…
-
Cybercriminals have launched a disturbing campaign against Swiss citizens, sending fake death threat emails designed to frighten people into paying ransom. The emails claim to come from a hired assassin who promises to spare the victim’s life in exchange for money. The scam relies on emotional pressure rather than technical hacking. By weaponizing fear, attackers…
-
The GrammaTech ransomware attack claims have raised serious concern. Play ransomware operators listed the U.S. cybersecurity firm on their dark web portal and asserted they stole sensitive company data. GrammaTech works with government agencies including DARPA, NASA, and U.S. defense institutions. Its expertise in software analysis and vulnerability research makes it an attractive target for…
-
American Archive of Public Broadcasting bug exposed restricted media for years. A flaw let users bypass controls and download private content. Researchers reported the issue, and the archive patched it quickly. The Vulnerability The flaw came from insecure direct object references. Users could change media ID parameters and access files that should have stayed private.…
-
LastPass warns that attackers infect Mac users with malware by using fake password managers. These malicious apps mimic trusted software and spread via misleading GitHub repositories. Mac users who install them may face serious data theft. Overview of the Attack Campaign Attackers set up fake apps that impersonate legitimate software, then host them in GitHub…
-
The European Commission is reviewing plans to reduce the number of cookie consent pop-ups across the EU. Under the proposed changes, users may set cookie preferences once per browser instead of at every site. Privacy groups warn the update might weaken protections. What the Commission Wants to Change Commission representatives met with tech industry leaders…
-
Authorities have revealed details of Scattered Spider ransom payments worth over $115 million. Investigators traced cryptocurrency linked to the group and seized millions in digital assets. A teenager in the UK now faces charges for laundering funds tied to these attacks. How the Payments Worked Scattered Spider demanded ransom payments from dozens of victims across…
-
The MrBeast data collection under fire controversy highlights the risks of influencer-driven campaigns. Watchdogs accuse Jimmy Donaldson, known as MrBeast, of collecting children’s personal data without parental consent. The practices allegedly violated child privacy laws and raised questions about compliance in influencer marketing. What Sparked the Accusations The Children’s Advertising Review Unit (CARU) reviewed sweepstakes…
-
A verified Steam game named Block Blasters stole over $32,000 in cryptocurrency from a streamer raising funds for cancer treatment. The game was safe initially but added a cryptodrainer module on August 30. That update allowed it to drain wallets of some users while they raised money. How the Scam Worked The developer Genesis Interactive…
-
Microsoft recently patched a serious Entra ID flaw that allowed attackers to hijack any organization’s Azure/Entra ID tenant. The flaw emerged from a mix of legacy actor tokens and a vulnerability in the Azure AD Graph API. It risked full tenant takeover without detection. What the Flaw Entailed Security researcher Dirk-jan Mollema discovered that “actor…