Category: Cyber Security
-
A massive Great Firewall leak has revealed how China exports advanced censorship and surveillance technologies worldwide. The breach exposed more than 500GB of internal documents, communications, and source code tied to Geedge Networks, a developer linked to China’s censorship systems. What the Leak Uncovered The files revealed tools like the Tiangou Secure Gateway (TSG), capable…
-
A Google fraudulent account surfaced inside the company’s Law Enforcement Request System (LERS). The portal processes sensitive law enforcement data requests. Google confirmed the account but stated no user data was stolen. How the Incident Unfolded A malicious actor created a fake account inside the LERS system. Google detected the account and shut it down…
-
Apple threat notifications have been confirmed by CERT-FR, France’s national incident response team. The alerts warn users about spyware campaigns that compromise iCloud devices. High-profile targets such as journalists, politicians, and activists remain most at risk. How the Notifications Work Apple has sent threat notifications since 2021. These alerts warn individuals when advanced spyware attempts…
-
The FBI has issued a warning about Salesforce data theft linked to two threat groups, UNC6040 and UNC6395. Both groups exploited Salesforce OAuth apps to steal large volumes of sensitive data from multiple organizations. The incidents reveal the growing risks companies face when attackers abuse trusted access tokens. How Hackers Exploited Salesforce UNC6040 relied on…
-
A new watchdog report exposes CISA cybersecurity retention mismanagement. The Office of the Inspector General (OIG) revealed that the Cybersecurity and Infrastructure Security Agency misused millions of dollars from its cybersecurity retention incentive program. Between 2020 and 2024, CISA failed to enforce eligibility rules, allowed improper payments, and did not maintain required records. These failures…
-
HybridPetya secure boot bypass marks a dangerous step in ransomware development. Security researchers have discovered that this strain can exploit a UEFI vulnerability to bypass Secure Boot, allowing ransomware to load before Windows starts. By abusing CVE-2024-7344, attackers can plant malicious code inside the EFI System Partition, encrypt files, and demand ransom, even when Secure…
-
The proposed EU Chat Control scanning messages law has triggered fierce debate across Europe. Designed to combat child sexual abuse material (CSAM), it would require messaging platforms to scan private communications. Critics warn the proposal could undermine encryption, increase surveillance, and threaten civil liberties. What Is Chat Control? The Chat Control plan, officially the Regulation…
-
A worrying trend of students hacking schools UK has alarmed authorities and educators. The UK’s Information Commissioner’s Office (ICO) reports that more than half of insider cyberattacks in schools are caused by students. Many hacks are not sophisticated intrusions but reckless actions tied to stolen credentials and dares. Insider Breaches on the Rise Between January…
-
The notorious hacking group Scattered Spider has shocked the cyber world with its announcement to halt activities. The Scattered Spider end operations news follows rising law enforcement pressure and multiple arrests of its members. While the group posted a farewell note, experts warn this might not mark the end of ransomware threats. Who Are Scattered…
-
Apple has issued urgent alerts after Apple spyware attacks targeted users across multiple countries. These attacks involve highly advanced spyware campaigns that exploit zero-day and zero-click vulnerabilities. Apple reports that high-profile individuals, including activists and politicians, remain at the center of these threats. The company confirmed that targeted users received direct warnings through email, SMS…