Category: security
Crypto miner arrested for skipping on millions in cloud server bills
A 45-year-old Nebraska man Charles O. Parks III has been charged with numerous financial crimes, including wire fraud and money laundering, as part of a scheme defrauding two cloud storage providers based in Seattle and Redmond, Washington. Ars Technica, reporting on the indictment, beat us to the punch in alleging…
Read More
A sneaky new steganography malware is exploiting Microsoft Word — hundreds of firms around the world hit by attack
Hackers have been observed using steganography to target hundreds of organizations in Latin America with infostealers, remote access trojans (RAT), and more. The campaign, dubbed SteganoArmor, was discovered by researchers from Positive Technologies. For those unfamiliar with steganography, it’s a technique of hiding data inside benign files. Hackers use it…
Read More
Cisco Duo says a third-party data breach stole MFA SMS logs
Cisco Duo has confirmed some sensitive customer data was stolen after a third-party cyber-incident. In a breach notification letter sent to affected customers, Cisco Duo said that its telephony provider, which it didn’t name, was compromised on April 1 2024. Unidentified threat actors mounted a phishing attack against the third…
Read More
Ransomware attack hits top chipmaker Nexperia, huge hoard of data set to be leaked
Top chipmaker Nexperia suffered a ransomware attack last month which saw threat actors get away with a terabyte of sensitive corporate data. “Nexperia has become aware that an unauthorized third party accessed certain Nexperia IT servers in March 2024,” the company said in a statement shared with BleepingComputer. “We promptly…
Read More
You haven’t actually got a massive road toll bill – it’s a phishing scam, FBI warns
If you get an SMS message from a toll service, claiming you owe $12.51 in unpaid fees and that if you don’t move fast, you’ll be fined an additional $50, don’t fret – it’s not real. The Federal Bureau of Investigation (FBI) has issued a warning concerning an ongoing smishing…
Read More
BMC flaw left unchecked for 6 years hits Intel and Lenovo servers
The lack of communication that happened six years ago resulted in thousands of devices being vulnerable to a remotely exploitable heap out-of-bounds (OOB) read vulnerability – today. Among the vulnerable devices are Intel and Lenovo servers. Here is what happened: Six years ago, the maintainers of Lighttpd discovered the above-mentioned…
Read More