Threat Post

1M Stolen Credit Cards Hit Dark Web for Free

A dump of hundreds of thousands of active accounts is aimed at promoting AllWorld.Cards, a recently launched cybercriminal site for selling payment credentials online. Threat actors have leaked 1 ...
Threat Post

Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday

The computing giant patched 71 security vulnerabilities in an uncharacteristically light scheduled update, including its first Xbox bug. Microsoft has addressed 71 security vulnerabilities in its ...
Threat Post

Kronos Ransomware Outage Drives Widespread Payroll Chaos

Kronos, the workforce-management provider, said a weeks-long outage of its cloud services is in the offing, just in time to hamstring end-of-year HR activities like bonuses and vacation tracking.
Threat Post

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Targeted attacks on Twilio and Cloudflare employees are tied to a massive phishing campaign ...
Threat Post

Massive DDoS Attack Disrupts Belgium Parliament

A large-scale incident earlier this week against Belnet and other ISPs has sent a wave of internet disruption across numerous Belgian government, scientific and educational institutions. Belgian ISP ...
Threat Post

Sandworm APT Hunts for ASUS Routers with Cyclops Blink Botnet

The Russian-speaking APT behind the NotPetya attacks and the Ukrainian power grid takedown could be setting up for additional sinister attacks, researchers said. The modular botnet known as Cyclops ...
Threat Post

Phishing Attacks Skyrocket with Microsoft and Facebook as Most Abused Brands

Instances of phishing attacks leveraging the Microsoft brand increased 266 percent in Q1 compared to the year prior. The bloom is back on phishing attacks with criminals doubling down on fake messages ...
Threat Post

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. New research indicates that over 80,000 Hikvision surveillance cameras in ...
Threat Post

Volkswagen Cars Open To Remote Hacking, Researchers Warn

Vulnerable in-vehicle infotainment systems have left some Volkswagen cars open to remote hacking, researchers warn. UPDATE – Over the last few years, automakers like Ford, Jeep, Nissan and Toyota have ...
Threat Post

2 Million IoT Devices Vulnerable to Complete Takeover

Millions of security cameras, baby monitors and “smart” doorbells are open to hijack – and no solution is currently available. Over 2 million IP security cameras, baby monitors and smart doorbells ...
Threat Post

Fake Reservation Links Prey on Weary Travelers

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. A longtime threat group identified as TA558 has ramped ...
Threat Post

Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws

August Patch Tuesday tackles 121 CVEs, 17 critical bugs and one zero-day bug exploited in the wild. Microsoft is urging users to patch a zero-day vulnerability dubbed Dogwalk that is actively being ...