Risk
-
Surge in Phishing Attacks Imitating E-ZPass and Toll Authorities
A significant increase in phishing scams impersonating toll agencies such as E-ZPass is causing concern among users, with messages aimed at stealing personal information on the rise.
-
NSA Issues Warning on Fast Flux Technique Threatening National Security
The NSA has issued a grave warning about the fast flux technique being exploited by cybercriminals and nation-states, which obscures malicious activities and threatens national security.
-
Australian Retirement Funds Targeted in Cyberattack, Thousands Affected
The Australian retirement fund sector is in turmoil following a series of cyberattacks that have led to unauthorized access of customer accounts. Approximately 8,000 members of Rest super fund have been identified as potentially affected, with broader implications for other funds as investigations continue into the security breaches.
-
Former ASML Employee Faces Court Over Alleged Industrial Espionage Ties to Russia
A former ASML employee, German A., faces allegations of industrial espionage in a Rotterdam court, accused of leaking sensitive chip-making secrets to Russian intelligence. The case raises concerns about security practices in the semiconductor industry amid geopolitical tensions.
-
Data Breach at Europcar Exposes Personal Information of Up to 200,000 Customers
Europcar Mobility Group suffered a data breach resulting in the exposure of personal information belonging to up to 200,000 customers. The breach involved unauthorized access to GitLab repositories, with demands for extortion made by the threat actor.
-
European Insurance Authority Proposes Strict Capital Requirements for Crypto Holdings
The European Union’s insurance authority has proposed a requirement for firms to maintain capital equal to their full crypto holdings to mitigate risks for policyholders, setting a new standard for the insurance industry.
-
New Phishing-as-a-Service Operation Utilizes Advanced Evasion Techniques
The Morphing Meerkat phishing operation employs advanced techniques including DNS over HTTPS to evade detection and deliver dynamic spoofed login pages for over 114 brands.
-
Security Bypasses Detected in Ubuntu Linux’s User Namespace Restrictions
A new report from Qualys reveals that three security bypasses have been found in Ubuntu Linux’s user namespace restrictions, potentially allowing local attackers to exploit kernel vulnerabilities. Canonical is working on enhancing AppArmor protections in response.
-
New Cybercrime Platform Automates Credential Stuffing Attacks on 140 Online Services
The newly discovered Atlantis AIO platform automates credential stuffing attacks against 140 online services, providing cybercriminals with tools to exploit vulnerabilities in systems lacking adequate security measures.
-
FamousSparrow Hackers Enhance Cyber Attacks with Modular Backdoor
A China-linked cyberespionage group known as FamousSparrow has intensified its operations by deploying an upgraded version of its backdoor malware, SparrowDoor, against several organizations, including a US-based trade group. ESET researchers have identified significant improvements in the malware’s structure and capabilities, raising concerns about the group’s access to advanced cyber tools.
