Skip to main content

Security

Cyber attack hits JBS meat works in Australia, North America

posted onJune 1, 2021
by l33tdawg
Credit: Reuters

Australian and North American units of the world's largest meat works were hit over the weekend by an organised cyber attack on its information systems, Brazil's JBS SA (JBSS3.SA) said in a statement.

The attack caused its Australian operations to shut down on Monday. The company said it was working to resolve the incident.

FBI partners with 'Have I Been Pwned' on breached password database

posted onMay 30, 2021
by l33tdawg
Credit: IT Pro

Have I Been Pwned (HIBP), a website that allows users to check if their email addresses and passwords have been compromised, is collaborating with the FBI on feeding masses of data on compromised credentials into the wider HIBP catalogue.

The US law enforcement agency approached HIBP, according to its founder Troy Hunt, to discuss what it might look like to build channels to provide the FBIs intelligence on compromised passwords.

Google Chrome will fix your hacked passwords with one tap

posted onMay 30, 2021
by l33tdawg
Credit: Flickr

Google Chrome is getting a new ability to fix your hacked password fast. It's standard for web browsers to warn you when your password is found on a list of hacked passwords, but now Google's browser also will be able to fix it with a  tap of a button.

Covert channel in Apple’s M1 is mostly harmless, but it sure is interesting

posted onMay 30, 2021
by l33tdawg
Credit: Arstechnica

Apple's new M1 CPU has a flaw that creates a covert channel that two or more malicious apps—already installed—can use to transmit information to each other, a developer has found.

The surreptitious communication can occur without using computer memory, sockets, files, or any other operating system feature, developer Hector Martin said. The channel can bridge processes running as different users and under different privilege levels. These characteristics allow for the apps to exchange data in a way that can't be detected—or at least without specialized equipment.

The SolarWinds hackers aren’t back—they never went away

posted onMay 30, 2021
by l33tdawg
Credit: Arstechnica

The Russian hackers who breached SolarWinds IT management software to compromise a slew of United States government agencies and businesses are back in the limelight. Microsoft said on Thursday that the same “Nobelium” spy group has built out an aggressive phishing campaign since January of this year and ramped it up significantly this week, targeting roughly 3,000 individuals at more than 150 organizations in 24 countries.

Japan's biggest dating app hit by major cyberattack

posted onMay 25, 2021
by l33tdawg
Credit: Flickr

Popular Japanese dating app Omiai has reportedly been hacked, with the personally identifiable data of almost two million users most likely exposed.

According to reports the company that runs the app - Net Marketing Co - has notified the public of multiple unauthorized incursions into its servers during April this year.

Malware caught using a macOS zero-day to secretly take screenshots

posted onMay 25, 2021
by l33tdawg
Credit: Tech Crunch

Almost exactly a month ago, researchers revealed a notorious malware family was exploiting a never-before-seen vulnerability that let it bypass macOS security defenses and run unimpeded. Now, some of the same researchers say another malware can sneak onto macOS systems, thanks to another vulnerability.

Jamf says it found evidence that the XCSSET malware was exploiting a vulnerability that allowed it access to parts of macOS that require permission — such as accessing the microphone, webcam or recording the screen — without ever getting consent.

This massive phishing campaign delivers password-stealing malware disguised as ransomware

posted onMay 25, 2021
by l33tdawg
Credit: Flickr

A massive phishing campaign is distributing what looks like ransomware but is in fact trojan malware that creates a backdoor into Windows systems to steal usernames, passwords and other information from victims.

Detailed by cybersecurity researchers at Microsoft, the latest version of the Java-based STRRAT malware is being sent out via a large email campaign, which uses compromised email accounts to distribute messages claiming to be related to payments, alongside an image posing as a PDF attachment that looks like it has information about the supposed transfer.

India's national carrier says hack leaked passengers' data

posted onMay 23, 2021
by l33tdawg
Credit: ABC News

Personal data of an unspecified number of travelers has been compromised after a company that serves India’s national carrier was hacked, Air India said.

The hackers were able to access 10 years’ worth of data including names, passport and credit card details from the Atlanta-based SITA Passenger Service System, Air India said in a statement Friday.

The Full Story of the Stunning RSA Hack Can Finally Be Told

posted onMay 23, 2021
by l33tdawg
Credit: Wikipedia

Amid all the sleepless hours that Todd Leetham spent hunting ghosts inside his company’s network in early 2011, the experience that sticks with him most vividly all these years later is the moment he caught up with them. Or almost did.