A devolution survey underscores the gravity of cyberattacks. The aggregate global cybercrime totalled $16.4 billion each day The average data breach cost of firms, less than 500 employees, was $2.98 million per incident in 2021, reports an IBM study. Further,…
A report by California crowdsourced cybersecurity platform Bugcrowd states that ethical hackers have warded off $27bn worth of cybercrime during the COVID-19 pandemic. The observation was in the Bugcrowd’s latest annual Inside the Mind of a Hacker report, which was…
Microsoft reported HTML smuggling, which spread via email, had been extensively targeting banking organizations. Microsoft described the attack that surfaced in the early half of this month as “a highly evasive malware delivery technique”. The attack uses genuine HTML5 and…
The U.S-sanctioned Positive Technologies has underscored three vulnerabilities in the zoom, Zoom vulnerability that can be used for crashing or hijacking on-prem parts of the video conferencing system. One of the vulnerabilities is related to input validation which can be…
The FBI reported threat actors taking over FBI email system to send thousands of false messages about a “sophisticated chain attack.” Threat intelligence non-profit SpamHaus released information about the attack first. The attack entailed sending false warning emails with the…
Google researchers have detected a zero-day MacOs vulnerability in operating system. The hackers have targeted Hong Kong websites of a media outlet and pro-democracy labour political group to plant a new backdoor entry in affected machines. Based on our findings,…
Palo Alto’s network GlobalProtect VPN has a new zero-day vulnerability reported by researchers. The vulnerability allows the hacker to use an unauthenticated network to execute arbitrary code on affected devices with root user privileges. The vulnerability is identified as CVE-2021-3064…
Cybersecurity researchers discovered 14 critical vulnerabilities in the BusyBox Linux utility. The hackers can exploit the vulnerability for carrying out a denial-of-service (DoS) attack, and in some cases, the vulnerability can lead to information leaks and remote code execution. DevOps…
Robinhood, the popular investment & trading platform, was recently hacked and fell prey to an extortion attempt. The extorter used their unauthorized access to millions of customers’ email addresses and full names as leverage. The Platform informed about the incident…
Cyberfraud victims are increasingly being asked to pay through Quick Response (QR) code and cryptocurrency ATMs. This makes recovery of payment impossible. The FBI has seen an increase in scammers directing victims to use physical cryptocurrency ATMs and digital QR…
