A security researcher accidentally stumbled onto a Google Pixel lock-screen bypass problem. Hacking Google Pixel screen locks nets the researcher $70,000. David Schütz found the flaw, which allowed an attacker to unlock any Google Pixel phone without having the passcode.…
In comparison to the global average of 70%, 89% of Indian business executives claim that their organization’s cybersecurity team identified a significant cyber threat to business and stopped it from having an impact on their operations. Executives anticipate more cybersecurity…
APT29, a nation-state actor with ties to Russia, was discovered using Credential Roaming, a “lesser-known” Windows feature. In its attack on an undisclosed European diplomatic entity network. According to technical writing by Mandiant analyst Thibault Van Geluwe de Berlaere, “the…
In order to divert visitors to phoney Q&A discussion boards, hackers have compromised around 15,000 websites with huge black hat SEO campaigns (Google SEO poisoning campaign). Sucuri, who claims that each compromised site has about 20,000 files used in the…
Tehran hackers close the sophistication gap with social engineering The federal government cautions the healthcare industry to be on the lookout for Iranian threat actors disguising themselves as doctors, think tank researchers, or journalists. Tehran-backed hackers frequently use social engineering…
The decentralized Interplanetary Filesystem (IPFS) network is being used by a variety of phishing attempts to host malware, phishing kit infrastructure, and support other attacks. According to data released with The Hacker News by Cisco Talos researcher Edmund Brumaghin. Hosting…
Facebook appears to have quietly introduced a feature that lets users delete other people’s contact information. This includes phone numbers and email addresses. Business Insider broke the news of the tool’s existence last week. It is hidden inside a Help…
Following a ransomware hack, Australian health insurer Medibank acknowledged that access to the personal information of roughly 9.7 million of its current and former clients was made possible. The company claims that the attack was discovered on October 12. In…
Threat actors have been using the JavaScript-based framework SocGholish since 2017 to obtain initial access to computers. To infect systems, SocGholish employs social engineering. It deceives users into running a malicious JavaScript payload that poses as a necessary system or…
According to the Federal Bureau of Investigation (FBI), organized hacktivist organizations’ distributed denial-of-service (DDoS) operations. But the distributed DDoS has a negligible effect on their target systems. This occurs because law enforcement targets public-facing infrastructure like websites rather than the…
