Security News
GoDaddy hack causes data breach affecting 1.2 million customers
In a data breach notification published today, GoDaddy said that the data of up to 1.2 million of its customers was exposed after hackers gained access to the company's Managed WordPress hosting environment.
BleepingComputer
23 Nov 2021 1080 Views
Experts found 11 malicious Python packages in the PyPI repository
Researchers discovered 11 malicious Python packages in the PyPI repository that can steal Discord access tokens, passwords, and conduct attacks.
Security Affairs
19 Nov 2021 1186 Views
Thousands of Firefox users accidentally commit login cookies on GitHub
Thousands of Firefox cookie databases containing sensitive data are available on request from GitHub repositories, data potentially usable for hijacking authenticated sessions.
The Register
19 Nov 2021 1039 Views
MosesStaff Locks Up Targets, with No Ransom Demand, No Decryption
A politically motivated group is paralyzing Israeli entities with no financial goal – and no intention of handing over decryption keys.
ThreatPost
17 Nov 2021 424 Views
SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts
Cybersecurity researchers on Monday took the wraps off a new Android trojan that takes advantage of accessibility features on the devices to siphon credentials from banking and cryptocurrency services in Italy, the U.K., and the U.S.
The Hacker News
17 Nov 2021 1071 Views
Emotet malware is back and rebuilding its botnet via TrickBot
The Emotet malware was considered the most widely spread malware in the past, using spam campaigns and malicious attachments to distribute the malware.
Bleeping Computer
16 Nov 2021 1026 Views
Fake Ransomware Infection Spooks Website Owners
Starting this past Friday we have seen a number of websites showing a fake ransomware infection. Google search results for “FOR RESTORE SEND .1 BITCOIN” were sitting at 6 last week and increased to 291 at the time of writing this.
Sucuri Blog
16 Nov 2021 1170 Views
Hoax Email Blast Abused Poor Coding in FBI Website
The Federal Bureau of Investigation (FBI) confirmed today that its fbi.gov domain name and Internet address were used to blast out thousands of fake emails about a cybercrime investigation. According to an interview with the person who claimed responsibility for the hoax, the spam...
Krebs on Security
14 Nov 2021 411 Views
Top 10 Cybersecurity Best Practices to Combat Ransomware
Immutable storage and more: Sonya Duffin, data protection expert at Veritas Technologies, offers the Top 10 steps for building a multi-layer resilience profile.
Threatpost
13 Nov 2021 447 Views
Millions of Routers, IoT Devices at Risk from New Open-Source Malware
BotenaGo, written in Google’s Golang programming language, can exploit more than 30 different vulnerabilities.
Threatpost
12 Nov 2021 313 Views
