News

Dragos Inc., the global leader in cybersecurity for industrial controls systems (ICS)/operational technology (OT) environments, today announced it has been designated by the CVE Program as a CVE Numbering Authority (CNA). As a CNA, Dragos is authorized to assign CVE IDs to newly discovered vulnerabilities and publicly disclose information about these vulnerabilities through CVE Records. This includes assigning CVE IDs to vulnerabilities found in the company’s own products as well as any third-party products not...

Rockstar Games, the publishers behind the popular Grand Theft Auto (GTA) franchise, announced earlier this week that data from the latest instalment of the GTA series has been leaked online. The leak is being described as one of gaming's biggest security breaches. The publishers were unable to clarify how the "network intrusion" happened, but confirmed that "early development footage" from GTA VI had been stolen. A user called teapotuberhacker posted the footage onto the GTAForums...

Earlier today, American Airlines became the latest big-name brand to announce a data breach, after an unauthorized actor compromised employee inboxes. A statement released from the aerospace giant confirmed that the source of the incident was a phishing attack which “led to the unauthorized access to a limited number of team-member mailboxes.” The airline explained that “a very small number of customers’ and employees’ personal information” was contained in the accessed emails, suggesting that its attackers...

A new survey conducted amongst 600 parents across the UK by Censuswide on behalf of International Cyber Expo found that 40% of parents believe children will turn to cyber crime during the cost of living crisis. The survey also revealed that 40% of parents have fallen victim to at least one security breach as a result of their children’s online activities, with 17% experiencing a breach twice and 10% experiencing a breach three times. The...

Earlier this week, it was reported that the Zoom video conference platform was down and experienced an outage preventing users from logging in or joining meetings. An incident posted on Zoom's service status page, revealed that the company confirmed issues starting and joining meetings and video sessions. "We are investigating reports of zoom.us being unavailable. Our teams are currently investigating the service-impacting event. Our engineers are investigating," the company explained. "We have identified the issue starting...

It has been predicted that cryptocurrency scams are set to explode after researchers reported a triple-digit increase in registered domains in the first half of 2022, compared to the whole of last year. Cyber security service provider, Group-IB said that they had detected over 2000 domains registered to be used as fake promotion websites in the first half of this year, revealing a 335% increase on the number recorded in 2021. Hence showing a five-fold increase...

Two critical vulnerabilities were found in wireless LAN devices that are allegedly used to provide internet connectivity on airplanes. Thomas Knudsen and Samy Younsi from Necrum Security Labs first discovered the flaws, which were found to have affected the Flexlan FX3000 and FX2000 series wireless LAN devices made by Contec. An advisory, referring to the vulnerability tracked as CVE-2022-36158, noted: "After performing reverse engineering of the firmware, we discovered that a hidden page not listed...

Earlier this week, Apple officially launched its new iOS 16 operating system update for iPhone devices. The update contains several security-focused and privacy features. iOS 16 was first unveiled in June at the WWDC 2022 conference. The update supports iPhone devices starting from iPhone 8, as well as second and third generation iPhone SE devices. 'Lockdown Mode' is a particularly significant feature, first launched in July on selective devices. It is now available on all...

Larazrus Group, the North Korean threat actor group, targeted a malicious campaign towards energy providers around the world between February and July 2022. In April and May, the campaign was partially disclosed by Symantec and AhnLab, respectively. Cisco Talos is providing more details now. In an advisory written on Thursday, Cisco Talos said that the Lazarus campaign involved the exploitation of vulnerabilities in VMWare Horizon to gain initial access to targeted organisation. The advisory stated:...

Alert Logic by HelpSystems launched general availability of its new intelligent response capabilities this year. The innovations, including simple mode and a mobile application, relieve IT and security departments of repetitive response tasks and the need for constant administration through human-guided and fully automated workflows. Seedrs, Europe’s leading online private investment platform, is among the first adopters of the new capabilities, now available at no additional cost to Alert Logic MDR® customers. Alert Logic Intelligent Response™ is...