News

In Late July, an undisclosed number of Samsung customers in the US had their personal information accessed by an unauthorised user. Samsung, the Korean electronics giant, said that it discovered the breach on 4th August 2022. It has since secured the affected systems, engaged a third-party security firm and contacted law enforcement. A statement issued by the firm said: “We want to assure our customers that the issue did not impact Social Security numbers or...

Researchers have discovered a critical vulnerability in the TikTok Android app which could allow hackers to hijack user accounts remotely. The vulnerability, CVE-2022-28799, was reported to the ByteDance owned company by Microsoft in February 2022. Tiktok quickly fixed the issue. It is estimated that the app has around 1.5billion downloads on the Play Store, however, Microsoft added, the bug has not yet been exploited in the wild. Microsoft further explained: “The vulnerability allowed the app’s...

DESFA, Greece's largest natural gas supplier, said, on Saturday 20th August, that it was hit by a cyberattack that impacted the availability of some of its systems. Ragnar Locker, a hacking group, claimed responsibility for the ransomware attack. They added that they had allegedly published more than 350 GB of data stolen from the DESFA. Security researchers from Cybereason have written a report describing details of the attack The Threat Analysis Report report says: “Ragnar Locker...

Security researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services (AWS) credentials. This poses a huge security risk. Symantec's Threat Hunter Team, a part of Broadcom Software, wrote in a report that "over three-quarters (77%) of the apps contained valid AWS access tokens allowing access to private AWS cloud services." Over 50% of the apps were found using the same AWS tokes found in other apps maintained by developers and...

A new survey by Censuswide and the International Cyber Expo found that over a third (34%) of parents are unaware of what online accounts their children are using, highlighting a worrying lack of awareness surrounding their children’s online activity. The survey was conducted amongst 600 parents across the UK. The survey did find that over a fifth of parents claim to know about all their children's accounts, but they're unable to easily access them to...

India's newest commercial airline, Akasa Air, exposed personal data belonging to its customers. The company blamed these data leaks on technical configuration errors. Ashutosh Barot, a security researcher, added that this issue originated in the account registration process, leading to the exposure of personal information such as gender, email addresses, names, and phone numbers. The bug was identified on 7th August 2022, the same day that the airline commenced its operations in the country. Barot...

According to the Mid-Year Cyberthreat Report, published on August 24th, by Acronis, a Switzerland-based cybersecurity company, nearly half of breaches during the first six months of 2022 involved stolen credentials. The goal of stealing credentials is to launch ransomware attacks. According to the report, this “continue to be the number one threat to large and medium-sized businesses, including government organizations." Attackers usually use phishing techniques to extract these credentials. In the first half of the...

Password management giant LastPass has revealed details of a security incident earlier this month in which proprietary information was stolen by threat actors. The company said that the intrusions took place two weeks ago. The firm said that the intrusion took place two weeks ago. “We have determined that an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some...

The Dominican Republic's Instituto Agrario Dominicano (IAD) has suffered a Quantum ransomware attack. The attack encrypted multiple services and workstations throughout the government agency. The IAD is part of the Ministry of Agriculture and is responsible for executing Agrarian Reform programmes in the country. According to local media reports, the ransomware attack occurred on 18th August, which has impacted the agency's usual operations. IAD Director of Technology, Walixson Amaury Nuñez, told local media "they ask for...

The EU's Justice and Home Affairs Agencies' Network (JHAAN) has released new details of its continued work to monitor and contain cyber-threats since Russia's invasion of Ukraine. A recently published paper, Contributing to the EU's Solidarity with Ukraine, outlines the work of nine EU agencies in this area. The list includes the European Union Agency for the Operational Management of Large-Scale IT Systems (eu-LISA). It has been helping member states improve cyber-monitoring and protection of...