News

Google has announced that they have doubled the rewards for anyone who can who can demonstrate working exploits for a range of zero-day and one-day vulnerabilities across a variety of platforms. The reward increases are applicable to exploits discovered in the Linux Kernel, Kubernetes, Google Kubernetes Engine (GKE), or kCTF (Kubernetes-based infrastructure for capture the flag exercises). The next review will come at the start of 2023. Rewards for valid one-day security exploits, sometimes known...

A new report from CrowdStrike has revealed that ransomware-related data leaks increased by 82% year-on-year in 2021, but three-fifths of cyber attacks involved no malware whatsoever. The security company’s 2022 Global Threat Report was put together using an analysis of its own incident response engagements and security telemetry. The report revealed that 62% of attacks used legitimate credentials to access networks, a process known as "non-malware, hands-on-keyboard activity" before using "living off the land techniques" to move...

The attacks knocked out the Ukrainian defence ministry's website and two bank networks were knocked out. According to the internet monitoring organisation NetBlocks, the attack hit on Tuesday afternoon and lasted for several hours. In a statement yesterday, the organisation revealed that “NetBlocks metrics confirm the loss of service to multiple banking and online platforms in Ukraine, in a manner consistent with a denial-of-service attack. The incident comes amid heightened tensions with neighbouring Russia.” “Metrics...

Google has released Chrome 98.0.4758.102 for Windows, Mac, and Linux, as fix for a high-severity zero-day vulnerability used by cyber-attackers. "Google is aware of reports that an exploit for CVE-2022-0609 exists in the wild," the company said in a security advisory released today. Chrome update will roll out over the coming weeks but it is possible to install the update immediately simply by going into the Chrome menu > Help > About Google Chrome. The vulnerability was detected by Clément...

A data breach at a business services company based in Saginaw, Michigan may have exposed the personal information of 521,00 people. The attack was detected on August 1 last year when data in the company's care became unavailable. The breach comes as a direct result of cyber-criminals targeting Morley Companies.  Michigan attorney general Dana Nessel confirmed on Friday reported "a data security incident that may have impacted data belonging to current employees, former employees and various...

The Security Service of Ukraine (SSU) says that the attacks aim provoke anxiety and undermine Ukrainian society's confidence in the state's ability to defend its citizens. "Ukraine is facing attempts to systemically sow panic, spread fake information and distort the real state of affairs. All this combined is nothing more than another massive wave of hybrid warfare," the SSU said. The SSU has responded to a number of attempts linked to hostile intelligence agencies and...

Following a breach in December, Gloucester City Council has set aside $380k to recover from the incident. The local authority admitted at the time of the attack that it could take up to 6 months fix as servers would need rebuilding. Councillors have admitted, however, that the sum may not be enough to handle the fall out of the incident. One Conservative councillor reportedly claimed that as the situation develops and implications of cost are...

'A1 Hrvatska', a Croatian phone carrier, has disclosed a data breach exposing the personal information of roughly 200,000 of its customers. The organisation has not provided many details outside the fact that they suffered a cybersecurity incident involving the unauthorised access of one of their user databases containing sensitive personal information. The information leaked includes full names, personal identification numbers, physical addresses, and telephone numbers. A1 Hrvatska has stressed that the accessed database did not...

Email spam rates averaged 46% over the year globally, according to a new report by Kaspersky. In its new Spam and Phishing in 2021 report, the Russian AV company revealed that spam rates peaked at 48% in June. The majority came from machines in Russia (25%), followed by Germany (14%), the US (10%) and China (9%). Brazilian (12%), French (12%) and Portuguese (11%) users were the most frequently targeted by attackers. According to Kaspersky, it blocked...

Emil Frey, a Swiss car dealer have released a statement confirming that they were hit with a ransomware attack last month. The company, which is ranked as the number 1 car dealership in Europe, showed up on the list of victims for the Hive ransomware on February 1 later confirming that they were attacked in January. "We have restored and restarted our commercial activity already days after the incident on January 11, 2022," a spokesperson...