Latest Cybersecurity News and Articles


Serious Unpatched Vulnerability Uncovered in Popular Belkin Wemo Smart Plugs

17 May 2023
The second generation version of Belkin's Wemo Mini Smart Plug has been found to contain a buffer overflow vulnerability that could be weaponized by a threat actor to inject arbitrary commands remotely. The issue, assigned the identifier CVE-2023-27217, was discovered and reported to Belkin on January 9, 2023, by Israeli IoT security company Sternum, which reverse-engineered the device and

Re-Victimization from Police-Auctioned Cell Phones – Krebs on Security

17 May 2023
Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being re-victimized, a new study found.

Bad bots are coming for APIs

17 May 2023
In 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year, according to Imperva. The proportion of human traffic (52.6%) decreased to its lowest level in eight years.

Attackers Deliver Redline Stealer via Poisoned AI Tools

17 May 2023
Researchers have identified malicious advertisement campaigns within Google's search engine to distribute RedLine Stealer. These campaigns revolve around themes associated with AI tools, including the mention of "Midjourney."

State-Sponsored Sidewinder Hacker Group's Covert Attack Infrastructure Uncovered

17 May 2023
Cybersecurity researchers have unearthed previously undocumented attack infrastructure used by the prolific state-sponsored group SideWinder to strike entities located in Pakistan and China. This comprises a network of 55 domains and IP addresses used by the threat actor, cybersecurity companies Group-IB and Bridewell said in a joint report shared with The Hacker News. "The identified phishing

Microsoft is scanning the inside of password-protected zip files for malware

17 May 2023
Microsoft cloud services are scanning for malware by peeking inside users’ zip files, even when they’re protected by a password, several users reported on Mastodon on Monday.

FTC sues VoIP provider over 'billions of illegal robocalls'

17 May 2023
A VoIP provider was at the heart of billions of robocalls made over the past five years that broke a slew of US regulations, from enabling telemarketing scams to calling numbers on the National Do Not Call Registry, it is claimed.

Airline exposes passenger info to others due to a 'technical error'

17 May 2023
airBaltic, Latvia's flag carrier has acknowledged that a 'technical error' exposed reservation details of some of its passengers to other airBaltic passengers. A spokesperson confirmed that the issue impacted 0.009% of its reservations this year.

Hotel Reservation-themed Phishing Campaign Delivers XWorm Malware

17 May 2023
Researchers uncovered a phishing attack spreading the XWorm malware by abusing the Follina vulnerability. Criminals employ a PowerShell code infused with memes to carry out their malicious activities. The malicious activity has been observed targeting manufacturing and healthcare companies based in Germany.

U.S. Offers $10 Million Bounty for Capture of Notorious Russian Ransomware Operator

17 May 2023
A Russian national has been charged and indicted by the U.S. Department of Justice (DoJ) for launching ransomware attacks against "thousands of victims" in the country and across the world. Mikhail Pavlovich Matveev (aka Wazawaka, m1x, Boriselcin, and Uhodiransomwar), the 30-year-old individual in question, is alleged to be a "central figure" in the development and deployment of LockBit, Babuk,

Russian Hacker “Wazawaka” Indicted for Ransomware

16 May 2023
A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two indictments unsealed by the Justice Department today. U.S. prosecutors say Mikhail Pavolovich Matveev, a.k.a. "Wazawaka" and "Boriselcin" worked with three different ransomware gangs that extorted hundreds of millions of dollars from companies, schools, hospitals and government agencies.

Holiday season sees 550% increase in unique threats

16 May 2023
API security was studied in a recent report by Cequence Security based on the analysis of API transactions over the second half of 2022.

Pro-Houthi hacking group linked to spyware operation on Arabian Peninsula

16 May 2023
From April to May 2022, as Saudi Arabia hosted negotiations between Yemeni leaders involved in the nearly decade-long civil war, OilAlpha sent malicious Android files through WhatsApp to political representatives and journalists, researchers noted.

U.K. citizen pleads guilty in connection to Twitter hack

16 May 2023
A U.K. citizen pleaded guilty last week in New York to his role in cyberstalking and other computer hacking schemes, including the July 2020 hack of Twitter.

China's Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks

16 May 2023
The Chinese nation-state actor known as Mustang Panda has been linked to a new set of sophisticated and targeted attacks aimed at European foreign affairs entities since January 2023.

8220 Gang Evolves With New Strategies

16 May 2023
Trend Micro researchers observed a recent attack from the 8220 Gang exploiting the Oracle WebLogic vulnerability CVE-2017-3506 (CVSS score of 7.4) captured by one of their honeypots.

Parental control app with 5 million downloads vulnerable to attacks

16 May 2023
Researchers at SEC Consult have found that the Kids Place app versions 3.8.49 and older are vulnerable to five flaws that could impact the safety and privacy of its users.

BEC Attackers Spoof CC'd Execs to Force Payment

16 May 2023
Dubbed “VIP Invoice Authentication Fraud” by Armorblox, the tactic is used in classic fake emails designed to impersonate trusted vendors or other third parties that the victim organization regularly pays.

Huntress Closes $60M Series C for MDR Expansion

16 May 2023
The $60 million Series C was led by Sapphire Ventures and brings the total raised by Huntress to a whopping $118 million. Existing investors JMI Equity and Forgepoint Capital expanded their equity stake.

China's Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks

16 May 2023
The Chinese nation-state actor known as Mustang Panda has been linked to a new set of sophisticated and targeted attacks aimed at European foreign affairs entities since January 2023. An analysis of these intrusions, per Check Point researchers Itay Cohen and Radoslaw Madej, has revealed a custom firmware implant designed explicitly for TP-Link routers. "The implant features several malicious