Google experts exposed sophisticated hacking campaign against Windows and Android users

Google published a large report detailing how they exposed a sophisticated hacking campaign that was discovered back in early 2020. The campaign targeted Android and Windows users, and attackers exploited for attacks four zero-day vulnerabilities. The researchers say the attacks they discovered were carried out from two exploit servers (one for Android, the other for… Continue reading Google experts exposed sophisticated hacking campaign against Windows and Android users

Experts discovered SolarLeaks website with data stolen in a recent massive hacker attack

Bleeping Computer reports the discovery of the SolarLeaks website (solarleaks[.]net), where unidentified individuals claim to be selling data allegedly stolen from SolarWinds, Microsoft, Cisco, and FireEye during a recent supply chain attack. Just to recap, in December 2020, it was revealed that unknown hackers attacked SolarWinds, infecting its Orion platform with malware. Out of the… Continue reading Experts discovered SolarLeaks website with data stolen in a recent massive hacker attack

Extortionists hack into Cellmate men’s chastity belts

Last fall, researchers from Pen Test Partners reported on the insecurity of extremely unusual gadgets – Cellmate men’s chastity belts, manufactured by the Chinese company Qiui. Then analysts wrote that devices have a lot of security problems, and hackers can also block and open them remotely, and there is simply no manual control for “emergency”… Continue reading Extortionists hack into Cellmate men’s chastity belts

Nissan source code leaked due to admin: admin credentials

The source code for mobile apps and internal tools for Nissan’s North American division has leaked. The leak was due to the fact that the specialists of the automaker incorrectly configured one of their Git servers. The first incident was highlighted by the Swiss developer and researcher Tillie Kottmann. He wrote on Twitter (the account… Continue reading Nissan source code leaked due to admin: admin credentials

Storming of the US Congress poses a serious threat to cybersecurity

Storming of the US Congress in Washington, in addition to political consequences, may pose a cybersecurity threat, experts say. On Wednesday, January 6, supporters of Donald Trump stormed the Capitol building, where the US Congress is located, to disrupt Joe Biden’s assertion as the 46th president of the United States. At least 50 people were… Continue reading Storming of the US Congress poses a serious threat to cybersecurity

Researcher discovered vulnerability in Telegram, which allows to locate user

The researcher discovered a vulnerability in Telegram. The fact is that the messenger provides users with the “People Nearby” function, thanks to which it is possible to determine the location of a social network client with an accuracy of several tens of meters. Enthusiast Ahmed Hasan posted a message about the vulnerability found on his… Continue reading Researcher discovered vulnerability in Telegram, which allows to locate user

Millions of Windows 7 users refuse to upgrade to Windows 10

In early 2020, Microsoft officially ended support for the Windows 7 operating system. However, millions of Windows 7 users refuse to upgrade to Windows 10. Prior to the end of support, ZDNet journalist Ed Bott consulted with some analytics experts and estimated that approximately 200 million PC owners worldwide would ignore the end of support… Continue reading Millions of Windows 7 users refuse to upgrade to Windows 10

Nintendo spied on a hacker who prepared attack on the 3DS console

The TorrentFreak magazine reported about leaked documents that shed light on how a few years ago Nintendo arranged a large-scale surveillance of the hacker who prepared attack on the 3DS console. The company closely monitored his personal life and was aware of when he left the house and where he was going, and even tried… Continue reading Nintendo spied on a hacker who prepared attack on the 3DS console

Microsoft says SolarWinds hackers hunted for access to cloud resources

Microsoft continues to investigate the supply chain attack that SolarWinds and its customers have suffered this year. Microsoft analysts reported that SolarWinds hackers were hunting for access to cloud resources. Let me remind you that unknown hackers attacked SolarWinds and infected its Orion platform with malware. Among the victims were such giants as Microsoft, Cisco,… Continue reading Microsoft says SolarWinds hackers hunted for access to cloud resources

New web skimmer found in Shopify, BigCommerce, Woocommerce and Zencart stores

Sansec experts have discovered a new multi-platform MageCart skimmer capable of stealing payment information from compromised stores. The web skimmer works in Shopify, BigCommerce, Zencart and Woocommerce stores (even if they don’t support custom scripts for checkout pages). Let me remind you that initially the name MageCart was assigned to one hack group, which was… Continue reading New web skimmer found in Shopify, BigCommerce, Woocommerce and Zencart stores