Explore

Researchers Uncover Critical Vulnerability in Automaker Systems, Enabling Remote Vehicle Access

Researchers Uncover Critical Vulnerability in Automaker Systems, Enabling Remote Vehicle Access

Researchers Uncover Critical Vulnerability in Automaker Systems, Enabling Remote Vehicle Access

Critical Infrastructure Under Threat: Refrigeration Systems Hacked Across Europe and U.S. Military Bases

Critical Infrastructure Under Threat: Refrigeration Systems Hacked Across Europe and U.S. Military Bases

Critical infrastructure, specifically refrigeration equipment, has been targeted in a series of cyberattacks across Europe and on U.S. military bases. In France, three sites handling blood and plasma bags experienced incidents where cold rooms were raised to high temperatures, though fail-safe measures prevented damage to samples. Widespread attacks also affected supermarket chains in at least 11 European countries, leading to significant food spoilage. Similar incidents occurred in October in France and in August on six commissaries and grocery stores on U.S. military bases, resulting in spoiled food. The Pentagon is investigating these incidents in collaboration with French law enforcement. Many of these hacks exploit vulnerabilities in temperature controllers, particularly those made by the Danish firm Danfoss, often due to outdated firmware and weak, unpatched systems exposed to the internet.

Cyberattacks Target Internet-Connected Freezers, Raising Concerns for Food Industry Operations

Cyberattacks Target Internet-Connected Freezers, Raising Concerns for Food Industry Operations

Cyberattacks Target Internet-Connected Freezers, Raising Concerns for Food Industry Operations

Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont

Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont

Vanguard Group Reports Data Security Incident Exposing Social Security Numbers in Vermont

Why Most Teams Misread Famous BEC Fraud Incidents in U.S. History

Why Most Teams Misread Famous BEC Fraud Incidents in U.S. History

Business Email Compromise (BEC) costs billions, yet many companies misinterpret the lessons from major attacks, focusing on the wrong security solutions.

Smart Devices and Apps Intensify Personal Data Tracking, Raising Privacy Concerns

Smart Devices and Apps Intensify Personal Data Tracking, Raising Privacy Concerns

A growing number of smart devices, including fitness apps, smartwatches, smart home devices, and even modern cars, are extensively tracking users' daily habits and personal information. According to Sergey Gulyayev, CEO of SecureData.com, and Mini Zeng, interim assistant dean and associate professor of computing science at Jacksonville University, these devices collect data ranging from location and driving speed to contacts and messages. Many users unknowingly grant permission for this data collection by agreeing to privacy policies without reading them. A 2023 Pew Research study found that 56% of Americans frequently click 'agree' to privacy policies without review. While some tracking can offer convenience, experts warn about the potential for misuse, including data sales to third parties like insurance companies, which can lead to unexpected consequences such as increased premiums.

CIA Triad Model Explained for Information Security Professionals

CIA Triad Model Explained for Information Security Professionals

CIA Triad Model Explained for Information Security Professionals

Accounting Firms Face Increased Cyber Threats from Session Token Theft, Beyond Traditional Password Attacks

Accounting Firms Face Increased Cyber Threats from Session Token Theft, Beyond Traditional Password Attacks

Accounting Firms Face Increased Cyber Threats from Session Token Theft, Beyond Traditional Password Attacks

Hackers Exploit iOS and Android Flaws to Infect Phones, Targeting U.S. Constitution Anniversary Site

Hackers Exploit iOS and Android Flaws to Infect Phones, Targeting U.S. Constitution Anniversary Site

Hackers, possibly linked to Russia's Foreign Intelligence Service, exploited previously patched iOS and Android flaws to infect mobile phones. These attacks targeted visitors of multiple websites, including one celebrating the 250th anniversary of American independence (america250.org). The attackers registered a lookalike domain, america250[.]holiday, which acted as a reverse proxy to the legitimate site, injecting malicious JavaScript. This script profiled devices and delivered payloads designed to steal browser cookies, Wi-Fi passwords, and extensive iPhone data. Researchers from security firm Sekoia assessed with "moderate to high confidence" that Russia's Foreign Intelligence Service was behind these attacks. Another targeted site, theowo[.]club, proxied a luxury hotel near sensitive UK government institutions.

Russian State-Backed Hackers Exploit Patched Vulnerabilities in Mobile Cyberespionage Campaign

Russian State-Backed Hackers Exploit Patched Vulnerabilities in Mobile Cyberespionage Campaign

A sophisticated cyberespionage campaign, attributed to the Russian Foreign Intelligence Service group APT29 (also known as Midnight Blizzard or Cozy Bear), has targeted mobile device users through watering hole attacks. According to SC Media and NewsCord, researchers at Sekoia identified this activity in October 2026. The attackers used three main delivery methods: script injection on legitimate websites, the use of lookalike domains, and a temporary compromise of the Ukrainian analytics platform Plerdy. This campaign exposed visitors to various sites, including those related to Ukrainian military interests, a United States chemical industry association, and international organizations. The hackers exploited n-day vulnerabilities in iOS and Android devices, which had already been patched by software vendors, to silently steal cookies, device data, and Wi-Fi passwords without user interaction. Security experts emphasize that users with up-to-date operating systems are protected from these specific exploit c...

Federal Prosecutors Intensify Focus on Ransomware and Business Email Compromise Under CFAA

Federal Prosecutors Intensify Focus on Ransomware and Business Email Compromise Under CFAA

Federal prosecutors are increasingly targeting ransomware and business email compromise (BEC) activities under the Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030. The CFAA is the primary federal statute used to prosecute hacking and computer fraud. Ransomware involves attackers encrypting or stealing data and demanding payment, often in cryptocurrency. Prosecutors are pursuing not only those who deploy malware but also 'affiliates,' initial access brokers who sell network credentials, and individuals involved in laundering ransom payments. BEC schemes involve fraudsters impersonating executives, vendors, or real estate agents to redirect wire transfers. These cases frequently lead to the prosecution of 'money mules' who open accounts to receive illicit funds, many of whom may not fully understand the broader criminal enterprise. New Jersey, a hub for financial services, pharmaceuticals, telecommunications, and technology, is a frequent target for cyberattacks and a common venue for such prosecutions...

U.S. Experiences Surge in Cyber Operations, Leading Global Targets in Q3 2026

U.S. Experiences Surge in Cyber Operations, Leading Global Targets in Q3 2026

The United States was the most frequently targeted country for cyber operations in the third quarter of 2026, experiencing 64 incidents. This comes amidst a significant global increase in publicly disclosed cyber operations, with 227 recorded incidents—a 40.1% rise from the previous quarter and 36 more than the long-term quarterly average. The European Repository of Cyber Incidents (EuRepoC), in collaboration with DCSO, reported that 86% of these incidents involved actual 'damage' after intrusion, including data theft (60%) and system outages (42%). Notably, the 'ShinyHunters' group conducted a severe attack on the U.S. Federal Bureau of Investigation (FBI), stealing over 3 TB of data on FBI employees. This attack was followed by a coordinated operation by U.S. and international authorities, leading to several arrests. Additionally, the military conflict surrounding Iran continued to impact the U.S. cyber ecosystem, with several incidents targeting water supply systems in multiple states, including New Jer...