Explore

Uber Reports Data Breach Affecting Thousands of Drivers Through Third-Party Vendor

Uber Reports Data Breach Affecting Thousands of Drivers Through Third-Party Vendor

Uber Reports Data Breach Affecting Thousands of Drivers Through Third-Party Vendor

TSMC Confirms Employee Data Breach Linked to Cloud Service Provider

TSMC Confirms Employee Data Breach Linked to Cloud Service Provider

TSMC Confirms Employee Data Breach Linked to Cloud Service Provider

SilentAir Hackers Intercept Calls and SMS from Mobile Networks, Targeting High-Profile Figures

A previously unknown threat actor, tracked as SilentAir by telecom software and cybersecurity company Enea, is actively intercepting phone calls and text messages by compromising mobile operator infrastructure. Enea assesses with high confidence that SilentAir is a new state-level actor, with Taiwan being its primary target. The hackers launch signaling attacks, primarily over SS7 and sometimes Diameter protocols, from hijacked network nodes within mobile operators. These attacks reroute a target's incoming calls and SMS messages through the compromised node, allowing the hackers to harvest subscriber details. While location tracking is also possible, it constitutes a smaller portion of their activity. SilentAir also sends 'silent SMS messages' that do not appear on the recipient's phone, likely to verify the success of earlier interception attempts. Enea has been monitoring these attacks since early 2025, with evidence suggesting activity predates this period. The hijacked nodes are located in at least si...

FortiManager Users Face Workflow Approval Bypass in Device Configuration

FortiManager Users Face Workflow Approval Bypass in Device Configuration

A user implementing workflow session approvals on FortiManager (FMG) has identified a critical loophole: direct device configurations can still be edited without requiring a session or approval. While the user can lock the Administrative Domain (ADOM), changes to device configurations can still be made outside the established approval workflow. This bypass undermines the intended security and control mechanisms designed to ensure that all configuration changes are reviewed and approved before implementation. The user is seeking a method to completely prevent direct device editing, thereby enforcing the workflow approval process for all modifications.

FBI Disrupts North Korean 'FaceStealer' Cryptocurrency Theft Scheme Targeting Web3 Industries

FBI Disrupts North Korean 'FaceStealer' Cryptocurrency Theft Scheme Targeting Web3 Industries

The FBI and the Department of Justice have successfully disrupted cloud-based infrastructure used by North Korean hacking groups in a sophisticated cryptocurrency theft scheme known as 'FaceStealer.' These cyber actors, identified by various names including Sapphire Sleet, UNC1069, Stardust Chollima, and APT38, have aggressively targeted companies and individuals in the cryptocurrency and Web3 industries. The scheme involves highly tailored social engineering campaigns, utilizing imposter versions of popular video conferencing platforms and secretly recorded webcam videos. The FBI identified and seized over 900 webcam videos of victims globally, primarily those working in the crypto and Web3 sectors. This operation follows the theft of more than $400 million in cryptocurrency over the past 18 months attributed to this group. The hackers aim to compromise software supply chains by infiltrating accounts of trusted developers and maintainers, potentially distributing malicious code to millions of users.

FBI Disrupts North Korean 'FaceStealer' Cryptocurrency Theft Scheme, Seizing Over 900 Webcam Videos

FBI Disrupts North Korean 'FaceStealer' Cryptocurrency Theft Scheme, Seizing Over 900 Webcam Videos

The FBI and the Department of Justice (DOJ) have successfully disrupted cloud-based infrastructure used by North Korean hackers in a sophisticated cryptocurrency theft scheme known as 'FaceStealer.' This operation led to the seizure of over 900 webcam videos of victims working in the crypto and Web3 industries globally. The FaceStealer scheme involves North Korean cyber actors, identified by various names including Sapphire Sleet, UNC1069, Stardust Chollima, APT38, and BlueNoroff, aggressively targeting individuals and companies in the cryptocurrency and Web3 sectors. These actors employ highly tailored social engineering campaigns, utilizing imposter versions of popular video conferencing platforms, secretly recorded webcam footage, and computer intrusions to steal billions of dollars in cryptocurrency. In the 18 months leading up to this disruption, the scheme had resulted in the theft of more than $400 million.

Fortinet Users Report Firmware Information Unavailable After Fortigate v7.6.8 Upgrade

Fortinet Users Report Firmware Information Unavailable After Fortigate v7.6.8 Upgrade

Users of Fortinet's Fortigate 60F devices are encountering an issue where firmware information becomes unavailable after upgrading to version 7.6.8. Specifically, the 'Firmware info unavailable' message appears under the 'Firmware & Registration → Upgrade status' section of the device interface. This problem has been reported by users in the Fortinet Community forum, indicating a potential bug or display issue within the new firmware version. The core of the problem appears to be a missing ID in the firmware upgrade matrix, which prevents the system from properly displaying the firmware details.

Clinton County College Campus Closes for Network Incident Investigation

Clinton County College Campus Closes for Network Incident Investigation

A college campus located in Clinton County has temporarily closed its operations to conduct an investigation into a potential network incident. The specific nature of the incident has not been detailed, but the closure indicates a significant disruption requiring immediate attention from the college administration. This action suggests a proactive approach to address any vulnerabilities or breaches within their digital infrastructure. The closure impacts campus activities and potentially online services, as the investigation aims to secure the network and understand the scope of the issue. Further details regarding the incident's cause or potential impact on student and faculty data are pending the outcome of the ongoing investigation.

Germany to Launch d-you-Wallet for European Digital Identity in Early 2027

Germany to Launch d-you-Wallet for European Digital Identity in Early 2027

Germany is set to launch the d-you-Wallet, its government-issued wallet for the European Digital Identity (EUDI-Wallet), in early 2027. This digital wallet, accessible via smartphone, will enable users to verify their identity both online and in person, as well as securely receive, store, and present digital documents. The d-you-Wallet is designed to facilitate various interactions, including conducting business with government agencies online, opening bank accounts, and submitting supporting documents for applications. Users will retain control over which data they choose to share, as the use of the wallet is voluntary. Zittau/Görlitz University of Applied Sciences plans to integrate the d-you-Wallet for digital identity verification on its eCampus and for distributing various university documents directly to students' wallets. This initiative aims to provide a seamless and secure method for managing personal and official digital information.

ULS Mandates International Travel Reporting for Account Holders to Combat Cyber Threats

ULS Mandates International Travel Reporting for Account Holders to Combat Cyber Threats

ULS is now requiring all account holders to report their international travel dates and destinations in advance. This new mandate is a direct response to the increasing frequency and sophistication of cyberattacks targeting institutions. ULS IT systems experience an average of 87 failed login attempts from overseas locations daily, with numbers sometimes reaching hundreds. The institution emphasizes that a single compromised account can jeopardize both individual information and the broader ULS systems. By knowing when community members are legitimately accessing their accounts from abroad, ULS IT can better differentiate authorized activity from potential security threats. Failure to report international travel may result in an account being locked until ULS IT can verify the activity's legitimacy through direct contact with the account holder. This requirement applies to all individuals with a ULS-issued account, including those sponsoring or leading international trips, who must ensure all participants ...

FBI Disrupts North Korean FaceStealer Cryptocurrency Theft Scheme, Seizing Victim Videos and Recovering Funds

FBI Disrupts North Korean FaceStealer Cryptocurrency Theft Scheme, Seizing Victim Videos and Recovering Funds

The FBI and Department of Justice (DOJ) have announced the disruption of cloud-based infrastructure used by North Korean cyber actors in a sophisticated cryptocurrency theft scheme known as FaceStealer. This operation led to the seizure of over 900 webcam videos of victims working in the crypto and Web3 industries globally. The FaceStealer scheme involves highly tailored social engineering campaigns where threat actors compromise and secretly record victims' webcams. They then hijack communication accounts to message contacts, delivering convincing fake video links to new targets and luring them into imposter video chats. This activity is attributed to North Korean hacking groups such as Sapphire Sleet, UNC1069, Stardust Chollima, APT38, and BlueNoroff. These groups have aggressively targeted companies and individuals in the cryptocurrency and Web3 sectors, resulting in the theft of over $400 million in the last 18 months leading up to the disruption. The actors are increasingly focusing on open-source sof...

Digital Asset Passports Emerge as Blockchain-Based Record-Keeping System for Verifiable Asset Information

Digital Asset Passports Emerge as Blockchain-Based Record-Keeping System for Verifiable Asset Information

Digital Asset Passports Emerge as Blockchain-Based Record-Keeping System for Verifiable Asset Information