Explore

Trendline Trendline
LinkedIn's Covert Scanning of Chrome Extensions Raises Privacy Concerns

LinkedIn's Covert Scanning of Chrome Extensions Raises Privacy Concerns

LinkedIn's Covert Scanning of Chrome Extensions Raises Privacy Concerns
Rapid Read Rapid Read
European Commission Data Breach Exposes Vulnerabilities in Trivy Supply Chain Attack

European Commission Data Breach Exposes Vulnerabilities in Trivy Supply Chain Attack

The European Commission (EC) has confirmed a significant data breach involving the theft of over 300GB of data from its AWS environment. This breach was facilitated by a compromised API key in a supply chain attack on the Trivy vulnerability scanner, a tool developed by Aqua Security. The breach, which occurred on March 24, was initially disclosed on March 27. Hackers, identified as the TeamPCP group, exploited the compromised API key to gain unauthorized access to the EC's AWS cloud account, which supports the Europa.eu platform. This platform hosts public websites for the EC and other European Union entities. The attackers used the compromised key to create new access credentials, allowing them to conduct reconnaissance and exfiltrate data. The stolen data, which includes personal information such as names, email addresses, and usernames, was later published by the ShinyHunters extortion group on their Tor-based leak site.
Rapid Read Rapid Read
AI-Powered Robot Police Dogs Deployed in Atlanta to Enhance Security

AI-Powered Robot Police Dogs Deployed in Atlanta to Enhance Security

In Atlanta, AI-powered robot dogs have been introduced to patrol various areas such as streets, apartments, parking lots, and construction sites. These robotic units, developed by the company Undaunted, are equipped with cameras, lights, sirens, and speakers, and are designed to follow pre-set routes while streaming 360-degree video to remote operators. This initiative aims to provide a cost-effective alternative to human security guards amid rising theft and break-ins. However, the deployment has sparked concerns about privacy and the normalization of constant surveillance, especially as these technologies are increasingly used by law enforcement agencies. The Atlanta Police Department has stated that these robot dogs, known as Hound Units, will operate around the clock to help deter criminal activity.
Rapid Read Rapid Read
WhatsApp Alerts Users to Spyware Threat from Fake iOS App, Italian Firm Implicated

WhatsApp Alerts Users to Spyware Threat from Fake iOS App, Italian Firm Implicated

WhatsApp has alerted approximately 200 users who were deceived into installing a fake version of its iOS app, which was infected with spyware. The majority of the affected users are located in Italy. The spyware was reportedly developed by Asigint, an Italian subsidiary of the spyware company SIO. This incident follows previous reports of SIO's involvement in creating malicious Android apps that masqueraded as popular applications to steal private data. WhatsApp has recommended that affected users uninstall the malware-laced apps and download the official version of the app.
Rapid Read Rapid Read
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Affecting EU Entities

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Affecting EU Entities

The European Commission (EC) has confirmed a significant data breach involving over 300GB of data stolen from its AWS environment. This breach was linked to a compromised API key in the Trivy supply chain attack. The incident, which occurred on March 24, was initially disclosed on March 27. Hackers accessed the AWS account, part of the backend for the Europa.eu hosting service, which supports public websites for the EC and other European Union entities. The breach was facilitated by a compromised version of Trivy, a vulnerability scanner, which the EC had received through normal software update channels. The attackers, identified as the TeamPCP hacking group, used the compromised AWS key to create and attach a new access key to a user account, allowing them to conduct reconnaissance and exfiltrate data. The stolen data, which includes personal information such as names, email addresses, and usernames, was later added to a Tor-based leak site by the ShinyHunters extortion group.
Rapid Read Rapid Read
European Cyber Agency Identifies Hacking Gangs in Major Data Breach Affecting EU Entities

European Cyber Agency Identifies Hacking Gangs in Major Data Breach Affecting EU Entities

The European Union's cybersecurity agency has identified a cybercriminal group known as TeamPCP as responsible for a significant data breach at the EU's executive body, the European Commission. The breach involved the theft of approximately 92 gigabytes of compressed data from a compromised Amazon Web Services (AWS) account. This account was used by the European Commission to host websites and publications for the bloc's institutions and agencies. The stolen data included personal information such as names, email addresses, and email contents. The breach originated on March 19 when hackers acquired a secret API key associated with the European Commission's AWS account. This was facilitated by a previous hack targeting the open-source security tool Trivy, which the Commission inadvertently downloaded. The stolen data was subsequently posted online by another hacking group, ShinyHunters. CERT-EU, the EU's cybersecurity agency, is currently analyzing the data and has contacted affected organizations.
Trendline Trendline
Microchip Technology Achieves IEC 62443-4-1 ML2 Certification, Enhancing Cybersecurity Assurance

Microchip Technology Achieves IEC 62443-4-1 ML2 Certification, Enhancing Cybersecurity Assurance

Microchip Technology Achieves IEC 62443-4-1 ML2 Certification, Enhancing Cybersecurity Assurance
Rapid Read Rapid Read
FBI Classifies Wiretap Infrastructure Breach as Major Incident, Suspects Chinese Hackers

FBI Classifies Wiretap Infrastructure Breach as Major Incident, Suspects Chinese Hackers

The FBI has officially classified a breach of its lawful wiretap infrastructure as a major incident, highlighting significant national security risks. The breach, reportedly carried out by state-sponsored Chinese hackers, involved accessing the FBI's infrastructure through a commercial ISP. The compromised system contained sensitive information, including returns from legal processes such as pen register and trap and trace surveillance returns, as well as personally identifiable information related to FBI investigations. This breach underscores the vulnerabilities in critical law enforcement infrastructure and the ongoing threat posed by sophisticated cyberattacks.
Rapid Read Rapid Read
European Cybersecurity Agency Identifies Hacking Groups Behind Major Data Breach

European Cybersecurity Agency Identifies Hacking Groups Behind Major Data Breach

The European Union's cybersecurity agency has identified a cybercriminal group known as TeamPCP as responsible for a significant data breach at the EU's executive body. The breach involved the theft of approximately 92 gigabytes of compressed data from an Amazon Web Services (AWS) account used by the European Commission. This data included personal information such as names, email addresses, and email contents. The breach affected the cloud infrastructure of the Commission's Europa.eu platform, which is used by member states to host websites and publications. The stolen data was later posted online by another hacking group, ShinyHunters. The breach originated on March 19 when hackers acquired a secret API key associated with the European Commission's AWS account, following a hack targeting the open-source security tool Trivy.
Trendline Trendline
Cisco Patches Critical IMC Authentication Bypass Vulnerability Allowing Admin Access

Cisco Patches Critical IMC Authentication Bypass Vulnerability Allowing Admin Access

Cisco Patches Critical IMC Authentication Bypass Vulnerability Allowing Admin Access
Trendline Trendline
Stryker Recovers from Iranian Cyberattack, Resumes Operations

Stryker Recovers from Iranian Cyberattack, Resumes Operations

Stryker Recovers from Iranian Cyberattack, Resumes Operations
Trendline Trendline
Cisco Addresses Critical Vulnerability in IMC Affecting Multiple Products

Cisco Addresses Critical Vulnerability in IMC Affecting Multiple Products

Cisco Addresses Critical Vulnerability in IMC Affecting Multiple Products