#securityaffairs - Dice.camp

0 posts0 participants0 posts today

securityaffairs @securityaffairs@infosec.exchange

French Authorities confirm XSS.is admin arrested in Ukraine
https://securityaffairs.com/180278/cyber-crime/french-authorities-confirm-xss-is-admin-arrested-in-ukraine.html
#securityaffairs #hacking #cybercrime

Security Affairs · Jul 23French Authorities confirm XSS.is admin arrested in UkraineFrench authorities announced the arrest in Ukraine of an alleged administrator of the long-running cybercrime forum XSS.is.

securityaffairs @securityaffairs@infosec.exchange

Patch immediately: CVE-2025-25257 PoC enables remote code execution on #Fortinet #FortiWeb
https://securityaffairs.com/179874/security/patch-immediately-cve-2025-25257-poc-enables-remote-code-execution-on-fortinet-fortiweb.html
#securityaffairs #hacking

Security Affairs · Jul 13Patch immediately: CVE-2025-25257 PoC enables remote code execution on Fortinet FortiWebPoC exploits released for critical Fortinet FortiWeb flaw allowing pre-auth RCE. Fortinet urges users to patch.

Pyrzout @jos1264@social.skynetcloud.site

McDonald’s job app exposes data of 64 Million applicants – Source: securityaffairs.com https://ciso2ciso.com/mcdonalds-job-app-exposes-data-of-64-million-applicants-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #McDonald’s #Security #hacking

mcdonald’s-job-app-exposes-data-of-64-million-applicants-–-source:-securityaffairs.com

CISO2CISO.COM & CYBER SECURITY GROUP · Jul 13McDonald’s job app exposes data of 64 Million applicants – Source: securityaffairs.comSource: securityaffairs.com - Author: Pierluigi Paganini Vulnerabilities in McDonald’s McHire chatbot exposed data from 64 million jo

securityaffairs @securityaffairs@infosec.exchange

#Google fined $314M for misusing idle #Android users' data
https://securityaffairs.com/179628/laws-and-regulations/google-fined-314m-for-misusing-idle-android-users-data.html
#securityaffairs #hacking

Security Affairs · Jul 4Google fined $314M for misusing idle Android users' dataGoogle must pay $314M after a California court ruled it misused idle Android users' data. The case ends a class-action suit filed in 2019

securityaffairs @securityaffairs@infosec.exchange

#Qantas confirms customer data breach amid #Scattered #Spider Attacks
https://securityaffairs.com/179557/cyber-crime/qantas-confirms-customer-data-breach-amid-scattered-spider-attacks.html
#securityaffairs #hacking

Security Affairs · Jul 2Qantas confirms customer data breach amid Scattered Spider attacksQantas reports a cyberattack after hackers accessed customer data via a third-party platform, amid ongoing Scattered Spider aviation breaches.

securityaffairs @securityaffairs@infosec.exchange

#GDPR violations prompt #Germany to push Google and Apple to ban #DeepSeek AI
https://securityaffairs.com/179511/laws-and-regulations/gdpr-violations-prompt-germany-to-push-google-and-apple-to-ban-deepseek-ai.html
#securityaffairs #hacking

Security Affairs · Jul 1GDPR violations prompt Germany to push Google and Apple to ban DeepSeek AIGermany asked Google and Apple to remove DeepSeek AI from their app stores, citing GDPR violations over unlawful data collection.

securityaffairs @securityaffairs@infosec.exchange

Hackers deploy fake #SonicWall #VPN App to steal corporate credentials
https://securityaffairs.com/179332/cyber-crime/hackers-deploy-fake-sonicwall-vpn-app-to-steal-corporate-credentials.html
#securityaffairs #hacking #malware

Security Affairs · Jun 25Hackers deploy fake SonicWall VPN App to steal corporate credentialsHackers spread a trojanized version of SonicWall VPN app to steal login credentials from users accessing corporate networks.

securityaffairs @securityaffairs@infosec.exchange

#Russia-linked #APT28 use #Signal chats to target Ukraine official with #malware
https://securityaffairs.com/179288/apt/russia-linked-apt28-use-signal-chats-to-target-ukraine-official-with-malware.html
#securityaffairs #hacking

Security Affairs · Jun 24Russia-linked APT28 use Signal chats to target Ukraine official with malwareRussia-linked group APT28 uses Signal chats as an attack vector to phish Ukrainian officials with new malware strains.

securityaffairs @securityaffairs@infosec.exchange

Researchers discovered the largest data breach ever, exposing 16 billion login credentials
https://securityaffairs.com/179149/cyber-crime/researchers-discovered-the-largest-data-breach-ever-exposing-16-billion-login-credentials.html
#securityaffairs #hacking

Security Affairs · Jun 19Researchers discovered the largest data breach ever, exposing 16 billion login credentialsResearchers discovered the largest data breach ever, exposing 16 billion login credentials, likely due to multiple infostealers.

securityaffairs @securityaffairs@infosec.exchange

Malicious #Minecraft mods distributed by the Stargazers DaaS target Minecraft gamers
https://securityaffairs.com/179127/malware/malicious-minecraft-mods-distributed-by-the-stargazers-daas-target-minecraft-gamers.html
#securityaffairs #hacking #malware #gaming

Security Affairs · Jun 19Malicious Minecraft mods distributed by the Stargazers DaaS target Minecraft gamersJava-based malware targets Minecraft users via fake cheat tools, utilizing the Stargazers Ghost Network distribution-as-a-service (DaaS).

securityaffairs @securityaffairs@infosec.exchange

Over 80,000 servers hit as roundcube RCE bug gets rapidly exploited
https://securityaffairs.com/178887/hacking/over-80000-servers-hit-as-roundcube-rce-bug-gets-rapidly-exploited.html
#securityaffairs #hacking

Security Affairs · Jun 11Over 80,000 servers hit as roundcube RCE bug gets rapidly exploitedA critical remote code execution (RCE) vulnerability in Roundcube was exploited days after patch, impacting over 80,000 servers.

securityaffairs @securityaffairs@infosec.exchange

#Roundcube Webmail under fire: critical exploit found after a decade
https://securityaffairs.com/178615/hacking/roundcube-webmail-under-fire-critical-exploit-found-after-a-decade.html
#securityaffairs #hacking

Security Affairs · Jun 4Roundcube Webmail under fire: critical exploit found after a decadeA critical flaw in Roundcube webmail, undetected for 10 years, allows attackers to take over systems and execute arbitrary code.

securityaffairs @securityaffairs@infosec.exchange

U.S. #CISA adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/178591/hacking/u-s-cisa-adds-asus-rt-ax55-devices-craft-cms-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking

Security Affairs · Jun 3U.S. CISA adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalogU.S. CISA adds ASUS RT-AX55 devices, Craft CMS, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog.

securityaffairs @securityaffairs@infosec.exchange

US Treasury sanctioned the firm #Funnull #Technology as major cyber scam facilitator
https://securityaffairs.com/178450/cyber-crime/us-treasury-sanctioned-the-firm-funnull-technology.html
#securityaffairs #hacking

Security Affairs · May 30US Treasury sanctioned the firm Funnull Technology as major cyber scam facilitatorThe U.S. sanctioned Funnull Technology and Liu Lizhi for aiding romance scams that caused major crypto losses through fraud infrastructure.

securityaffairs @securityaffairs@infosec.exchange

A critical flaw in #OpenPGP.js lets attackers spoof message signatures
https://securityaffairs.com/178131/uncategorized/a-openpgp-js-flaw-lets-attackers-spoof-message-signatures.html
#securityaffairs #hacking

Security Affairs · May 21A OpenPGP.js flaw lets attackers spoof message signaturesA flaw in OpenPGP.js, tracked as CVE-2025-47934, lets attackers spoof message signatures; updates have been released to address the flaw.

securityaffairs @securityaffairs@infosec.exchange

#Japan passed a law allowing preemptive offensive cyber actions
https://securityaffairs.com/178056/laws-and-regulations/japan-passed-a-law-allowing-preemptive-offensive-cyber-actions.html
#securityaffairs #hacking

Security Affairs · May 19Japan passed a law allowing preemptive offensive cyber actionsJapan passed a law allowing preemptive offensive cyber actions, shifting from its pacifist stance to bolster defenses like major Western powers.

securityaffairs @securityaffairs@infosec.exchange

Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used Worldwide
https://securityaffairs.com/178005/hacking/rogue-devices-in-chinese-made-power-inverters-used-worldwide.html
#securityaffairs #hacking #China

Security Affairs · May 18Experts found rogue devices, including hidden cellular radios, in Chinese-made power inverters used worldwideChinese "kill switches" found in US solar equipment could let Beijing remotely disable power grids in a conflict.

securityaffairs @securityaffairs@infosec.exchange

US Government officials targeted with texts and #AI-generated #deepfake voice messages impersonating senior U.S. officials
https://securityaffairs.com/177987/cyber-crime/us-government-officials-targeted-texts-and-ai-generated-deepfake.html
#securityaffairs #hacking

Security Affairs · May 17US Government officials targeted with texts and AI-generated deepfake voice messages impersonating senior U.S. officialsFBI warns ex-officials are targeted with deepfake texts and AI voice messages impersonating senior U.S. officials.

securityaffairs @securityaffairs@infosec.exchange

#Meta plans to train AI on EU user data from May 27 without consent
https://securityaffairs.com/177920/security/meta-plans-to-train-ai-on-eu-user-data-from-may-27-without-consent.html
#securityaffairs #hacking

Security Affairs · May 16Meta plans to train AI on EU user data from May 27 without consentMeta plans to train AI on EU user data from May 27 without consent; privacy group noyb threatens lawsuit over lack of explicit opt-in.

securityaffairs @securityaffairs@infosec.exchange

#AI in the Cloud: The Rising Tide of Security and #Privacy Risks
https://securityaffairs.com/177911/uncategorized/ai-in-the-cloud-the-rising-tide-of-security-and-privacy-risks.html
#securityaffairs #hacking

Security Affairs · May 16AI in the Cloud: The Rising Tide of Security and Privacy RisksOver half of firms adopted AI in 2024, but cloud tools like Azure OpenAI raise growing concerns over data security and privacy risks.

Drag & drop to upload