Google TAG reported that an exploitation framework making use of multiple zero-days was sold by a Spanish spyware firm for years. Firm says that it is not responsible but there is evidence in the code, including a script that is signed by the company.
A post on the dark web is offering almost 500 million WhatsApp user profiles for sale. Check Point reported that 360 million phone numbers are legitimate, but not necessarily associated with WhatsApp.
Leaked internal document reported that some Meta employees and third party security contractor abused access to an internal account recovery tool for cash, in some cases even engaging in account hijacking plots.
Australia’s string of major data breaches have prompted quick and dramatic action by the government to shore up the nation’s cybersecurity. The most recent is the announcement of a new cyber task force that will spend all of its time pursuing these criminal hackers, whether domestic or foreign.
Personal data of about five million employees and passengers has been stolen in a ransomware attack. Attackers said that the internal network was in such a poor state that they were ceasing any further attacks against AirAsia due to some combination of sympathy and frustration.
A Russian software company that appears to have gone out of its way to hide its origins has raised alarms of online activity tracking in the US Army and several other government agencies, as its code is present in thousands of apps.
Hive ransomware has racked up over $100 million in ransom payments and over 1,300 organizations have been impacted as the group becomes one of the biggest criminal service providers of the moment. The group likes to prey on poorly secured VPNs and unpatched Microsoft Exchange vulnerabilities.
Report shows a full four out of five companies have filed at least one cyber insurance claim; half have filed more than one. Insurers’ next move appears to be more stringent and thorough security controls as a standard term of obtaining a policy.
While the vulnerability scanning program appears to primarily be a public service, the UK government is looking to fortify national security and improve its own cyber readiness using data that it gathers from regularly scanning internet devices.
APT group “OPERA1ER” is active in Africa, Asia and Latin America and conducted sophisticated spear phishing since 2018 and usually notches anywhere from either a few to a dozen successful attacks each year.