In the wake of any disaster or tragedy, there are always some sleazebags who will try to capitalize on the situation to scam or defraud people. The recent tragic Tai Po fire in Hong Kong is a time for national grief and support. In a media statement, the South Korean Privacy Commissioner’s Office is urging……
Israeli entities spanning academia, engineering, local government, manufacturing, technology, transportation, and utilities sectors have emerged as the target of a new set of attacks undertaken by Iranian nation-state actors that have delivered a previously undocumented backdoor called MuddyViper. The activity has been attributed by ESET to a hacking group known as MuddyWater (aka Mango
Vulnerability management is a core component of every cybersecurity strategy. However, businesses often use thousands of software without realising it (when was the last time you checked?), and keeping track of all the vulnerability alerts, notifications, and updates can be a burden on resources and often leads to missed vulnerabilities. Taking into account that nearly…
Google on Monday released monthly security updates for the Android operating system, including two vulnerabilities that it said have been exploited in the wild. The patch addresses a total of 107 security flaws spanning different components, including Framework, System, Kernel, as well as those from Arm, Imagination Technologies, MediaTek, Qualcomm, and Unison. The two high-severity…
Bill Toulas reports: GreyNoise Labs has launched a free tool called GreyNoise IP Check that lets users check if their IP address has been observed in malicious scanning operations, like botnet and residential proxy networks. The threat monitoring firm that tracks internet-wide activity via a global sensor network says this problem has grown significantly over the past……
From HHS OCR: The HHS Office for Civil Rights (OCR) is producing a pre-recorded video for HIPAA covered entities and business associates (collectively, “regulated entities”) reviewing the requirements of the HIPAA Security Rule’s Risk Management implementation specification. OCR welcomes questions that could be addressed during this video. If you have questions about the Security Rule’s……
John P. Meehan Agency, an insurance broker in Pennsylvania, issued a press release on November 22. It begins: John P. Meehan Agency, Inc. (“Meehan”) takes the protection of personal information seriously. As part of that commitment, we are writing to notify you of a data privacy incident involving personal information of certain individuals. The wording……
Edtech vendor Illuminate Education, Inc. is still feeling the consequences of a hacking incident in 2021 that affected millions of students. They recently settled charges by three state attorneys general for $5.1 million and a corrective action plan. Now the FTC has announced its own enforcement action: The Federal Trade Commission will require education technology……
New Horizons Medical provides outpatient mental health and substance abuse treatment services in Fitchburg and Haverhill, Massachusetts. In 2024, they were acquired by the Lawrence Medical Center. Today, the DevMan blog listed New Horizons Medical on its dark web leak site, with a countdown clock indicating less than 4 days left. The listing did not……
A threat actor known as ShadyPanda has been linked to a seven-year-long browser extension campaign that has amassed over 4.3 million installations over time. Five of these extensions started off as legitimate programs before malicious changes were introduced in mid-2024, according to a report from Koi Security, attracting 300,000 installs. These extensions have since been…
