Data Breaches
South Korea's Nuclear Research agency hacked using VPN flaw
North Korea-linked APT group Kimsuky breached KAERI
hackers
Vulnerabilities
Peloton Bike+ vulnerability could allow hackers to control it
The popular Peloton Bike+ had a vulnerability which when exploited would have allowed an attacker to gain complete control over the device, including the camera and…
Data Breaches
Hackers use fake foundations to target Uyghur Minority
The group is targeted in spy campaigns under the guise of the United Nations
Cyber Security
Windows Moriya rootkit used in highly targeted attacks
A Windows rootkit has been employed by unknown threat actors for years to stealthily install backdoors on vulnerable machines. In a campaign by Kaspersky, named Operation…
Vulnerabilities
Tesla Model X hacked with a DJI Mavic 2 drone
Security researchers has demonstrated how to hack a Tesla Model X’s and open the doors using a DJI Mavic 2 drone equipped with a WIFI dongle.…
Vulnerabilities
Hackers exploit unpatched Pulse Secure VPN Zero-Day to breach organizations
A newly discovered critical zero-day authentication bypass vulnerability (CVE-2021-22893) in Pulse Secure VPN devices is found to be currently exploited in the wild. At least two…
Data Breaches
Geico data breach exposed customers' driver's license numbers
Car insurance provider Geico was hit with a data breach and the attackers managed to steal the driver's licenses for policyholders for over a month. Geico,…
Cyber Hacking News
Lazarus hacking group now uses BMP image to hide malware
The Lazarus group has improved its loader obfuscation techniques in a recent phishing campaign by abusing image files. Lazarus, the state-sponsored advanced persistent threat (APT) group…
Cyber Security
New Cring ransomware affects unpatched Fortinet VPN devices
A vulnerability in Fortinet VPNs is being exploited by a new ransomware strain dubbed Cring to breach and encrypt industrial sector companies' networks. Cring ransomware (also…
Malware
Lazarus hacking group’s latest weapon strikes South African freight
The Lazarus hacking group employed a new backdoor in targeted attacks against a South African freight and logistics firm. The new backdoor malware, dubbed Vyveva was…
