A naukri.com initiative
Hacking News
Coinpedia
2w
253
Image Credit: Coinpedia
Google’s Willow Quantum Chip: Is Bitcoin At Risk?
- Google's Willow quantum chip demonstrates significant progress in quantum computing, but it currently lacks the power to break Bitcoin's encryption.
- Willow serves as a reminder of the potential long-term threat of quantum computing to Bitcoin's security.
- The crypto community is actively developing quantum-resistant solutions and has sufficient time to prepare.
- Bitcoin remains safe for now, as Willow's current capabilities are far from being able to crack its encryption.
Read Full Article
15 Likes
Livebitcoinnews
2w
284
Image Credit: Livebitcoinnews
North Korea Impersonates Contractor in $50M Radiant Hack
- North Korea's Reconnaissance General Bureau (RGB) unit, UNC4736, impersonated a contractor and orchestrated a $50M hack on Radiant Capital.
- The attack involved the use of advanced malware, INLETDRIFT, which was delivered through a phishing attack on an employee.
- This incident highlights the vulnerability of DeFi platforms to malware and social engineering attacks, raising concerns about their security.
- The hack emphasizes the urgent need for DeFi systems to enhance their security measures and collaborate with cybersecurity firms.
Read Full Article
17 Likes
Securityaffairs
2w
370
Image Credit: Securityaffairs
Romanian energy supplier Electrica Group is facing a ransomware attack
- Romanian energy supplier Electrica Group is facing a ransomware attack.
- The attack hasn't affected critical systems but may cause temporary disruptions in customer services.
- Electrica is implementing internal cybersecurity protocols and collaborating with national cybersecurity authorities.
- The attack is believed to be a retaliation for Romania annulling its presidential election over alleged Russian interference.
Read Full Article
22 Likes
TechCrunch
2w
211
Image Credit: TechCrunch
Ukraine says Russian hackers are targeting country’s defense contractors
- Ukraine's defense contractors are being targeted by Russian hackers, according to the country's Computer Emergency Response Team (CERT-UA).
- The hacking group UAC-0185, also known as UNC4221, is behind the attacks.
- The group has been using phishing emails, pretending to be the Ukrainian League of Industrialists and Entrepreneurs, to target employees working for Ukraine's defense contractors and defense forces.
- Cybersecurity experts have previously linked this hacking group to the Russian government.
Read Full Article
12 Likes
Securityaffairs
2w
245
Image Credit: Securityaffairs
Mandiant devised a technique to bypass browser isolation using QR codes
- Mandiant has revealed a technique to bypass browser isolation using QR codes.
- Browser isolation separates web browsing from the user's device by running the browser in a secure environment.
- Mandiant's technique involves embedding C2 data in a QR code displayed on a legitimate web page.
- The implant captures a screenshot, decodes the QR code, and communicates with the attacker-controlled server.
Read Full Article
14 Likes
Securelist
2w
164
Image Credit: Securelist
Story of the Year: global IT outages and supply chain attacks
- A faulty update by CrowdStrike triggered one of the largest IT outages in history, impacting approximately 8.5 million systems worldwide.
- The incident served as a reminder of critical risks posed by global IT disruptions and supply chain weaknesses.
- Kaspersky Security Bulletin 2024's 'Story of the Year' is centered on supply chain incidents and global disruptions.
- Supply chain incidents from 2024 include CrowdStrike Linux outrages, XZ backdoor, Pager attack, JavaScript abuse, Cisco breach, Fortinet firewall vulnerabilities, among others.
- Emerging threats include major AI provider failure, exploitation of on-device AI tools, cyberattacks on communication satellites, physical threats to the internet, kernel exploitation in Windows and Linux.
- Awareness is the first step towards mitigating potential supply chain risks.
- Regular updates should be rigorously tested before deployment and adopt granular updates to minimize disruptions.
- Diversifying providers reduce single points of failure, enhancing system robustness.
- Fostering a culture of responsibility among personnel improves human vigilance and is important for the system's security and stability.
- Implementing stricter security measures, adopting a vigilant approach to project management, and maintaining careful oversight in regard to contributed projects also helps.
Read Full Article
9 Likes
Bitcoinik
2w
164
Image Credit: Bitcoinik
Cardano Foundation Account Was Hacked; Cardano Founder Comments, Sparks Solana (SOL) Community Buzz
- Cardano Foundation's X account was hacked for an hour.
- The hacker announced a new token called $ADASOL, a Solana-based token.
- Cardano founder, Charles Hoskinson, commented on the Solana community gaining amid the hack.
- $ADA coin is currently trading at $1.17, experiencing a 2.47% increase over the last 7 days.
Read Full Article
9 Likes
Hackingblogs
2w
384
Image Credit: Hackingblogs
New Windows Zero-Day Vulnerability Exposes NTLM Credentials: What You Need to Know
- A zero-day vulnerability in Windows exposes NTLM credentials.
- Attackers can obtain NTLM credentials by tricking users into viewing a malicious file in Windows Explorer.
- The vulnerability affects various Windows versions, from Windows 7 to Windows 11 and Server 2022.
- 0patch is offering a micropatch as a temporary solution until an official patch is released by Microsoft.
Read Full Article
23 Likes
Securityaffairs
2w
0
Image Credit: Securityaffairs
Security Affairs newsletter Round 501 by Pierluigi Paganini – INTERNATIONAL EDITION
- RedLine info-stealer campaign targets Russian businesses through pirated corporate software
- Romania’s election systems hit by 85,000 attacks ahead of presidential vote
- Authorities shut down Crimenetwork, Germany’s largest crime marketplace
- Cybercrime: INTERPOL financial crime operation makes record 5,500 arrests, seizures worth over USD 400 million
Read Full Article
Like
Securityaffairs
2w
38
Image Credit: Securityaffairs
8Base ransomware group hacked Croatia’s Port of Rijeka
- The 8Base ransomware group attacked Croatia’s Port of Rijeka, stealing sensitive data, including contracts and accounting info.
- The cyber attack was claimed by the 8Base ransomware group.
- The Port of Rijeka is Croatia's largest dry cargo concessionaire and offers various economic services.
- The ransomware gang claims to have stolen data such as accounting info and contracts.
Read Full Article
2 Likes
TheNewsCrypto
2w
407
Image Credit: TheNewsCrypto
When Will WazirX Return, If Not Now?
- WazirX, a popular crypto exchange, is working to recover from a $235 million hack and has applied to the Singapore Court for permission to meet with creditors to decide how to distribute remaining funds.
- Some users are concerned about the management of the funds, but WazirX has proposed a Scheme of Arrangement to resolve the situation fairly, which requires creditor approval.
- Restarting the exchange will involve figuring out how to handle the funds of affected users, and WazirX is working on a plan to ensure fair distribution.
- WazirX's recovery process requires patience and community support to restart the platform successfully.
Read Full Article
24 Likes
Coinpedia
2w
273
Image Credit: Coinpedia
Crypto Weekly Hack Report: Why Multi-Factor Authentication Is Crucial in 2024
- The cryptocurrency industry has experienced significant cybersecurity threats.
- DMM Bitcoin, a Japanese crypto exchange, suffered a security breach and lost $320 million.
- Coins.ph, a Filipino cryptocurrency exchange, faced a social media hack but took quick action.
- Other smaller attacks occurred, highlighting the importance of multi-factor authentication and staying updated on security risks.
Read Full Article
16 Likes
Securityaffairs
2w
21
Image Credit: Securityaffairs
Russia’s FSB used spyware against a Russian programmer
- The Russian intelligence agency, FSB, used spyware to monitor a Russian programmer, Kirill Parubets, after detaining him for allegedly donating to Ukraine earlier this year.
- During Parubets' detention, authorities seized his Android device and installed spyware on it.
- The spyware allowed Russian authorities to track the device's location, record phone calls and keystrokes, and read messages from encrypted messaging apps.
- The analysis of the device revealed that the spyware was a trojanized version of the genuine Cube Call Recorder app, enabling comprehensive surveillance of the target device.
Read Full Article
1 Like
Medium
2w
73
Privacy is a right, not a privilege. Stay vigilant. – ShadowFury"
- Riyad, known as ShadowFury, receives a mysterious email urging him to break into Echelon Industries.
- Using his hacking skills, Riyad exploits vulnerabilities and gains access to Echelon's internal network.
- He discovers that Echelon has been embedding spyware in their IoT devices for surveillance purposes.
- Riyad exposes Echelon's actions by uploading evidence and disappears from the web.
Read Full Article
4 Likes
Securityaffairs
2w
82
Image Credit: Securityaffairs
Romania ’s election systems hit by 85,000 attacks ahead of presidential vote
- Romania's election systems suffered over 85,000 cyberattacks targeting the country's election systems.
- Leaked credentials for election-related websites were posted on a Russian hacker forum before the presidential election.
- Romania's intelligence agency warns that the election systems are still vulnerable and could be compromised again.
- Romania's Foreign Intelligence Service believes Russia targeted the country as part of broader efforts to influence democratic elections in Eastern Europe.
Read Full Article
4 Likes
For uninterrupted reading, download the app