In a landmark collaborative effort, the National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released a joint Cybersecurity Advisory (CSA) that uncovers the ten most frequently encountered cybersecurity misconfigurations in large organizations'
Latest News
Recent investigations by cybersecurity experts have unveiled ShadowSyndicate, a clandestine cybercrime group that has been operational since July 16, 2022. Notably, this group is linked to deploying as many as seven distinct ransomware families over the past year. Formerly known as Infra Storm, the
In efforts to enhance online security and curb cyberbullying and explicit content, France’s proposed SREN Bill has raised concerns about the potential ban of VPNs from major app stores. On September 30th, lawmakers from the center-right Horizons political party introduced amendments to address
The Federal Bureau of Investigation (FBI) has warned of a sinister scam dubbed "Phantom Hacker", which has caused alarming financial damages, particularly among the senior community. This elaborate fraud scheme has evolved from typical tech support scams, integrating an intricate web of deceit
In a significant security breach, India's National Logistics Portal-Marine inadvertently exposed sensitive personal and trade data. The breach, attributed to misconfigured Amazon S3 buckets and a JavaScript file embedded with login credentials, has raised concerns about the safety of state-run
Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password protected database that contained over 3 million records. The documents appeared to be associated with internal invoices, communications, and customer’s stored CRM files. Upon further research,
Malicious advertisements, known as malvertising, have made their way into Microsoft’s Bing Chat AI-powered search engine. Responses from the chatbot may include links to deceptive domains that effectively trick the user into downloading malware. Microsoft introduced Bing Chat, which is powered
In a swift response to a critical security threat, Google has patched a zero-day vulnerability in its Chrome browser that was being actively exploited by a commercial spyware vendor. The vulnerability, identified as CVE-2023-5217, was a heap buffer overflow in vp8 encoding within the libvpx
Cybersecurity researchers have discovered a new and concerning malware strain known as ZenRAT. This malicious software is taking advantage of unsuspecting Windows users by masquerading as Bitwarden, a trusted, open-source password manager. ZenRAT's intent is not to safeguard your passwords but to
A significant data breach has hit the Better Outcomes Registry & Network (BORN), exposing the sensitive personal and health information of approximately 3.4 million individuals. BORN Ontario, a major perinatal and child registry, collects and shares essential data related to pregnancy, birth,