In 2023, Ukraine remained Russia’s primary target for cyber-espionage, according to a report by Google’s Threat Analysis Group (TAG). The report detailed various state-sponsored hacking campaigns against Ukrainian targets, highlighting the extent to which Russia has integrated cyber operations into… Read More »Google’s Threat Analysis Group (TAG): Ukraine remained primary target for Russia’s groups
Apple & Facebook validated the research (equally both qualified). In recent years, concerns around the use of spyware have grown considerably. The use of such software has been linked to human rights abuses and other forms of misconduct, particularly when… Read More »Citizen Lab & Microsoft Threat Intelligence (both qualified) publish indisputable research on some iOS Calendar Zero Clicks found in the wild.
Sometimes I need to find and to enumerate infrastructure covered by Cloudflare or other providers. I’ve made an article about one of methods could be used. Certificate Transparency (CT) is an essential component of cybersecurity, providing transparency and accountability for… Read More »Certificate Transparency (CT) article announcement
New Zealand’s biggest data breach, which affected almost 1 million people, has highlighted the importance of data retention policies in data security. The breach occurred at the financial services company, Accellion, which was used by the New Zealand Reserve Bank… Read More »New Zealand’s biggest data breach
On December 20, 2021, it was reported that the eFile.com tax return software had been found to be serving malicious JavaScript (JS) code to its users. eFile.com is an IRS-authorized tax return software provider that allows users to file their… Read More »IRS-Authorized eFile.com Tax Return Software Caught Serving JS Malware
This detailed article describes a new attack vector in Azure Active Directory (AAD) discovered by Wiz Research. This misconfiguration exposes misconfigured applications to unauthorized access, with 25% of multi-tenant applications being found to be vulnerable. Several high-impact, vulnerable Microsoft applications… Read More »The AAD misconfiguration that led to Bing.com results manipulation and account takeover explained (BingBang)
Google’s Threat Analysis Group (TAG) has been tracking the activities of commercial spyware vendors that sell exploits or surveillance capabilities to government-backed actors. In a recent blog post, the company shared details about two distinct campaigns that it recently discovered,… Read More »TAG report about commercial spyware vendors
OpenAI recently announced technical problems with privacy that affected its ChatGPT service. The company took ChatGPT offline due to a bug in an open-source library that allowed some users to see titles from another active user’s chat history. Additionally, the… Read More »OpenAI issues with accounts privacy are fixed now
Reports started circulating on Twitter that a legendary game, Counter Strike 2 by Valve, had been leaked and is available for download on various torrent websites. The leaked game was reportedly playable using a Steam emulator, but multiplayer functionality was… Read More »Counter Strike 2 leaked and could be found on torrent
Ferrari S.p.A., an Italian luxury sports car manufacturer headquartered in Maranello, recently suffered a significant data breach that may have put consumers’ personal information at risk. The company confirmed that a hacker accessed its IT system and demanded a ransom… Read More »Clients of Ferrari S.p.A were breached