Recent Security News

  • Mortgage firm loanDepot cyberattack impacts IT systems, payment portal

    January 7, 2024 at 03:37PM LoanDepot, a leading nonbank mortgage lender in the USA, has been hit by a cyberattack, causing system outages and impacting customer payments and services. The company is actively addressing the incident and advising customers to use its call center for payment assistance. Concerns about data theft and phishing attacks have…

    Read More

  • Stealthy AsyncRAT malware attacks targets US infrastructure for 11 months

    January 7, 2024 at 03:37PM An ongoing campaign has been distributing the AsyncRAT malware for the past 11 months, utilizing various loader samples and domains. AsyncRAT, a Windows remote access tool, facilitates unauthorized access, data theft, and malware deployment. The attacks target specific individuals and companies, employing sophisticated techniques to avoid detection. Researchers provide detection…

    Read More

  • KyberSlash attacks put quantum encryption projects at risk

    January 7, 2024 at 03:37PM The Kyber key encapsulation mechanism, including its official implementation CRYSTALS-Kyber, has been found vulnerable to flaws known collectively as KyberSlash, allowing the recovery of secret keys. Timing-based attacks and patches for KyberSlash1 and KyberSlash2 have been identified, affecting various projects, with efforts underway to address the issue. The impact varies…

    Read More

  • Google: Malware abusing API is standard token theft, not an API issue

    January 6, 2024 at 11:46AM Malware is exploiting an undocumented Google Chrome API to generate new authentication cookies from stolen ones. Multiple malware operations are using this technique to gain access to users’ Google accounts through the API, and Google has downplayed the severity of the issue. The company urges affected users to take precautionary…

    Read More

  • X users fed up with constant stream of malicious crypto ads

    January 6, 2024 at 11:46AM Cybercriminals are exploiting X ads to promote crypto scams including fake airdrops and drainer sites, targeting those interested in cryptocurrencies. X’s advertising algorithm matches users’ interests, resulting in an increasing volume of malicious ads. Despite warnings and skepticism over X’s ad vetting, it’s reported that malicious ads have significantly grown,…

    Read More