Recent Security News

  • Wyze camera glitch gave 13,000 users a peek into other homes

    February 19, 2024 at 12:20PM Wyze addressed a security incident affecting thousands of users, attributing it to a third-party caching client library that struggled to handle a surge in camera activity after an outage. This led to users seeing others’ video feeds. Wyze has taken steps to enhance security and prevent reoccurrence, but hasn’t disclosed…

    Read More

  • Name That Toon: Keys to the Kingdom

    February 19, 2024 at 10:22AM Submit your clever cybersecurity-related caption for the chance to win a $25 Amazon gift card. Email [email protected] with the subject line “Dark Reading February Toon” or share your ideas on Twitter, Facebook, or LinkedIn. Last month’s winner, Michael L. Mustin, shared the winning caption “Your computer hasn’t been patched yet,…

    Read More

  • Ukrainian Raccoon Infostealer Operator Extradited to US

    February 19, 2024 at 10:10AM Ukrainian national Mark Sokolovsky, 28, appeared in a US court after extradition from the Netherlands. He was arrested in March 2022 for operating the Raccoon Infostealer malware. Sokolovsky was indicted for distributing the malware globally, stealing login credentials, financial data, and leasing access to the malware for $200 monthly. The…

    Read More

  • ALPHV gang claims it’s the attacker that broke into Prudential Financial, LoanDepot

    February 19, 2024 at 09:05AM The ALPHV/BlackCat ransomware group claims responsibility for cyber attacks on Prudential Financial and LoanDepot, with potential involvement in the recent cybersecurity incidents. The group threatens data disclosure if ransom demands aren’t met, following the double extortion model. Authorities struggle to contain the group, which continues to conduct major attacks despite…

    Read More

  • NSO Group Adds ‘MMS Fingerprinting’ Zero-Click Attack to Spyware Arsenal

    February 19, 2024 at 09:02AM Enea researcher discovered a new tactic used by NSO Group to deploy Pegasus spyware on mobile devices without user interaction. The tactic, called “MMS Fingerprint,” allows obtaining device details by sending an MMS message, exploiting MMS flow to retrieve device information. The researcher concluded that this could be leveraged for…

    Read More