Recent Security News

  • Hospitals ask courts to force cloud storage firm to return stolen data

    December 29, 2023 at 03:26PM Two New York hospitals, Carthage Area Hospital and Claxton-Hepburn Medical Center, are seeking a court order to retrieve data stolen in a ransomware attack last August. The stolen data, stored on a Boston cloud storage company’s servers, includes sensitive patient information. The hospitals have taken legal action to recover the…

    Read More

  • ‘Operation Triangulation’ Spyware Attackers Bypass iPhone Memory Protections

    December 29, 2023 at 11:21AM The “Operation Triangulation” spyware attack bypassed iPhone memory protections using undocumented Apple chip functions and multiple vulnerabilities. The zero-click campaign targeted iMessage, exploited an RCE vulnerability, and used intricate, multi-stage attacks to gain privileged access and install spyware, presenting an unprecedented level of sophistication in iPhone cyber threats. Kaspersky recommends…

    Read More

  • Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

    December 29, 2023 at 11:16AM Multiple malware families are exploiting an undocumented Google OAuth endpoint called “MultiLogin” to revive expired authentication cookies and infiltrate users’ accounts. This technique allows cybercriminals to gain unauthorized access to Google accounts, even after password resets or logouts. Despite being notified, Google has not responded to inquiries about this issue.…

    Read More

  • Steam game mod breached to push password-stealing malware

    December 29, 2023 at 11:09AM The popular Slay the Spire indie game fan expansion, Downfall, was breached on Christmas Day, distributing the Epsilon information stealer malware via a Steam update. The compromised package was a modified version of the game, not a mod. The attackers hijacked the developer’s Steam and Discord accounts to upload the…

    Read More

  • Palo Alto Networks Closes Talon Cybersecurity Acquisition

    December 29, 2023 at 09:47AM Palo Alto Networks has successfully acquired Talon Cyber Security, enhancing its SASE solution to provide ironclad security and data protection for users on any device. The integration of Talon’s Enterprise Browser with Prisma SASE aims to address security risks associated with web browser usage on unmanaged devices, contributing to a…

    Read More