Recent Security News
-
EasyPark discloses data breach that may impact millions of users
December 28, 2023 at 02:40PM Parking app developer EasyPark reported a data breach on its website, impacting an unknown number of its millions of users. The breach involves compromised customer data such as names, phone numbers, addresses, and partial credit card information. Cybercriminals could use this for phishing attacks, but no unauthorized transactions have occurred.…
-
Cyberattack Targets Albanian Parliament’s Data System, Halting Its Work
December 28, 2023 at 02:06PM Albania’s Parliament confirmed a cyberattack on its data system, resulting in a temporary service halt. The attack did not compromise the system’s data, but experts are investigating potential consequences. Iranian-based hackers allegedly targeted other entities. This incident follows a previous cyberattack that led to severed diplomatic ties with Iran. The…
-
Microsoft disables MSIX protocol handler abused in malware attacks
December 28, 2023 at 02:05PM Microsoft disabled the MSIX ms-appinstaller protocol handler due to multiple financially motivated threat groups exploiting it to infect Windows users with malware. The attackers used the CVE-2021-43890 vulnerability to bypass security measures and distribute malware. Microsoft recommends installing the patched App Installer version 1.21.3421.0 or later and advised disabling the…
-
Kroll reveals FTX customer info exposed in August data breach
December 28, 2023 at 01:08PM Risk and financial advisory company Kroll has revealed details about the August data breach, exposing personal info of FTX bankruptcy claimants, including coin holdings. Kroll cautioned affected individuals about potential phishing attacks and recommended security measures, such as not sharing personal info and storing crypto in cold wallets. The breach…
-
Russian military hackers target Ukraine with new MASEPIE malware
December 28, 2023 at 12:46PM Ukraine’s CERT warns of a new phishing campaign by APT28, a Russian hacker group known for targeting government and Western entities. The attack, occurring between December 15 and 25, 2023, deploys a new Python malware downloader, ‘MASEPIE,’ via phishing emails. APT28 also uses various tools for data theft and network…