USB testing "wheel" provides multiple ports to check faulty devices or cables
A custom testing device for engineers and IT professionals
LastPass, 1Password, and Bitwarden extensions are vulnerable to clickjacking attacks
DEF CON demo shows how attackers can steal logins from popular password managers
Apple issues emergency update to fix zero-day exploit in iPhone and macOS
Hackers are able to target Apple devices through malicious images
Federal authorities take down one of the largest DDoS network operators ever
Tens of thousands of devices targeted major platforms and critical infrastructure worldwide
Hackers unleash torrent from Norwegian dam, releasing 132 gallons per second for four hours
Norway links dam sabotage to pro-Russian hackers
Russian cyberattack in the Netherlands leaves speed cameras offline indefinitely
Speed limit now "honor system"
In brief: Cyberattacks can have devastating impacts not just on targeted entities, but also on the public. However, an incident in the Netherlands is having consequences many drivers will likely appreciate: speed cameras that were taken offline cannot be reactivated.
Hackers use hidden Raspberry Pi and custom malware to attack bank ATMs
The heist was stopped before the criminals could do any significant damage
What just happened? A recently uncovered attempted bank heist illustrates the growing sophistication and audacity of cybercriminal operations targeting financial institutions. The incident involved a combination of physical intrusion, advanced malware, and anti-forensic measures to allow fraudulent ATM withdrawals from a targeted bank's network.
Tea app confirms data leak after 4Chan users discover unsecured cloud storage
What just happened? Tea, officially known as "Tea Dating Advice," is a dating safety app that allows women to anonymously share information about men and potential red flag behavior. Now the top free app in the App Store, Tea has been hacked. 4Chan users linked to a public storage bucket containing about 72,000 images, including 13,000 selfies and government-issued IDs used for gender verification.
Amazon's AI coding assistant exposed nearly 1 million users to potential system wipe
The hacker said the point was to spotlight Amazon's lax security practices
Worldwide cyberattack underway as hackers exploit Microsoft SharePoint zero-day vulnerability
CISA has identified the exploit as a top-level security threat, a patch is now out
A hot potato: A newly uncovered security flaw in Microsoft's SharePoint software has sparked a widespread series of cyberattacks targeting government organizations, educational institutions, energy companies, and private enterprises around the globe. This threat has prompted coordinated investigations by authorities in the United States, Canada, and Australia, with cybersecurity experts warning that these intrusions represent one of the most serious server-level breaches seen in recent memory.
US rail industry still exposed to decade-old hacking threat, experts warn
"The railway industry treats cybersecurity issues with the same playbook as the insurance industry's 'delay, deny, defend' mantra"
Ransomware negotiator allegedly struck deals with hackers to profit from extortion payments
Justice Department investigates possible kickbacks in ransom cases
Brother printer hack puts thousands of users at risk of remote takeover
Hackers can regenerate default administrator passwords after learning a device's serial number
History made as Al claims number one spot among world's top ethical hackers
AI tool Xbow uncovers critical bugs faster than human researchers
Hackers show how they can fully control your 2020 Nissan Leaf remotely
Attackers can also record in-car conversations and track you using its GPS
US warns of Iranian cyberattacks and propaganda in wake of airstrikes
US water, power, and finance sectors could be prime targets
Israel urges citizens to turn off home cameras as Iran hacks surveillance systems
Home security cameras with weak passwords are easy targets for hackers
Low-wage tech support workers become a new gateway for cyberattacks
Outsourced call centers emerge as a new cybercrime battleground
Scammers hijack real support pages to show fake phone numbers
Hackers are also manipulating Google ads to plant fake support numbers
So... You Want to Become a Penetration Tester?
Penetration testing is a key part of cybersecurity: finding and safely exploiting system flaws. Learn the skills, tools, and steps to start your career as an ethical hacker in this growing field.
Hacker arrested after exploiting 5,000 accounts in $4.5 million cryptojacking scheme
Suspect could face up to 15 years in Ukranian prison
Scam calls evolve: Crocodilus malware adds fake contacts to Android phones
Crocodilus monitors and impersonates many specific banking apps worldwide
Modder develops a new solution to bring the Commodore 64 into the HDMI era
Using hardware emulation to recreate pixel-perfect digital video and audio
Coinbase hack could get people killed, TechCrunch founder warns
Executives of companies that don't adequately protect customer data should be punished