Category Archives: Cyber Security News

An Old WinRAR Vulnerability Left Users At Risk For Two Decades

Have you ever thought that an apparently harmless yet useful tool like WinRAR could pose security threats? Certainly seems so

An Old WinRAR Vulnerability Left Users At Risk For Two Decades on Latest Hacking News.

Kali Linux 2019.1 Released

Kali Linux 2019.1 is now available for download, updating many of its features, as well as introducing a few more.

Kali Linux 2019.1 Released on Latest Hacking News.

Google Partially Steps Back From Chrome API Changes That Blocks Ad Blockers

Google has received lots of criticism since it announced Chrome API updates regarding ad blockers and extensions. It seems the

Google Partially Steps Back From Chrome API Changes That Blocks Ad Blockers on Latest Hacking News.

Cryptocurrency Broker Had 450,000 of its Users Credentials Leaked on The Darkweb

Cryptocurrency broker, Coinmama, suffered a data breach with around 500,000 customers’ emails and password credentials compromised. Customers affected stretch back

Cryptocurrency Broker Had 450,000 of its Users Credentials Leaked on The Darkweb on Latest Hacking News.

Latest Hacking News Podcast #225

Microsoft Edge whitelists flash autorun on Facebook, WinRAR vulnerability existed for up to 19 years, and researcher Ken Munro says hackers could easy sink ships at seas on episode 225 of our daily cybersecurity podcast.

Latest Hacking News Podcast #225 on Latest Hacking News.

Cryptojacking Apps Removed From Microsoft App Store

After Apple and Google, the malefactors are turning their attention to the Microsoft app store as well. We have already

Cryptojacking Apps Removed From Microsoft App Store on Latest Hacking News.

E Hacking News – Latest Hacker News and IT Security News: Scammers disguise themselves as divisions of the Central Bank of Russia


Cyber Criminals performed a large-scale attack on Russian banks in late 2018, they managed to steal $ 20 million.

The attackers disguised themselves as divisions of the Central Bank FinCERT and Alfacapital. It is known that the attacks were carried out by hacker groups Silence and Cobalt, who had previously organized cybercrime. Also along with them operated a new hacker group, which had not been seen before.

The scheme of crimes was the same: the scammers on behalf of the FinCERT division of the Central Bank sent out malicious documents with macros. In addition, a compromised account of an employee of the company Alfacapital was used.

Representatives of many banks confirm the frequent attacks. The criminals tried to penetrate the infrastructure of the financial organization for the withdrawal of money.

The IT-company Positive Technologies conducted their own statistics and found that over 201 million people suffered from such attacks in 2018.

Moreover, banking infrastructure was attacked in 78% of cases, web resources - 13 %, ATMs and POS-terminals - 9 %, personal data - 39% , credential theft , card information, trade secret - 5%, personal correspondence and other information - 8%.

In addition, on February 18, Kaspersky Lab recorded an increase in attacks by Buhtrap and RTM banking Trojans in Russia. At the end of last year, experts recorded an increase in the activity of the banking Trojan RTM 50 times, compared to 2017.


E Hacking News - Latest Hacker News and IT Security News

Scammers disguise themselves as divisions of the Central Bank of Russia


Cyber Criminals performed a large-scale attack on Russian banks in late 2018, they managed to steal $ 20 million.

The attackers disguised themselves as divisions of the Central Bank FinCERT and Alfacapital. It is known that the attacks were carried out by hacker groups Silence and Cobalt, who had previously organized cybercrime. Also along with them operated a new hacker group, which had not been seen before.

The scheme of crimes was the same: the scammers on behalf of the FinCERT division of the Central Bank sent out malicious documents with macros. In addition, a compromised account of an employee of the company Alfacapital was used.

Representatives of many banks confirm the frequent attacks. The criminals tried to penetrate the infrastructure of the financial organization for the withdrawal of money.

The IT-company Positive Technologies conducted their own statistics and found that over 201 million people suffered from such attacks in 2018.

Moreover, banking infrastructure was attacked in 78% of cases, web resources - 13 %, ATMs and POS-terminals - 9 %, personal data - 39% , credential theft , card information, trade secret - 5%, personal correspondence and other information - 8%.

In addition, on February 18, Kaspersky Lab recorded an increase in attacks by Buhtrap and RTM banking Trojans in Russia. At the end of last year, experts recorded an increase in the activity of the banking Trojan RTM 50 times, compared to 2017.

Latest Hacking News Podcast #224

Lazarus Group targets Russian companies for the first time, Russian nation-state hackers have quickest breakout time, and a remote code execution flaw existed in WordPress of 6 years on episode 223 of our daily cybersecurity podcast.

Latest Hacking News Podcast #224 on Latest Hacking News.

Docker Container Escape Vulnerability With PoC (CVE-2019-5736)

A runtime used to support Docker and Linux container engines suffered a vulnerability the past few days. An attack could

Docker Container Escape Vulnerability With PoC (CVE-2019-5736) on Latest Hacking News.

Latest Hacking News Podcast #222

Australia says 'state actor' responsible for Parliament hacks and discloses party hacks, third collection of hacked databases hits the Dark Web, and Google backs off ad-blocker breaking Chrome changes on episode 222 of our daily cybersecurity podcast.

Latest Hacking News Podcast #222 on Latest Hacking News.

Vulnerability In Xiaomi Electric Scooters Allows Attackers to Take Control of the Machine

Electric scooters have proved to be a convenient form of travel for some over short distances. Security researchers have highlighted

Vulnerability In Xiaomi Electric Scooters Allows Attackers to Take Control of the Machine on Latest Hacking News.

Firefox For iOS Now Offers Persistent Private Browsing With Firefox 15

Private browsing on smartphones has always been trouble. It is difficult to go back to the previous session in case

Firefox For iOS Now Offers Persistent Private Browsing With Firefox 15 on Latest Hacking News.

Another Commercial WordPress Plugin Gets Exploited

In the past few months, commercial WordPress plugin WP Cost Estimation has been under attack from hackers. These hackers are

Another Commercial WordPress Plugin Gets Exploited on Latest Hacking News.

Microsoft February Patch Tuesday Addressed A Zero Day And Numerous Critical Bugs

In January, Microsoft’s scheduled updates fixed numerous security flaws that included some few critical ones. However, with Microsoft February Patch

Microsoft February Patch Tuesday Addressed A Zero Day And Numerous Critical Bugs on Latest Hacking News.

A Further 127 Million User Records Found For Sale on The Dark Web

Earlier this week, this site reported an individual who was selling 620 million user records he claimed had stolen from

A Further 127 Million User Records Found For Sale on The Dark Web on Latest Hacking News.

Astaroth Trojan Exploits Antivirus Software

The Astaroth Trojan steals credentials and other user data through antivirus software, Avast, and services. It sends scam campaigns with

Astaroth Trojan Exploits Antivirus Software on Latest Hacking News.

Critical Vulnerabilities Addressed In Adobe February Patch Tuesday

In the February’s monthly scheduled updates, Adobe has once again fixed a number of security flaws. The Adobe February Patch

Critical Vulnerabilities Addressed In Adobe February Patch Tuesday on Latest Hacking News.

Latest Hacking News Podcast #221

On episode 221 of our daily cybersecurity podcast we look at two batches of stolen account information collections put up for sale on the dark web and the numerous disclosures announced this week.

Latest Hacking News Podcast #221 on Latest Hacking News.

Google Play Store Malicious App Detection Up By Over 50%

In Google’s mid-year review which was announced on Wednesday, they said that Google Play Store app rejections went up 55%

Google Play Store Malicious App Detection Up By Over 50% on Latest Hacking News.

Credential Stuffing Scammer Lists 620 Million Records on the Dark Web

Credential stuffing scams are becoming more prevalent and companies are increasingly seeing their customers accounts hacked. In the past three

Credential Stuffing Scammer Lists 620 Million Records on the Dark Web on Latest Hacking News.

The Department of Homeland Security Say Foreign Based VPN’s Pose a Threat to National Security

The US and China tensions continue as the Department of Homeland Security (DHS) seek to tighten their national security against

The Department of Homeland Security Say Foreign Based VPN’s Pose a Threat to National Security on Latest Hacking News.

Latest Hacking News Podcast #220

500px announces breach impacting all 14.8 million of it's users, MacOS malware disguised as Windows .exe, and numerous Lenovo Watch X security vulnerabilities detailed on episode 220 of our daily cybersecurity podcast.

Latest Hacking News Podcast #220 on Latest Hacking News.

Google Reveals How Much They Paid Out Under Their Bug Bounty Program in 2018

In 2010, Google launched its Vulnerability Reward Program (VRP) to help them identify bugs and other problems with their apps

Google Reveals How Much They Paid Out Under Their Bug Bounty Program in 2018 on Latest Hacking News.

Dunkin Donuts Victim of Second Cyber Attack in Three Months

Coffee shop chain Dunkin’ Donuts has announced that it has become the victim of a second cyber attack within three

Dunkin Donuts Victim of Second Cyber Attack in Three Months on Latest Hacking News.

Latest Hacking News Podcast #219

Data of up to 100,000 Australians exposed, cyberattack on VFEmail destroys 18 years worth of data, and electric scooter hacked and controlled remotely on episode 219 of our daily cybersecurity podcast.

Latest Hacking News Podcast #219 on Latest Hacking News.

Hacked User Finds $500 Worth of Food Ordered From Their McDonald’s App

Ordering food through an app on a mobile phone has become an increasingly popular way to satisfy the appetite. However,

Hacked User Finds $500 Worth of Food Ordered From Their McDonald’s App on Latest Hacking News.

Get Rich Quick Scams Use Teens Social Media Accounts to Launder Money

Sky News recently launched an investigation into criminals who are targeting teens on social media such as Snapchat and Instagram. These

Get Rich Quick Scams Use Teens Social Media Accounts to Launder Money on Latest Hacking News.

Latest Hacking News Podcast #218

Adobe Reader DC zero-day flaw gets a temporary patch, critical flaw found in Wordpress plugin, and first clipper malware found in Google Play store on episode 218 of our daily cybersecurity podcast.

Latest Hacking News Podcast #218 on Latest Hacking News.

Wall Street Journal Columnist Challenges Ethical Hacker to Test the Security of Their Laptops

It is hard to find any device such as a phone, tablet or laptop, that isn’t fitted with a camera

Wall Street Journal Columnist Challenges Ethical Hacker to Test the Security of Their Laptops on Latest Hacking News.

Swiss Government Invites Hackers to Pen Test Their Voting System

The Swiss government is eager to ensure that its e-voting system is safe and secure for those casting their votes.

Swiss Government Invites Hackers to Pen Test Their Voting System on Latest Hacking News.

Bleichenbacher Oracle Attack Variation Subjects TLS Encryption To Further Vulnerabilities

Encryption is one of the safest forms of securing data; yet academics recently found a vulnerability that allowed attackers to

Bleichenbacher Oracle Attack Variation Subjects TLS Encryption To Further Vulnerabilities on Latest Hacking News.

Latest Hacking News Podcast #217: Karl Sigler of Trustwave on Lifesize Vulnerability

Interview with Karl Sigler, Security Research Manager for Trustwave SpiderLabs, on the recently disclosed vulnerability impacting Lifesize video products. Today’s

Latest Hacking News Podcast #217: Karl Sigler of Trustwave on Lifesize Vulnerability on Latest Hacking News.

Mumsnet Data Leak Baffled Parents As Cloud Migration Exposed Users’ Personal Data

Another day, another breach. This time, the incident has troubled thousands of parents as it affected parenting forum Mumsnet. Reportedly,

Mumsnet Data Leak Baffled Parents As Cloud Migration Exposed Users’ Personal Data on Latest Hacking News.

Report States Huawei Will Need 5 Years and 2 Billion Dollars to Solve UK Security Concerns

In a letter to the UK Parliament’s Science and Technology Select Committee last week, CEO of the Huawei carrier business

Report States Huawei Will Need 5 Years and 2 Billion Dollars to Solve UK Security Concerns on Latest Hacking News.

GandCrab Ransomware Discovered To Be Embedded in Super Mario Image

Researchers spotted the ransomware GandCrab embedded into a downloadable Mario image from Super Mario Bros. Matthew Rowan, a researcher at

GandCrab Ransomware Discovered To Be Embedded in Super Mario Image on Latest Hacking News.

Apple Security updates released for Facetime bugs

A recently reported bug in Facetime, caused privacy concerns last month as individuals were able to eavesdrop on users.  The

Apple Security updates released for Facetime bugs on Latest Hacking News.

Multiple Airline Check-In Systems Exposing Passenger Data

Given the high security at the airport, it would be logical to assume that airlines are tough with the security

Multiple Airline Check-In Systems Exposing Passenger Data on Latest Hacking News.

New Linux Backdoor “SpeakUp” Found Exploiting Flaws In Multiple Linux Distros

Researchers have discovered a new Trojan campaign that creates a Linux backdoor. Referred to as SpeakUp, the backdoor malware exploits

New Linux Backdoor “SpeakUp” Found Exploiting Flaws In Multiple Linux Distros on Latest Hacking News.

Critical Remote Code Execution Vulnerability Affects Android Via .PNG Image File

Sharing landscape pictures, cute animal photos or memes is quite common among smartphone users. That’s why images serve as one

Critical Remote Code Execution Vulnerability Affects Android Via .PNG Image File on Latest Hacking News.

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients

On the 6 February, cyber-security firm Positive Technologies published its penetration testing activity report for 2018. The firm claimed that

Pen Testing Firm Claims 92% Successful Breach Rate of Their Clients on Latest Hacking News.

Latest Hacking News Podcast #216

Australian Parliament computer network compromised, new phishing attack using Google Translate, and Apple patches FaceTime bug as well as two zero-days Google says were exploited in the wild on episode 216 of our daily cybersecurity podcast.

Latest Hacking News Podcast #216 on Latest Hacking News.

Jack’d Dating App Allowing Strangers to See Intimate Photos

Dating sites can sometimes contain photos that the users don’t want everyone to see. However, dating and hook-up app Jack’d

Jack’d Dating App Allowing Strangers to See Intimate Photos on Latest Hacking News.

Google Launches Password Checkup Extension To Detect Breached Credentials

Breached usernames and passwords have become a pain in the neck with regards to online security. Even if your account

Google Launches Password Checkup Extension To Detect Breached Credentials on Latest Hacking News.

Latest Hacking News Podcast #215

MacOS zero-day flaw discovered but researcher won't share with Apple, Google cautions Nest users against poor password practices, and Mozilla Firefox to get site isolation feature on episode 215 of our daily cybersecurity podcast.

Latest Hacking News Podcast #215 on Latest Hacking News.

Researchers identify the hacker behind the dump of 773million credentials

Researchers identified the hacker behind a dump of 773million credentials after a meticulous investigation. It totalled over 900GB of data

Researchers identify the hacker behind the dump of 773million credentials on Latest Hacking News.

Numerous Beauty Camera Apps Were Found to be Loaded With Malware

Most smartphone users, particularly those selfie-freaks, love to download various photo-filtering and beauty camera apps. From adding special effects and

Numerous Beauty Camera Apps Were Found to be Loaded With Malware on Latest Hacking News.

CookieMiner Malware Can Steal Crypto Exchange Cookies, Saved Passwords and iPhone SMS Messages

Researchers have discovered a new malware used to steal saved passwords and credit card details from browsers. In addition, it

CookieMiner Malware Can Steal Crypto Exchange Cookies, Saved Passwords and iPhone SMS Messages on Latest Hacking News.

Latest Hacking News Podcast #214

RDP vulnerabilities make new reverse RDP attacks possible, new Google Chrome extension warns users of leaked passwords, and OpenOffice and LibreOffice vulnerabilities on episode 214 of our daily cybersecurity podcast.

Latest Hacking News Podcast #214 on Latest Hacking News.

New York Attorney General Rules Selling Fake Likes and Follows is illegal

A year ago, the New York Times reported that an obscure company called Devumi were obtaining millions of dollars by

New York Attorney General Rules Selling Fake Likes and Follows is illegal on Latest Hacking News.

Hackers Now Exploit Google Sheets To Spread CSV Malware

After previously exploiting Microsoft Excel for formula injection attacks, hackers have now turned their attention to Google Sheets for the

Hackers Now Exploit Google Sheets To Spread CSV Malware on Latest Hacking News.

Maintaining Integrity and Availability of Data Through Open Source Software

Integrity is one of three vital components of securing information held within an organisation. Integrity is about ensuring consistency of

Maintaining Integrity and Availability of Data Through Open Source Software on Latest Hacking News.

Latest Hacking News Podcast #213

A new Linux backdoor trojan discovered, Jack'd app exposes private user images, and Huddle House POS system breach on episode 213 of our daily cybersecurity podcast.

Latest Hacking News Podcast #213 on Latest Hacking News.

Hacker Who Discovered Flaw in Magyar Telekom Faces 8-Year Jail Term

Not all hackers are intent on stealing data or victimising users. Some use their skills to try and disclose vulnerabilities

Hacker Who Discovered Flaw in Magyar Telekom Faces 8-Year Jail Term on Latest Hacking News.

Xvideos Sextortion Scam Discovered by Experts

Cybercriminals use many techniques to extort money from unsuspecting victims. One recent technique uses a sextortion scam campaign to embarrass users

Xvideos Sextortion Scam Discovered by Experts on Latest Hacking News.

Nest Cam Accessed Using Leaked Passwords Left Family Horrified

The dangers of low security on the Internet of Things (IoT) devices once again surfaced last week. A family have

Nest Cam Accessed Using Leaked Passwords Left Family Horrified on Latest Hacking News.

Firefox 66 Will Feature MiTM Attack Warnings By Default

Mozilla has recently released its browser version Firefox 65 that brings enhanced content blocking. With the upcoming Firefox 66, it

Firefox 66 Will Feature MiTM Attack Warnings By Default on Latest Hacking News.

Latest Hacking News Podcast #212

A new sextortion scam claims to infect users through popular adult website, Chrome to warn of lookalike URLs, and Houzz suffers user data breach on episode 212 of our daily cybersecurity podcast.

Latest Hacking News Podcast #212 on Latest Hacking News.

IBM Discovers Malicious Use of Apple Siri Shortcuts App

In iOS 12, Apple implemented the use of Shortcuts App into its voice assistant Siri. These shortcuts are designed to help

IBM Discovers Malicious Use of Apple Siri Shortcuts App on Latest Hacking News.

Home Remodelling Website Houzz Suffers a Data Breach

The popular home remodelling website Houzz has informed its customers that it suffered a data breach. This breach is thought to

Home Remodelling Website Houzz Suffers a Data Breach on Latest Hacking News.

$137milllion Worth of QuadrigaCX’s Customers’ Bitcoin Stuck in The Abyss

Cryptocurrency exchange, QuadrigaCX, has suffered a security incident after it lost control of its customers assets. $137 million worth of

$137milllion Worth of QuadrigaCX’s Customers’ Bitcoin Stuck in The Abyss on Latest Hacking News.

Basecamp Endured a Brute Force Attack

Once again, another popular online portal fell victim to a cyber attack. However, this time, the targeted firm Basecamp effectively

Basecamp Endured a Brute Force Attack on Latest Hacking News.

Google Apologetically Shuts Down Its iPhone Data Collection App

After the recent outcry about Facebook, Google has also been found to supposedly violate Apple’s policies. As discovered recently, one

Google Apologetically Shuts Down Its iPhone Data Collection App on Latest Hacking News.

Apple Restores Facebook And Google Internal iOS Apps After Brief Punishment

The clashes between Facebook and Apple, and Google and Apple have made it to the news recently. Due to violations

Apple Restores Facebook And Google Internal iOS Apps After Brief Punishment on Latest Hacking News.

Firefox 65 Released With Better Ad Tracker Blocking And Multiple Security Fixes

Mozilla has rolled out the latest version of its Firefox Quantum with various feature uplifts. The new Firefox 65 not

Firefox 65 Released With Better Ad Tracker Blocking And Multiple Security Fixes on Latest Hacking News.

Google Chrome 72: Deprecates TLS 1.0 And 1.1

Google has rolled out the latest version of their Chrome browser for all compatible operating systems. The new Google Chrome

Google Chrome 72: Deprecates TLS 1.0 And 1.1 on Latest Hacking News.

LIFX IoT Smart Light Bulb Hacked in Under an Hour

In under an hour, security researcher, LimitedResults, was able to hack into the smart light bulb LIFX mini white and

LIFX IoT Smart Light Bulb Hacked in Under an Hour on Latest Hacking News.

HIV Records of 14k People in Singapore Leaked

Singapore has suffered its second attack on private medical records in seven months. This time, the records of around 14

HIV Records of 14k People in Singapore Leaked on Latest Hacking News.

Canonical Updates Ubuntu 18.04 While Patching Numerous Other Security Flaws

Canonical has released updates for Ubuntu 18.04. The updates include patches for numerous security vulnerabilities in the Linux Kernel. Ubuntu

Canonical Updates Ubuntu 18.04 While Patching Numerous Other Security Flaws on Latest Hacking News.

Apple revokes Facebook’s enterprise certificate due to misuse of customers’ personal data

Reports surfaced revealing Facebook were paying individuals to permit it to watch everything they were doing. This action was allowing

Apple revokes Facebook’s enterprise certificate due to misuse of customers’ personal data on Latest Hacking News.

Love You Malspam infecting victims in Japan ahead of Valentines Day

Love you malware changes tactics as it targets Japan and spreads the ransomware Gandcrab 5.1. Malspam campaign, “Love you,” named after

Love You Malspam infecting victims in Japan ahead of Valentines Day on Latest Hacking News.

Iranian Cyber Espionage Group APT-39 linked to Middle East attacks

FireEye has dubbed and exposed Iranian cyber espionage group APT39, as actors of a series of attacks on the Middle

Iranian Cyber Espionage Group APT-39 linked to Middle East attacks on Latest Hacking News.

Scammers Steal Social Media Videos For Fake Fundraising Accounts

Earlier this month, a 4-year-old girl called Maya Tisdale was videoed by her parents taking her first independent steps. Maya was

Scammers Steal Social Media Videos For Fake Fundraising Accounts on Latest Hacking News.

Facebook Pays Teens to Download a VPN App That Spies on Them

In an attempt to gather data on its competitors, Facebook has been secretly paying people to install a VPN to

Facebook Pays Teens to Download a VPN App That Spies on Them on Latest Hacking News.

ENISA’s Latest Threat Landscape Report Reveals Top Cyber Threats and Trends in Europe

The European Union Agency for Network and Information Security (ENISA) reveals in its latest report that malware and web-based attacks

ENISA’s Latest Threat Landscape Report Reveals Top Cyber Threats and Trends in Europe on Latest Hacking News.

Twitter Scammers Pose As Large Companies to Scam Unsuspecting Users

Social media has made it easier for customers to complain to large companies. Many companies now have dedicated social media accounts

Twitter Scammers Pose As Large Companies to Scam Unsuspecting Users on Latest Hacking News.

Japanese Government to “Pen Test” Citizen’s IoT Devices Ahead of Olympics

The Japanese Ministry of Internal Affairs and Communications revealed in a recent report that 2/3 of cyber attacks in 2016

Japanese Government to “Pen Test” Citizen’s IoT Devices Ahead of Olympics on Latest Hacking News.

Merging WhatsApp, Instagram, And Facebook Messenger – Zuckerberg’s Uncanny Idea

This one may not be good news for many. Zuckerberg has finally disclosed his idea of merging the three key

Merging WhatsApp, Instagram, And Facebook Messenger – Zuckerberg’s Uncanny Idea on Latest Hacking News.

Video Sharing Platform DailyMotion Falls Victim To Credential Stuffing Attack

After meddling with a number of social networks, it seems the hackers have moved their focus to video-sharing platforms as

Video Sharing Platform DailyMotion Falls Victim To Credential Stuffing Attack on Latest Hacking News.

Why it’s important for organisations to train staff in cybersecurity

Breaches are an ongoing issue that organisations face on a day to day basis. For as long as risk carries

Why it’s important for organisations to train staff in cybersecurity on Latest Hacking News.

Impending Ukraine Election Targeted by Hackers

Ukraine is reporting an increase in cyber attacks aimed at disrupting the upcoming presidential elections. The Ukraine Government believe that

Impending Ukraine Election Targeted by Hackers on Latest Hacking News.

Banking trojan Gozi resurfaces with new tactics

Twelve-year-old trojan malware, Gozi, has resurfaced with new techniques to steal users’ financial credentials. Using common strategies such as keylogging,

Banking trojan Gozi resurfaces with new tactics on Latest Hacking News.

Google Chrome to Get Drive-by Download Protection

Engineers at Google are working on drive-by download protection for Chromium. Googles Chrome browser is based on the open-source engine

Google Chrome to Get Drive-by Download Protection on Latest Hacking News.

Critical Vulnerability Patched In Check Point ZoneAlarm Antivirus Software

Check Point Software Technologies has recently fixed a critical security vulnerability in their antivirus software ZoneAlarm. As pointed out by

Critical Vulnerability Patched In Check Point ZoneAlarm Antivirus Software on Latest Hacking News.

Chrome API Update Kills Ad Blockers Along With Numerous Other Extensions

Google has announced making some changes in their Chrome API that (in a way) threatens user privacy. As per its

Chrome API Update Kills Ad Blockers Along With Numerous Other Extensions on Latest Hacking News.

Emergency Directive Issued by US Government After Domain Attacks

A recent wave of domain hijacking attacks has hit government websites. The US government decided to take action with a new

Emergency Directive Issued by US Government After Domain Attacks on Latest Hacking News.

How to Avoid Windows 7 Security Issues After Support Ends

Windows 7 is coming to the end of its support cycle. Microsoft announced that it is ending support for the

How to Avoid Windows 7 Security Issues After Support Ends on Latest Hacking News.

URLhaus taken down over 100,000 malware websites in 10 months

Researchers, organisations and vendors came together under the project, URLhaus, to bring down sites providing malware content. 100,000 sites were

URLhaus taken down over 100,000 malware websites in 10 months on Latest Hacking News.

Cisco Patched Multiple Security Vulnerabilities In SD-WAN Solution

Cisco has recently rolled out fixes for multiple vulnerabilities found in its SD-WAN Solution. These include one critical and numerous

Cisco Patched Multiple Security Vulnerabilities In SD-WAN Solution on Latest Hacking News.

Banking Malware Redaman continues to strike

A recent spam campaign distributed banking malware, Redaman, targeting customers of Russian financial institutions. The spate of campaigns was first

Banking Malware Redaman continues to strike on Latest Hacking News.

A Look Into Why Free VPN’s Can Cause More Harm Than Good

Intrusion, falsified encryption and lack of transparency are just some of the flaws a user potentially receives with a free

A Look Into Why Free VPN’s Can Cause More Harm Than Good on Latest Hacking News.

Microsoft’s Fact Checker NewsGuard Brands The Mail Online as Untrustworthy

Update – Brian Gluckman has made the following update: Microsoft is partnering with NewsGuard to offer the NewsGuard browser extension

Microsoft’s Fact Checker NewsGuard Brands The Mail Online as Untrustworthy on Latest Hacking News.

Latest Hacking News Podcast #209

New Microsoft Exchange Zero-Day and iPhoneX jailbreak attacks based on known vulnerabilities and a wave of attacks using App Engine Google Cloud Platform to deliver malware on episode 209 of our daily cybersecurity podcast.

Latest Hacking News Podcast #209 on Latest Hacking News.

Hacker Broadcasts Fake Missile Warning Over Compromised Nest Camera

Smart technology has now become hugely popular. There are now many products on the market that can make your home

Hacker Broadcasts Fake Missile Warning Over Compromised Nest Camera on Latest Hacking News.

Research Suggests Human Error Responsible for Cyber Security Breaches

Cybersecurity incidents can be a huge problem for businesses and individuals. Hackers using malware to steal data is often the scenario

Research Suggests Human Error Responsible for Cyber Security Breaches on Latest Hacking News.

The 10 Year Challenge, is it a Ploy to Train Facebooks Facial Recognition Technology?

You all must have heard of the trending 10 year challenge, right? It’s the same challenge making people obsessed with

The 10 Year Challenge, is it a Ploy to Train Facebooks Facial Recognition Technology? on Latest Hacking News.

DNS hijacking of Department of Homeland Security causes emergency directive to be issued

As part of an emergency directive, the Department of Homeland Security (DHS) ordered federal government agencies to carry out audits

DNS hijacking of Department of Homeland Security causes emergency directive to be issued on Latest Hacking News.

Anatova Ransomware Deemed the Next Big Threat to Users

The ransomware, Anatova only surfaced earlier this year but is already recognised as the next biggest threat to users.  Although

Anatova Ransomware Deemed the Next Big Threat to Users on Latest Hacking News.

Latest Hacking News Podcast #208

Image based malware targeting Mac users through ads, phishing campaign using fake voicemail messages to steal passwords, and banking trojan rotating tactics to evade detection on episode 208 of our daily cybersecurity podcast.

Latest Hacking News Podcast #208 on Latest Hacking News.

Murderer Finds Himself Convicted Using Data From His Own Garmin GPS Watch

Fitness trackers help millions of people keep a track of their activity. However, for one homicidal cycling fanatic, it caused his

Murderer Finds Himself Convicted Using Data From His Own Garmin GPS Watch on Latest Hacking News.

Adobe Released Another Patch – This Time For Adobe Experience Manager

This month, Adobe released patches for various products multiple times. However, it seems the vulnerabilities continue to appear in Adobe

Adobe Released Another Patch – This Time For Adobe Experience Manager on Latest Hacking News.

Google fined $57 million in France for GDPR violation

In an action initiated against Google LLC by two Activists, the Commission Nationale de l’informatique et des libertés (CNIL) carried

Google fined $57 million in France for GDPR violation on Latest Hacking News.

First Large GDPR Fine issued and its to Google for €50 million

Every member state, organisation and almost every individual have been watching supervisory authorities closely to see if and who will

First Large GDPR Fine issued and its to Google for €50 million on Latest Hacking News.

Online Casino Group Leaked Information of Over 108 Million Bets and User Data

Security researcher Justine Paine discovered a data leak this week from an ElasticSearch server. The leak involved over 108 million bets

Online Casino Group Leaked Information of Over 108 Million Bets and User Data on Latest Hacking News.

ThreadX WiFi Firmware Vulnerability Affects Smartphones, Laptops, Gaming Devices, and Routers

A researcher has found several security vulnerabilities in ThreadX WiFi firmware. He discovered these vulnerabilities in the firmware running on

ThreadX WiFi Firmware Vulnerability Affects Smartphones, Laptops, Gaming Devices, and Routers on Latest Hacking News.

Unauthorised Remote Access Vulnerability Discovered on Cisco Small Business Switches

Businesses using Cisco Small Business 200 Series Smart Switches; CSB 300 Series Managed Switches;  Cisco 250 Series Smart Switches; CSB

Unauthorised Remote Access Vulnerability Discovered on Cisco Small Business Switches on Latest Hacking News.

Vulnerability In Telegram Bot API Encryption Allows Access To Messages

Researchers have discovered a serious security vulnerability in the popular messaging Telegram. The vulnerability mainly exists in the Telegram Bot

Vulnerability In Telegram Bot API Encryption Allows Access To Messages on Latest Hacking News.

Latest Hacking News Podcast #206

Google fined $57 million by France for GDPR violations, WPML Wordpress Plug-in developer's site hacked by ex-employee, and a Windows Zero-Day gets a micropodcast on episode 206 of our daily cybersecurity podcast.

Latest Hacking News Podcast #206 on Latest Hacking News.

ES File Explorer Vulnerability Exposed Files Saved On a Victim Android Phone

Researchers have spotted a vulnerability in the popular file manager among Android users, ES File Explorer. The vulnerability could allow

ES File Explorer Vulnerability Exposed Files Saved On a Victim Android Phone on Latest Hacking News.

Ex-employee of WP MultiLingual’s (WPML) Leaks Customer Data Then Defaces Their Website

A former employee of WP MultiLingual’s (WPML) claimed he exploited vulnerabilities over the weekend. The ex-employee sent out mass emails to

Ex-employee of WP MultiLingual’s (WPML) Leaks Customer Data Then Defaces Their Website on Latest Hacking News.

Active Exploits Of ThinkPHP Vulnerability Found Even After Patch

In December 2018, we witnessed active exploits of a ThinkPHP vulnerability. After the discoverers of this flaw posted its PoC,

Active Exploits Of ThinkPHP Vulnerability Found Even After Patch on Latest Hacking News.

Data breach following vulnerabilities in RupeeReedee’s data stack on Amazon

“A potential isolated vulnerability in one of our data storage block (Amazon) was brought to our attention by a data

Data breach following vulnerabilities in RupeeReedee’s data stack on Amazon on Latest Hacking News.

Latest Hacking News Podcast #205: Interview with Noam Kehati of Sixgill

Noam Kehati, Cyber Intelligence Analyst at Sixgill, talks about interesting conversations she's had with cybercriminals on the dark web as well as Sixgills research into dark web criminal activity.

Latest Hacking News Podcast #205: Interview with Noam Kehati of Sixgill on Latest Hacking News.

Oklahoma Department of Securities Breached

The Oklahoma Department of Securities is the latest governmental body to report a breach. This time over a million files

Oklahoma Department of Securities Breached on Latest Hacking News.

Bank Bot Anubis Found Again in Google Play Store

The BankBot trojan, Anubis has once again affected users of the Google Play Store. This occurred when users downloaded a battery power saving app,

Bank Bot Anubis Found Again in Google Play Store on Latest Hacking News.

Over 200 Million Chinese CVs Compromised On The Dark Web


Over 200 Million Chinese CVs Compromised Online







Recently, a database comprising of over 200 million Chinese CVs was discovered online in a compromised position where it was laid bare for the dark web to devour. Naturally, it spilled explicitly detailed information.



Having lacked, fundamentally basic security endeavors, the database exposed some really personal data of people.



The database encompassed their names, addresses, mobile phone numbers, email addresses, education details and other what-not.



The much detailed information on the base was developed by persistently scouring various Chinese job sites.



Reportedly, the director of the researching institution cited on the issue that at the outset, the data was thought to be gained from a huge classified advert site, namely, BJ.58.com.



Nevertheless, BJ.58.com, vehemently denied the citation and their relation with this accident.



They had thoroughly analysed and checked their databases and found nothing questionable, hence reassuring that they had no role to play in the data leakage.



They also mentioned that certainly some third-party CV website “Scraper” is to blame.



It was via twitter that the news about this data cache first floated among people, and soon after that, it was removed from Amazon cloud where it had been stored.



But, as it turned out while further analyzing, before it was deleted it had previously been copied around 12 times.



There has been a series of incidents where the Chinese have been cyber-affected, and this data loss is the latest of all.



From online rail bookings to allegedly stealing rail travelers personal data, the early days of January were quite bad for the Beijing people.



Reportedly, in August last year, the police of China were busy investigating a data breach of hotel records of over 500 million customers.



Personal data, including the booking details and accounts, registration details and other similar information were leaked.



Also, the Internet Society of China had released a report wherein the several phishing attacks and data breaches the country’s residents had faced were mentioned.

Twitter Android App Bug Revealed Private Tweets Spanning Five Years

Social media giant Twitter has just announced a bug fix that has been affecting users of its Android App. However,

Twitter Android App Bug Revealed Private Tweets Spanning Five Years on Latest Hacking News.

Hackers Exploit Chile’s ATM Network Under The Guise of a Skype Job Interview

Lazarus, a network of hackers who target financial organizations, has recently been identified as the prime suspect with regards to

Hackers Exploit Chile’s ATM Network Under The Guise of a Skype Job Interview on Latest Hacking News.

Latest Hacking News Podcast #204

Twitter bug exposed protected tweets of some Android users, ES File Explorer potentially exposes data of 100 million users, and Microsoft launched Azure DevOps bug bounty program on episode 204 of our daily cybersecurity podcast.

Latest Hacking News Podcast #204 on Latest Hacking News.

VOIPO Data Leak – Unprotected Server Left Calls Logs/SMS Exposed

Despite several incidents of data exposure from unprotected servers, many firms still seem complacent towards database protection. Once again, an

VOIPO Data Leak – Unprotected Server Left Calls Logs/SMS Exposed on Latest Hacking News.

NanoCore Trojan Malware Cannot be Killed By Users

Most people are now familiar with how destructive and damaging computer viruses such as a Trojan can be. Many are

NanoCore Trojan Malware Cannot be Killed By Users on Latest Hacking News.

WhatsApp – Are You Getting Someone Elses Messages?

WhatsApp is one of the biggest message platforms in the world. It has always prided itself on being reliable and

WhatsApp – Are You Getting Someone Elses Messages? on Latest Hacking News.

Research Suggests Older People More Likely to Share Fake News

When you think about fake news, it might conjure up images of the 2016 US Presidential campaign. It was thought

Research Suggests Older People More Likely to Share Fake News on Latest Hacking News.