Security News

Houseparty denied it had been hacked... while miscreants were abusing its dot-com domain name infrastructure
2020-05-20 15:00

While some tweets taking aim at Houseparty appear to be dubious, evidence of any smear campaign has yet to surface, and it appears the $1m bounty has not been awarded. The Register twice asked Houseparty to confirm this.

Easyjet hacked: 9 million people's data accessed plus 2,200 folks' credit card details grabbed
2020-05-19 12:32

Budget British airline Easyjet has been hacked, it has told the stock markets, admitting nine million people's details were accessed and more than 2,000 customers' credit card details stolen. Easyjet insists that the passport and credit card details of nearly all of those people were not affected.

Easyjet hacked: 9 million people's data accessed plus 2,200 folks' credit card details grabbed
2020-05-19 12:32

Budget British airline Easyjet has been hacked, it has told the stock markets, admitting nine million people's details were accessed and more than 2,000 customers' credit card details stolen. Easyjet insists that the passport and credit card details of nearly all of those people were not affected.

Transportation Agency Hacked in 2nd Texas Government Attack
2020-05-18 12:03

Texas' transportation agency has become the second part of the state government to be hit by a ransomware attack in recent days. On Thursday, someone hacked into the Texas Department of Transportation's network in a "Ransomware event," according to a statement the department posted on social media Friday.

Brit defense contractor hacked, up to 100,000 past and present employees' details siphoned off – report
2020-05-15 05:08

Britain's Ministry of Defence contractor Interserve has been hacked, reportedly leaking the details of up to 100,000 of past and current employees, including payment information and details of their next of kin. The Daily Telegraph reports that up to 100,000 employee details were stolen, dating back across a number of years.

HTTP Status Codes Command This Malware How to Control Hacked Systems
2020-05-15 02:43

A new version of COMpfun remote access trojan has been discovered in the wild that uses HTTP status codes to control compromised systems targeted in a recent campaign against diplomatic entities in Europe. In addition to functioning as a fully-featured RAT capable of capturing keystrokes, screenshots, and exfiltrating sensitive data, this new variant of COMpfun monitors for any removable USB devices plugged to the infected systems to spread further and receives commands from an attacker-controlled server in the form of HTTP status codes.

HTTP Status Codes Command This Malware How to Control Hacked Systems
2020-05-15 02:43

A new version of COMpfun remote access trojan has been discovered in the wild that uses HTTP status codes to control compromised systems targeted in a recent campaign against diplomatic entities in Europe. In addition to functioning as a fully-featured RAT capable of capturing keystrokes, screenshots, and exfiltrating sensitive data, this new variant of COMpfun monitors for any removable USB devices plugged to the infected systems to spread further and receives commands from an attacker-controlled server in the form of HTTP status codes.

Report: Microsoft’s GitHub Account Gets Hacked
2020-05-08 15:36

Hackers have broken into Microsoft's GitHub account and stolen 500 GB of data from the tech giant's own private repositories on the developer platform, according to published reports. In its latest hack, the group provided a screenshot to reporters at news site Hack Read that showed a list of private files from Microsoft's open-source developer repository to prove their infiltration of the company's private account.

Search Company Algolia Hacked via Recent Salt Vulnerabilities
2020-05-07 15:39

A couple of Salt vulnerabilities addressed last week were abused over the weekend to hack Algolia's infrastructure, the search-as-a-service startup revealed. An open-source configuration tool designed for monitoring and updating the state of servers deployed in datacenters and in the cloud, Salt was recently found to be impacted by two issues that could allow attackers to execute arbitrary commands.

Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies
2020-04-30 07:33

Dubbed 'PerSwaysion,' the newly spotted cyberattack campaign leveraged Microsoft file-sharing services-including Sway, SharePoint, and OneNote-to launch highly targeted phishing attacks. According to a report Group-IB Threat Intelligence team published today and shared with The Hacker News, PerSwaysion operations attacked executives of more than 150 companies around the world, primarily with businesses in finance, law, and real estate sectors.