Security News

US, UK, Australia sanction REvil hacker behind Medibank data breach
2024-01-23 13:40

The Australian, US, and UK governments have announced sanctions for Aleksandr Gennadievich Ermakov, a Russian national considered responsible for the 2022 Medibank hack and a member of the REvil ransomware group. Medibank is a large health insurance provider in Australia that suffered a ransomware attack in October 2022, causing operational and business disruption.

Australia sanctions REvil hacker behind Medibank data breach
2024-01-23 13:40

The Australian government has announced sanctions for Aleksandr Gennadievich Ermakov, a Russian national considered responsible for the 2022 Medibank hack and a member of the REvil ransomware group. Following a lengthy investigation, the Australian authorities identified Ermakov as the person responsible for the Medibank hack and data theft.

"Activator" Alert: MacOS Malware Hides in Cracked Apps, Targeting Crypto Wallets
2024-01-23 12:27

Cracked software have been observed infecting Apple macOS users with a previously undocumented stealer malware capable of harvesting system information and cryptocurrency wallet data. Kaspersky,...

Side Channels Are Common
2024-01-23 12:09

Thus, we show, it is possible to conduct physical side-channel attacks on computation by remote and purely passive analysis of commonly-shared channels. These attacks require neither physical proximity, nor the ability to run code on the target or configure its hardware.

UK water giant admits attackers broke into system as gang holds it to ransom
2024-01-23 11:48

Southern Water provides water services to 2.5 million customers and wastewater services to 4.7 million customers in the southern regions of the England. Some documents leaked online are branded with Greensands logos - the parent company of Southern Water.

Apple fixes actively exploited WebKit zero-day (CVE-2024-23222)
2024-01-23 11:35

Apple has fixed an actively exploited zero-day vulnerability that affects Macs, iPhones, iPads and AppleTVs. CVE-2024-23222 is a type confusion issue that affects WebKit - Apple's browser engine used in the Safari web browser and all iOS and iPadOS web browsers.

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks
2024-01-23 11:33

As we enter 2024, Gcore has released its latest Gcore Radar report, a twice-annual publication in which the company releases internal analytics to track DDoS attacks. Gcore’s broad,...

Data of 15 million Trello users scraped and offered for sale
2024-01-23 11:15

Someone is selling scraped data of millions of users of Trello, a popular a web-based list-making application and project management platform, on a dark web hacker forum.According to the service, the data was scraped from Trello in January 2024, and "Was obtained by enumerating a publicly accessible resource using email addresses from previous breach corpuses."

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time
2024-01-23 10:25

Conor Brian Fitzpatrick has been sentenced to time served and 20 years of supervised release for his role as the creator and administrator of BreachForums. Fitzpatrick, who went by the online...

~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation
2024-01-23 09:34

Malicious actors have begun to actively exploit a recently disclosed critical security flaw impacting Atlassian Confluence Data Center and Confluence Server, within three days of public...