Security News
![New Black Basta decryptor exploits ransomware flaw to recover files](/static/build/img/news/new-black-basta-decryptor-exploits-ransomware-flaw-to-recover-files-small.jpg)
Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free. The decryptor allows Black Basta victims from November 2022 to this month to potentially recover their files for free.
![Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks](/static/build/img/news/beware-scam-as-a-service-aiding-cybercriminals-in-crypto-wallet-draining-attacks-small.jpg)
Cybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. "These threats are unique in their approach, targeting a wide range...
![Friday Squid Blogging: Sqids](/static/build/img/news/alt/cost-stats-small.jpg)
Sqids is an open-source library that lets you generate YouTube-looking IDs from numbers. These IDs are short, can be generated from a custom alphabet and are guaranteed to be collision-free.
![The Week in Ransomware - December 29th 2023 - LockBit targets hospitals](/static/build/img/news/the-week-in-ransomware-december-29th-2023-lockbit-targets-hospitals-small.jpg)
We did not see much research released on ransomware this week, with most of the news focusing on new attacks and LockBit affiliates increasingly targeting hospitals. The most concerning news is that LockBit affiliates increasingly target hospitals in attacks, even though the ransomware operation says it's against the rules.
![Hospitals ask courts to force cloud storage firm to return stolen data](/static/build/img/news/alt/health-statistics-small.jpg)
Two not-for-profit hospitals in New York are seeking a court order to retrieve data stolen in an August ransomware attack and now stored on the servers of a Boston cloud storage company. The LockBit ransomware gang claimed responsibility for breaching and stealing sensitive files from their systems in late August, with a press release published by the hospitals one week later saying the incident forced them to redirect patients requiring urging care to other hospitals' emergency departments.
![Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts](/static/build/img/news/malware-abuses-google-oauth-endpoint-to-revive-cookies-hijack-accounts-small.jpg)
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset. These cookies would allow the cybercriminals to gain unauthorized access to Google accounts even after the legitimate owners have logged out, reset their passwords, or their session has expired.
![Albanian Parliament and One Albania Telecom Hit by Cyber Attacks](/static/build/img/news/albanian-parliament-and-one-albania-telecom-hit-by-cyber-attacks-small.jpg)
The Assembly of the Republic of Albania and telecom company One Albania have been targeted by cyber attacks, the country’s National Authority for Electronic Certification and Cyber Security...
![AI Is Scarily Good at Guessing the Location of Random Photos](/static/build/img/news/alt/web-statistics-2-small.jpg)
To test PIGEON's performance, I gave it five personal photos from a trip I took across America years ago, none of which have been published online. Some photos were snapped in cities, but a few were taken in places nowhere near roads or other easily recognizable landmarks.
![CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK](/static/build/img/news/cert-ua-uncovers-new-malware-wave-distributing-oceanmap-masepie-steelhook-small.jpg)
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as...
![Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks](/static/build/img/news/kimsuky-hackers-deploying-appleseed-meterpreter-and-tinynuke-in-latest-attacks-small.jpg)
Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as AppleSeed, Meterpreter, and TinyNuke to seize...