Security News
![EasyPark discloses data breach that may impact millions of users](/static/build/img/news/easypark-discloses-data-breach-that-may-impact-millions-of-users-small.jpg)
Parking app developer EasyPark has published a notice on its website warning of a data breach it discovered on December 10, 2023, which impacts an unknown number of its millions of users. As reported by BleepingComputer, ParkMobile disclosed a massive data breach in 2021 that exposed the stolen data for 21 million customers.
![Microsoft disables MSIX protocol handler abused in malware attacks](/static/build/img/news/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks-small.jpg)
Microsoft has again disabled the MSIX ms-appinstaller protocol handler after multiple financially motivated threat groups abused it to infect Windows users with malware. Microsoft says the threat actors use both malicious advertisements for popular software and Microsoft Teams phishing messages to push signed malicious MSIX application packages.
![Kroll reveals FTX customer info exposed in August data breach](/static/build/img/news/kroll-reveals-ftx-customer-info-exposed-in-august-data-breach-small.jpg)
Risk and financial advisory company Kroll has released additional details regarding the August data breach, which exposed the personal information of FTX bankruptcy claimants. Kroll said the exposed data included coin holdings and balances, which would allow threat actors to pinpoint attractive targets who invest heavily in the cryptocurrency markets.
![Russian military hackers target Ukraine with new MASEPIE malware](/static/build/img/news/russian-military-hackers-target-ukraine-with-new-masepie-malware-small.jpg)
Ukraine's Computer Emergency Response Team is warning of a new phishing campaign that allowed Russia-linked hackers to deploy previously unseen malware on a network in under one hour. The links redirect victims to malicious web resources that employ JavaScript to drop a Windows shortcut file that launches PowerShell commands to trigger an infection chain for a new Python malware downloader called 'MASEPIE.'.
![A tale of 2 casino ransomware attacks: One paid out, one did not](/static/build/img/news/a-tale-of-2-casino-ransomware-attacks-one-paid-out-one-did-not-small.jpg)
From the outside, at least, it appears that Caesars suffered minimal pain and business disruption primarily because it decided to pay the ransom. "Paying a ransom is like cutting the cheese in a packed elevator: it makes other people suffer," Emsisoft threat analyst Brett Callow told The Register.
![Apache OFBiz RCE flaw exploited to find vulnerable Confluence servers](/static/build/img/news/apache-ofbiz-rce-flaw-exploited-to-find-vulnerable-confluence-servers-small.jpg)
A critical Apache OFBiz pre-authentication remote code execution vulnerability is being actively exploited using public proof of concept exploits. Online URL. The researchers further said those scanning vulnerable servers are particularly interested in finding vulnerable Confluence servers.
![Kaspersky reveals previously unknown hardware 'feature' exploited in iPhone attacks](/static/build/img/news/kaspersky-reveals-previously-unknown-hardware-feature-exploited-in-iphone-attacks-small.jpg)
Kaspersky's Global Research and Analysis Team has exposed a previously unknown 'feature' in Apple iPhones that allows attackers to bypass hardware-based memory protection. Kaspersky reckons the hardware feature might have been intended for testing or debugging.
![Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service](/static/build/img/news/google-cloud-resolves-privilege-escalation-flaw-impacting-kubernetes-service-small.jpg)
Google Cloud has addressed a medium-severity security flaw in its platform that could be abused by an attacker who already has access to a Kubernetes cluster to escalate their privileges. "An...
![AI and Lossy Bottlenecks](/static/build/img/news/alt/cyberattack-statistics-1-small.jpg)
AI researcher Tantum Collins and I, a public-interest technology scholar, call this AI overcoming "Lossy bottlenecks." Lossy is a term from information theory that refers to imperfect communications channels-that is, channels that lose information. By storing rich representations of people's preferences and histories on the demand side, along with equally rich representations of capabilities, costs and creative possibilities on the supply side, AI systems enable complex customization at scale and low cost.
![Blockchain dev's wallet emptied in "job interview" using npm package](/static/build/img/news/blockchain-dev-s-wallet-emptied-in-job-interview-using-npm-package-small.jpg)
A blockchain developer shares his ordeal over the holidays when he was approached on LinkedIn by a "Recruiter" for a web development job. The recruiter in question asked the developer to download npm packages from a GitHub repository, and hours later the developer discovered his MetaMask wallet had been emptied.