Apple Announces Advanced Data Protection for iCloud

Apple released several new security features on December 7th, 2022, designed to keep users’ sensitive data and communications secure. Advanced Data Protection for iCloud is one of the most notable features for Apple users. In order to protect sensitive data stored in iCloud, such as voice memos, photos, notes, and …

SiriusXM Flaw Unlocks Vehicles and More

A somewhat concerning flaw has been fixed by SiriusXM that would allow unauthorized individuals to unlock doors remotely and start engines by only having the vehicle identification number (VIN). Sam Curry, a researcher at Yuga Labs, published a Twitter thread explaining the details of the discovered security flaw. The security …

End-to-End Encryption for Dropbox Business Users

Dropbox has announced its plans to purchase several key assets from Boxcryptor so that it is able to provide end-to-end encryption for its business users. In addition, the partial merger between the two companies will enable Dropbox to better meet its client’s needs, including an enhanced level of security for …

Lastest LastPass Security Incident

According to LastPass CEO Karim Toubba, the password manager has been hacked once again. A data breach occurred in the development environment only a few months ago, prompting LastPass to announce they had experienced a security breach on August 25, 2022. LastPass disclosed to its customers that a developer account …

Amazon Security Lake Aims to Enhance Cybersecurity for Businesses

The new security-focused data lake solution from Amazon Web Services (AWS), unveiled at re:Invent 2022, aims to give consumers more value from their security data. The Amazon Security Lake service aims to consolidate an organization’s security data from various on-premises and cloud-based sources into a single location to pinpoint security …

Scammers Impersonating Refund Payment Portals

The FBI warns about scammers pretending to be refund payment gateways from financial institutions to steal sensitive information from unsuspecting victims. The federal law enforcement agency stated that scammers deceive victims into granting them access to their computers via email or phone calls by posing as representatives of technical or …

Twitter’s Data Leak Exposes Over 5.4 Million Users

Earlier this year, Twitter confirmed that an API vulnerability had caused a massive data leak containing non-public information for over 5.4 million Twitter users. Twitter denied claims that hackers had leaked the private information priorly. However, Pompompurin, the owner of the hacking forum Breached, stated they were responsible for exploiting …

Phishing-as-a-Service on the Rise with Caffeine

Threat actors may now launch their own sophisticated assaults thanks to the emergence of Phishing as a Service (PhaaS) platforms like “Caffeine.” Through an open registration procedure, anyone who wishes to launch their phishing campaign can sign up on these platforms. Security experts at Mandiant discovered the first sighting of …

Vice Society Claims Cincinnati State College Cyberattack

Data allegedly stolen from Cincinnati State Technical and Community College has been leaked after Vice Society attacked the campus. Many of the stolen documents were posted on the hackers’ websites. These documents date from several years ago until November 24, 2022, suggesting that threat actors still have access to the …

Hackers Execute Arbitrary Code with Microsoft Office

According to cybersecurity experts at Cisco Talos, Microsoft Office has a high-severity vulnerability that could allow prospective cyber attackers to execute malicious code on the target device remotely. Microsoft announced the issue in a brief blog post, stating that its researcher Marcin ‘Icewall’ Noga had identified a class attribute double-free …