News

A critical vulnerability discovered in a firewall appliance made by Germany-based cybersecurity company Genua could be useful to threat actors once they’ve gained access to an organization’s network, according to Austrian cybersecurity consultancy SEC Consult. Genua Genugate is a firewall designed for protecting internal networks against external threats, segmenting internal networks, and protecting machine-to-machine communications….

As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password “solarwinds123” was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018,…

Cybersecurity experts at PiiQ Media report detecting a social media bot campaign that has been promoting “meme stocks” like GameStop Corp, suggesting that a hacking group might be behind the recent purchase frenzy powered by Reddit. After a group of users organized through Reddit forums, the price of GameStop shares skyrocketed, in an attempt to…

Google Pixel phones have started receiving the March 2021 Pixel update along with the latest Android security patch. The update brings new share audio recordings feature, improved integration for an accessory that allows using the camera underwater, and more. The feature drop is available for Google Pixel 3 phones and newer models. Along with the…

What just happened? After Parler was shut down, many of its users flocked to a similar platform called Gab, which was recently hacked. The treasure trove includes both public and private data on 15,000 Gab users, which will provide journalists and researchers with an important sociological resource. Earlier this year, it was revealed that social…

Accusations of sabotage by Chinese malware agencies on India’s power grid started flying again with a report by Somerville-based Recorded Future citing the same and Maharashtra government ordering an investigation into whether or not the Mumbai outage in October 2020 was due to any Chinese sabotage. Cyber intelligence firm, Recorded…

Amid heightened border tensions between India and China, cybersecurity researchers have revealed a concerted campaign against India’s critical infrastructure, including the nation’s power grid, from Chinese state-sponsored groups. The attacks, which coincided with the standoff between the two nations in May 2020, targeted a total of 12 organizations, 10 of which are in the power…

A Chinese state-backed hacking group has in recent weeks targeted the IT systems of two Indian vaccine makers whose coronavirus shots are being used in the country’s immunisation campaign, cyber intelligence firm Cyfirma told Reuters. Rivals China and India have both sold or gifted COVID-19 shots to many countries. India produces more than 60% of…

Endpoint Security , Governance & Risk Management , IT Risk Management Flaw Could Enable Access to Secret Encryption Key Prajeet Nair (@prajeetspeaks) • March 1, 2021     Rockwell’s Studio 5000 Logix Designer is among products affected by a vulnerability. (Source: Rockwell) A critical authentication bypass vulnerability could enable hackers to remotely compromise programmable logic…

A new Unc0ver jailbreak tool works on almost every iPhone, including the iPhone 12. It is based on the same vulnerability Apple said may have been been actively exploited by hackers. The approach works on iPhones running iOS 11 through to iOS 14.3, as Apple patched the flaws in iOS 14.4… TechCrunch reports: In a…