The White House Is Deciding Whether to Support a Bureau of Cyber Statistics

Researchers at cybersecurity firm Check Point discovered that many Android applications publicly expose sensitive user data through misconfigured third-party services. The research involved the analysis of 23 Android applications and revealed issues related to real-time databases, cloud storage keys, and push notifications. The exposed data, which pertains to more than 100 million Android users, includes…

China’s dominant ride-hailing app Didi is facing two lawsuits, filed in New York and Los Angeles. They come a week after Didi’s debut on the New York Stock Exchange. The two suits, filed on Tuesday, state that Didi failed to disclose ongoing talks it was having with Chinese authorities about its compliance with cybersecurity laws…

The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them. Synthesis of the vulnerability  An attacker can trigger a buffer overflow via iNotes of HCL Domino, in order to trigger a denial of service, and possibly to run code.Impacted products: Domino by HCL,…

Critical Infrastructure Security , Cybercrime , Cybercrime as-a-service Expert: More Likely, an Affiliate Has Repurposed REvil’s Crypto-Locking Malware Mathew J. Schwartz (euroinfosec) • July 28, 2021     BlackMatter’s dedicated data leak site (Source: Recorded Future) Has the REvil – aka Sodinokibi – ransomware operation come storming back? See Also: Live Webinar | Improve Cloud…

As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password “solarwinds123” was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018,…

Oxford University said on Thursday it was investigating a digital intrusion after a researcher said he had seen evidence that a laboratory researching COVID-19 had been hacked. The breach took place in mid-February and occurred at the Division of Structural Biology, known as Strubi, which has been carrying out research into COVID-19, according to Alex…