Malicious QR Reader App in Google Play Delivers Anatsa Banking Malware

A malicious QR code reader app on Google Play has been found distributing the Anatsa banking malware, posing a significant threat to users’ financial data. The app has already been downloaded thousands of times.

Cyware News – Latest Cyber News – ​Read More

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

The supply chain attack targeting widely-used Polyfill[.]io JavaScript library is wider in scope than previously thought, with new findings from Censys showing that over 380,000 hosts are embedding a polyfill script linking to the malicious domain as of July 2, 2024.
This includes references to “https://cdn.polyfill[.]io” or “https://cdn.polyfill[.]com” in their HTTP responses, the attack

The Hacker News – ​Read More

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

Cybersecurity researchers have uncovered a new botnet called Zergeca that’s capable of conducting distributed denial-of-service (DDoS) attacks.
Written in Golang, the botnet is so named for its reference to a string named “ootheca” present in the command-and-control (C2) servers (“ootheca[.]pw” and “ootheca[.]top”).
“Functionally, Zergeca is not just a typical DDoS botnet; besides supporting six

The Hacker News – ​Read More

Ticketmaster Breach: ShinyHunters Leak 440,000 Taylor Swift Eras Tour Tickets

The ShinyHunters hacker group claims the Ticketmaster breach is far bigger than previously anticipated, stealing 193 million barcodes,…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Volcano Demon Ransomware Gang Makes Phone Calls to Victim for Ransom

According to cybersecurity researchers at Halcyon AI, the new Volcano Demon ransomware gang calls its victims “very frequently,…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Cyber Insurance Premiums Are Declining Worldwide as Businesses Improve Security, Howden Insurance Broker Report Finds

Rates have declined by 15% since the market peak in 2022, according to Howden Insurance Brokers.

Security | TechRepublic – ​Read More

Operation Morpheus Disrupts 593 Cobalt Strike Servers Used for Ransomware

Global Operation Morpheus dismantles Cobalt Strike network: Law enforcement takes down criminal infrastructure used for ransomware and data…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition

Lawmakers voted to advance legislation that would require AI companies to test their systems and add safety measures to prevent them from being potentially manipulated for malicious purposes.

The post California Advances Unique Safety Regulations for AI Companies Despite Tech Firm opposition appeared first on SecurityWeek.

SecurityWeek – ​Read More

ShinyHunters Leak 33M Twilio Authy Phone Numbers, Neiman Marcus and Truist Bank Data

ShinyHunters hackers have taken responsibility for three high-profile data breaches involving Neiman Marcus, Truist Bank, and Twilio Authy,…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Alert: French Diplomats Targeted By Russian Cyber Attacks

ANSSI warned about a hacking group linked to Russia’s SVR targeting French diplomatic interests. The group has compromised email accounts at the French Ministry of Culture and the National Agency for Territorial Cohesion

Cyware News – Latest Cyber News – ​Read More