ABB confirms ransomware attack resulted in data theft
The industrial automation giant ABB confirmed it was hit by a ransomware attack earlier this month that resulted in the theft of unspecified data. A threat actor accessed ABB's IT environment and deployed ransomware that is not self-propagating, impacting a "limited number" of servers and endpoints, the Switzerland-based company said last week in a press release and FAQ about the attack. READ MORE...
Hacked DJ's Twitter account costs cryptocurrency investors $170,000
I know this will come as a shock to many of you, but scammers have once again succeeded in stealing a lot of money from cryptocurrency investors. The Twitter account of American DJ and electronic music producer Steve Aoki, who is considered something of an "influencer" in the world of cryptocurrency, lies at the heart of the scam. According to a tweet posted by self-proclaimed blockchain sleuth ZachXBT, a hack of Aoki's Twitter account cost cryptoinvestors thousands of dollars. READ MORE...
Discord Admins Hacked by Malicious Bookmarks
A number of Discord communities focused on cryptocurrency have been hacked this past month after their administrators were tricked into running malicious Javascript code disguised as a Web browser bookmark. According to interviews with victims, several of the attacks began with an interview request from someone posing as a reporter for a crypto-focused news outlet online. Those who take the bait are sent a link to a Discord server that appears to be the official Discord of the crypto news site. READ MORE...
Spyware Found in Google Play Apps With Over 420 Million Downloads
Antivirus company Doctor Web has identified spyware in over 100 Android applications that had more that 421 million cumulative downloads in Google Play. The malicious module, which Doctor Web named 'SpinOk', is distributed as a marketing SDK. On victims' devices, it can collect information about files, can send files to the attackers, and can steal clipboard content. READ MORE...
Salesforce 'Ghost Sites' Expose Sensitive Corporate Data
Salesforce customers are abandoning their sites without deactivating them, leaving sensitive corporate, vendor, and user data behind. The problem occurs within what the service calls "Communities," busy sites that allow partners, vendors, and customers to collaborate within a company's Salesforce environment. By their nature, Communities contain lots of potentially high-value business and personal information, which can be exposed when administrators aren't diligent enough. READ MORE...
Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery
A zero-day vulnerability affecting Barracuda Networks email security appliances has been exploited to deploy malware and steal data from organizations for several months before it was discovered. The zero-day, tracked as CVE-2023-2868 and described as a remote command injection issue, impacts Email Security Gateway (ESG) appliances running versions 5.1.3.001 through 9.2.0.006. Barracuda became aware of attacks targeting its product on May 18 and confirmed the existence of a new vulnerability the next day. READ MORE...
WordPress plugin 'Gravity Forms' vulnerable to PHP object injection
The premium WordPress plugin 'Gravity Forms,' currently used by over 930,000 websites, is vulnerable to unauthenticated PHP Object Injection. Gravity Forms is a custom form builder website owners use for creating payment, registration, file upload, or any other form required for visitor-site interactions or transactions. On its website, Gravity Forms claims it is used by a wide variety of large companies, including Airbnb, ESPN, Nike, NASA, PennState, and Unicef. READ MORE...
Human-Assisted CAPTCHA-Cracking Services Supercharge Shopper Bots
The cyber-underground menu of criminal services now includes on-demand, human-assisted CAPTCHA-breaking functionality, researchers are warning - meaning that website admins should look to implement additional anti-bot protections as a result. CAPTCHAs are familiar to most Internet users as challenges that are used to confirm that they're human. The Turing test-adjacent puzzles usually involve typing in a word presented as blurred or distorted text, or clicking all photos in a grid with a certain object. READ MORE...
- ...in 1927, the last Ford Model T is manufactured.
- ...in 1930, actor/director Clint Eastwood ("A Fistful of Dollars", "Unforgiven") is born in San Francisco, CA.
- ...in 1964, hip hop pioneer and Run-D.M.C. co-founder Darryl McDaniels (AKA D.M.C.) is born in Harlem, New York City.
- ...in 2005, Vanity Fair reveals former FBI Associate Director Mark Felt as the crucial Watergate scandal informant "Deep Throat".
