Dora Tudor's Recent Articles

News | QUICK READ

Moroccan Hacker Arrested by the Interpol in "Operation Lyrebird"

The Threat Actor Responsible for Targeting Thousands of Unwitting Victims Over Several Years and Staging Multiple Malware Attacks Was Apprehended.

News | QUICK READ

A New Threat Advertises Malicious Privacy Tools as Security Enhancers

A New Threat Tries to Take Advantage of People by Using a Fake Website that Is Claiming To Provide Enhanced Security.

News | QUICK READ

Hackers Managed to Scrape 90,000 GETTR User Emails

The Newly Launched App Suffered a Data Breach After a Hacker Used an Unsecured API and Scraped Private Information Belonging to the Members.

News | QUICK READ

CISA and FBI Share Guidance for the Victims of Kaseya Ransomware Attack

The Federal Agencies Are Advising the Affected MSPs to Make Sure to Further Check Their Systems for Signs of Compromise.

News | QUICK READ

Is Diavol Ransomware Connected to Wizard Spider?

As Diavol Ransomware Is New on the Threat Landscape Researchers Weren’t Sure Where it Would Fit.

News | QUICK READ

Vulnerabilities Found in the WAGO Devices May Expose Companies to Remote Attacks

A Number of Critical and High-Severity Vulnerabilities Were Identified in the PLC and HMI Products Made by WAGO.

News | QUICK READ

Coop Supermarket Had to Close 500 Stores Following the Kaseya Ransomware Attack

The Swedish Supermarket Chain Closed 500 Stores After Falling Victims to the Latest REvil Ransomware Attack.

News | QUICK READ

Revil Ransomware Attacked When Kaseya Was Fixing the Zero-Day Vulnerability

A Massive REvil Ransomware Attack Managed to Affect Multiple Managed Service Providers Through the Kaseya Supply-Chain Attack. The Attackers Are Asking for a Ransom of $70 Million in Bitcoin.

News | QUICK READ

LimeVPN Website Was Taken Down by a Hacker

Sensitive Information Belonging to 69.400 Customers Were Hacked and Sold on the Dark Web.

News | QUICK READ

Diavol Ransomware, a New Ransomware in the Cybersecurity Landscape 

A New Ransomware Strain Dubbed as Diavol Might Be Linked to Wizard Spider, the Cybercrime Group Behind the Trickbot Botnet.

News | QUICK READ

GRU Russian Hackers Are Using Kubernetes to Run Brute Force Attacks

NSA Is Warning That Russian Nation-State Hackers Might Be Conducting Brute Force Attacks in Order to Access US Networks and Steal Email and Files.

News | QUICK READ

Vulnerabilities Found in a WordPress Plugin Are Posing Remote Code Execution Risks

Multiple Vulnerabilities Discovered in a Popular WordPress Plugin Used to Upload Profile Photos Could Allow Attackers to Achieve Remote Code Execution.

News | QUICK READ

Facebook Is Suing the Hackers That Hijacked Advertising Agencies' Accounts

Lawsuits Were Filed Against Two Groups of Suspects that Took Over Advertising Agency Employees’ Accounts and Abused the Ad Platform.

News | QUICK READ

Parcel Delivery Scam Targets Victims with Personalized Messages

A New Parcel Delivery Scam Is Using a New Twist. The Scammers Are Now Sending Out Personalized Messages to Potential Victims. 

News | QUICK READ

DoubleVPN Servers, Logs, and Account Info Seized by Law Enforcement Agencies

The Servers and Customer Logs for DoubleVPN, a Double-Encryption Service Used by Threat Actors Were Recently Seized.

News | QUICK READ

Mercedes-Benz Data Breach Sheds Light on the Importance of Third-Party Risks

The Mercedes-Benz Data Breach Brings the Issue of Private Data Accidentally Becoming Accessible Into the Spotlight.

News | QUICK READ

5G Security Vulnerabilities Are Raising Concerns for Mobile Operators

A Survey by GSMA and Trend Micro Is Showing a Concerning Lack of Security Capabilities for Private 5G Networks.

News | QUICK READ

Ransomware Gangs Are Using New Recruitment Strategies

The Criminal Groups Are Now Using Their Websites in Order to Recruit Affiliates.

News | QUICK READ

FIN7 Hacking Group’s Supervisor Gets 7-Years in Jail 

The Ukrainian National and Mid-Level Supervisor of the FIN7 Hacking Group Was Sentenced to Seven Years in Prison for The Role He Played as a “Pen Tester” in Stealing Millions of Credit Cards.

News | QUICK READ

A Cisco ASA Vulnerability Is Actively Exploited

After the PoC Exploit Was Published on Twitter the Hackers Started to Exploit a Vulnerability Found in the Cisco ASA Devices.

News | QUICK READ

Data Breach Involving Mercedes-Benz Exposes SSNs and Credit Card Numbers

The Mercedes-Benz Data Breach Exposed SSNs, Credit Card Numbers and Other Important Personal Information Belonging to Mercedes-Benz Customers and Potential Buyers.

News | QUICK READ

An Unusual File Attachment Is Being Used in Phishing Attacks

In an Attempt to Bypass Security Software Threat Actors Are Using the WIM Format.

News | QUICK READ

New Bugs Found in Dell SupportAssist 

The Dell SupportAssist Vulnerabilities Discovered Were Allowing Attackers to Remotely Execute Code in the BIOS of the Impacted Devices.

News | QUICK READ

A Concerning Number of Third-Party Libraries From Apps Are Never Updated

Third-party Libraries Are Rarely Updated After Being Included in a Codebase, Even Though in Most Cases the Libraries Can Be Relatively Easily Updated.

News | QUICK READ

An Unpatched Flaw Existing in Linux Pling Store Apps Might Lead to Supply-Chain Attacks

The Critical Vulnerability Seems to be Affecting Pling-Based Free and Open-Source Software (FOSS) Marketplaces for the Linux Platform.

News | QUICK READ

Conti Ransomware Leaks Police Citations and Forces the City of Tulsa to Issue a Data Breach Warning

Tulsa Suffered a Ransomware Attack Leading to the City Shutting Down its Network in Order to Prevent the Spread of the Malware.

News | QUICK READ

Malicious PyPI Packages Used to Mine Cryptocurrency

The Packages Found in the PyPI Repository for Python Projects Were Turning the Developers’ Workstations into Cryptomining Machines.

News | QUICK READ

The SonicWall Bug Was Only Partially Fixed

The CVE-2020-5135 Vulnerability Was Believed to Be Patched, but It Seems that the Vulnerability Was Not Properly Patched Until Now.

News | QUICK READ

Massachusetts MassNotify Android COVID App Forcedly Installed by Google

Users Are Unable to Remove the App as They Cannot Open It or Find it in the Google Play Store.

News | QUICK READ

Data Leak Marketplace Is Pressuring Victims

Marketo Data Theft Marketplace Started to Email the Victims’ Competitors in an Attempt to Offer Samples of The Stolen Data And Entice Them Into Purchasing It.