Subterms
Security researchers have revealed the anatomy of a ransomware attack, showing how cyber criminals gained access to a network and deployed ransomware — all in the space of just two weeks. Researchers from tech security company SentinelOne examined a server that was used by criminals in October last year to turn a small security breach […] More
The UK’s House of Lords Gambling Committee has called for in-game loot boxes and purchases to be regulated under gambling laws. According to the committee, the gambling restrictions imposed by the Gambling Act 2005 — which may not now be relevant in today’s technology-driven world — smartphone adoption, and mobile apps have created a “perfect storm […] More
In an attempt to find the direct lines of accountability within Australian government entities where cybersecurity is concerned, the Joint Committee of Public Accounts and Audit (JCPAA) on Thursday was sent running in circles like a dog chasing its tail. Australian government entities are required to comply with the Australian Signals Directorate’s (ASD) Top Four […] More
Image: Kon Karampelas Social media giant Facebook disclosed on Wednesday a new user privacy incident. The company said that it continued sharing user data with approximately 5,000 developers even after their application’s access expired. The incident is related to a security control that Facebook added to its systems following the Cambridge Analytica scandal of early […] More
In a report published today, cyber-security firm Lookout said it found evidence connecting Android malware that was used to spy on minorities in China to a large government defense contractor from the city of Xi’an. Lookout’s 52-page report [PDF] details a years-long hacking campaign that has primarily targeted the Uyghur ethnic minority, living in western […] More
Image: Woolworths The Australian Communications and Media Authority (ACMA) has hit Woolworths Group with a fine of AU$1,003,800, the largest it has handed down, due to five million breaches of the Spam Act 2003 made between October 2018 and July 2019. The breaches consisted of continuing to send marketing emails after people had unsubscribed. ACMA […] More
A hacker has uploaded ransom notes on 22,900 MongoDB databases left exposed online without a password, a number that accounts for roughly 47% of all MongoDB databases accessible online, ZDNet has learned today. The hacker is using an automated script to scan for misconfigured MongoDB databases, wiping their content, and leaving a ransom note behind […] More
In one of the biggest password re-use studies of its kind, an analysis of more than one billion leaked credentials has discovered that one out of every 142 passwords is the classic “123456” string. The study, carried out last month by computer engineering student Ata Hakçıl, analyzed username and password combinations that leaked online after […] More
