CyberNews A High-Profile Breach Exposes Public Data, Raises Questions About Hacker Claims The National Association of Insurance Commissioners (NAIC) has confirmed that its systems were breached by the notorious hacking group ShinyHunters. The attackers claimed to have stolen sensitive data from NAIC’s Oracle PeopleSoft server, but an investigation revealed that they only accessed publicly available information … Read more
Nissan Discloses Employee Data Breach Linked to Widespread Oracle Exploits Automotive giant Nissan has revealed that it suffered a significant data breach affecting current and former employees, following a wave of attacks targeting Oracle PeopleSoft software. The breach is linked to exploits of a zero-day vulnerability in Oracle’s PeopleTools, which was used by threat actors … Read more
A malicious Chrome extension, dubbed “Perplexity,” has been discovered intercepting search queries and address bar inputs from millions of users worldwide. The extension, which was available for download on the official Chrome Web Store, posed as a productivity tool that offered personalized recommendations and insights to users. But beneath its innocuous façade, Perplexity was secretly … Read more
Microsoft Extends Support for Windows Server 2022 Hotpatching Until October 2027 In a move that will come as welcome news to many organizations, Microsoft has announced that it is extending support for hotpatching in Windows Server 2022 until October 2027. This means that systems running the Datacenter: Azure Edition of this operating system can continue … Read more
Meta’s WhatsApp has finally begun rolling out a long-awaited feature that promises to give users more control over their online identity. The company is introducing usernames, which allow users to hide their phone numbers from people not in their contact list. This move is aimed at providing an additional layer of privacy for the platform’s … Read more
Indian government agencies and institutions are under attack from a notorious threat actor known as Mustang Panda, who is leveraging Zoho WorkDrive – a cloud-based file sharing and collaboration platform – as a command channel for its malicious activities. Mustang Panda has been a persistent threat in the region, with a history of targeting high-profile … Read more
A Major Breakthrough for WhatsApp Users: Introducing Usernames to Protect Phone Numbers from Hackers and Spammers For years, WhatsApp users have been vulnerable to identity theft and harassment due to the platform’s reliance on phone numbers as unique identifiers. However, a recent update has finally brought much-needed relief to millions of users worldwide. The messaging … Read more
A malicious Chrome extension, dubbed “Perplexity,” has been caught intercepting sensitive user input and search queries on popular browsers, including Google Chrome, Mozilla Firefox, and Microsoft Edge. The extension, which boasts over 200,000 users worldwide, was created to provide features such as website optimization and analytics insights but secretly siphoned off valuable information from unsuspecting … Read more
The US Department of State has announced a $10 million reward for information that can help identify and locate members of two Russian-backed hacker groups targeting WhatsApp and Signal users. The “Rewards for Justice” program is designed to track down foreign state actors carrying out cyberattacks against US critical infrastructure, including government officials, military personnel, … Read more
Microsoft Extends Hotpatching for Windows Server 2022 Until October 2027, Providing Additional Year of No-Restart Security Updates In a move aimed at minimizing downtime and reducing security risks, Microsoft has extended its hotpatching support for Windows Server 2022 Datacenter: Azure Edition until October 2027. This means that organizations using this edition will continue to receive … Read more