CyberNews Cybersecurity practitioners are often warned about the dangers lurking beneath the surface. But what happens when that threat turns out to be real? Varonis Threat Labs researchers Doron Kapah and Mark Vaitsman have faced this reality firsthand, dealing with data exfiltration in cloud-native environments. Their experience inspired them to create Breach at the Beach, a … Read more
Japan’s largest taxi operator, Nihon Kotsu, has fallen victim to a cyberattack that forced the company to shut down part of its infrastructure. The incident occurred over the weekend, impacting operations including the company’s taxi dispatch system, which remains offline as of today. Nihon Kotsu is Japan’s largest taxi and chauffeur operator by group revenue, … Read more
Lidl Discloses Online Shop Breach After Service Provider Hack, Warns Customers of Potential Phishing Attacks German discount supermarket chain Lidl has notified customers in Germany, Belgium, and the Netherlands that their personal information was stolen in a breach at a service provider. The company’s online shop was not directly affected by the attack, but customer … Read more
Cybersecurity experts are sounding the alarm over a pair of critical vulnerabilities affecting popular Joomla extensions, iCagenda and Balbooa Forms. These flaws have been actively exploited by attackers, compromising websites and putting sensitive data at risk. The US Cybersecurity and Infrastructure Security Agency (CISA) has categorized these vulnerabilities as “maximum priority,” urging federal agencies to … Read more
A New macOS Malware Threat Lurks in Disguise as Apple’s Crash Reporting Tool A sophisticated piece of malware has been making the rounds on the dark web, masquerading as Apple’s crash reporting tool to steal sensitive user data. Dubbed CrashStealer, this malicious software has been designed to evade detection by mimicking the behavior and appearance … Read more
Japan’s largest taxi operator, Nihon Kotsu, has been forced to shut down part of its systems after falling victim to a cyberattack over the weekend. The incident occurred early on Saturday morning and impacted operations, including the company’s taxi dispatch system, which remains offline as of today. With annual revenue of around $1 billion (¥155 … Read more
Lidl has disclosed a significant data breach that affected customers in Germany, Belgium, and the Netherlands. The incident occurred when hackers breached the systems of an external service provider, allowing them to steal personal information from Lidl’s online shop customers. The discount supermarket chain has over 376,000 employees and operates 12,000 stores across Europe and … Read more
A sophisticated macOS malware, dubbed CrashStealer, has been discovered masquerading as Apple’s crash reporting tool. The malware, which was first tracked in May and seen in action this month, is designed to steal sensitive data from infected devices, including credentials, keychain information, and cryptocurrency wallets. CrashStealer’s creators have gone to great lengths to evade detection, … Read more
A Malicious npm Package Leaves Almost 1,500 Developers Exposed to InfoStealing Malware In a worrying incident that highlights the ongoing threats to software development and distribution, hackers have managed to compromise a popular npm package called Jscrambler. The malicious version of the package was published for almost two hours, during which time it was downloaded … Read more
Google and Microsoft have simultaneously pulled the ModHeader browser extension from their respective stores, citing concerns over its potential for malicious activity. This move affects approximately 1.6 million users who had installed the extension on their browsers, highlighting a critical reminder of the importance of vigilance in the digital landscape. ModHeader is a popular browser … Read more