A growing number of Android car head units have been compromised by hackers who are using them to create a proxy botnet or engage in ad fraud. The attack, which has been attributed to the MoYu group, targets systems from DoFun, a Chinese automotive software and hardware provider owned by Shenzhen Driving Control Technology Co., … Read more
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit, But What Does it Mean for Users? The social media giant TikTok has reached a settlement with the U.S. government over allegations that it failed to protect children’s online data. The company will pay out a staggering $400 million as part of the agreement, … Read more
Windows Named Pipes Under Attack: A Wake-Up Call for Developers and Admins Named pipes are a common communication mechanism between applications on the same Windows computer. They’re fast, reliable, and supported directly by the operating system. However, recent attacks have highlighted a disturbing trend: named pipes are not as secure as they seem. When a … Read more
A sophisticated supply-chain attack has compromised thousands of Android-based car head units, turning them into proxy botnets or using them for ad fraud. The malware, attributed to the notorious MoYu group, was spread through a legitimate device-update app and allows attackers to remotely control infected devices. The target of the attack is DoFun, a Chinese … Read more
TikTok, a social media platform with over a billion active users worldwide, has agreed to pay $400 million in settlement fees to resolve a long-standing lawsuit filed by the U.S. Federal Trade Commission (FTC) and several state attorneys general. The lawsuit, which stems from allegations of violating the Children’s Online Privacy Protection Act (COPPA), marks … Read more
Banking Trojans on the Rise: Manic, Grandoreiro, and ToxicPanda 2.0 Threaten Users Worldwide A new wave of sophisticated banking trojans has emerged, targeting users in various regions worldwide. These malware variants – Manic, Grandoreiro, and an updated version of ToxicPanda – are designed to phish credentials, steal sensitive data, and remotely control compromised devices, posing … Read more
Cybersecurity companies have sounded the alarm about a trio of highly sophisticated banking trojans that are targeting users worldwide, with alarming ease. These malware programs can not only siphon sensitive user data and phish credentials but also grant their operators remote control over compromised devices. One of these trojans is called Manic, an Android malware … Read more
A Critical Oversight in Multi-Factor Authentication (MFA) Rollouts: PowerShell, Graph, and Entra Scripts Exposed Multi-factor authentication (MFA) is a crucial security control that adds an extra layer of protection to user logins. However, a recent discovery has highlighted a significant oversight in the MFA rollout process for many organizations, leaving them vulnerable to potential security … Read more
As lawmakers continue to scrutinize the use of hacking tools by the US government, two members of Congress are calling for a thorough investigation into how these powers are being used. Sen. Ron Wyden and Rep. Greg Casar have written to the Government Accountability Office (GAO) requesting a review of the federal government’s hacking activities, … Read more
Financial Giant Apollo Discloses Data Breach in Ongoing Wave of Social Engineering Attacks Apollo Global Management, one of the world’s largest private equity firms, has confirmed that it was hit by a data breach earlier this summer. The breach is part of an ongoing wave of social engineering attacks targeting the financial sector, which have … Read more