LATEST POST
FinCEN Issues Financial Trend Analysis on Ransomware
On December 4, the U.S. Department of the Treasury Financial Crimes Enforcement Network (FinCEN) issued a Financial Trend Analysis of ransomware incidents since January 2022: FinCEN
Privacy concerns raised as Grok AI found to be a stalker’s best friend
Your personal security may be at greater risk than you knew, thanks to Grok AI. Bitdefender reports: Grok, the AI chatbot developed by Elon Musk’s xAI, has been found to exhibit more alarming behaviour – this time revealing the home addresses of ordinary people upon request. And, as if that wasn’t enough of a privacy […]
Japan: 17-yr-old suspected of carrying out cyberattack with AI help
There have been many articles written about the threat of artificial intelligence (AI) being used to program or assist cybercrime, but very little evidence of it actually happening. Here is a case where it has reportedly happened. Kyodo News reports: A 17-year-old boy was served an arrest warrant on Thursday on suspicion of breaching the […]
Portugal updates cybercrime law to exempt security researchers
Good news for “white hat” researchers. Bleeping Computer reports: Read more at Bleeping Computer.
UK Government Considers Computer Misuse Act Revision
Data Breach Today reports: The U.K. government is considering amending its three-decade-old hacking law to include a “statutory defense” cover for security researchers, Security Minister Dan Jarvis said. The announcement comes amid concerns that the law penalizes white hat hackers for essential security practices such as participating in bug bounties. Speaking at a Financial Times […]
LockBit 5.0 Infrastructure Exposed in New Server, IP, and Domain Leak
Cyber Security News reports that LockBit 5.0’s infrastructure was leaked on X.com on December 5 by Rakesh Krishnan: LockBit 5.0 key infrastructure exposed, revealing the IP address 205.185.116.233, and the domain karma0.xyz is hosting the ransomware group’s latest leak site. According to researcher Rakesh Krishnan, hosted under AS53667 (PONYNET, operated by FranTech Solutions), a network frequently […]
Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say
The Record reports: State-backed hackers in China are exploiting a vulnerability impacting a popular open-source tool built into thousands of widely-used digital products, according to new reports. The tool, React Server Components, was maintained by Meta for many years and now is embedded in 50 million websites and products built by countless major firms. The bug, tagged […]
Barts Health NHS Confirms Cl0p Ransomware Behind Data Breach
HackRead reports: Barts Health NHS Trust has confirmed that the Russian-speaking Cl0p ransomware group stole files from one of its invoice databases after exploiting a vulnerability in Oracle E-Business Suite. The breach exposed data linked to payments for treatment and services, with some records going back several years. Hackread.com first reported on the Cl0p activity in November twenty twenty […]