News

Threat Post2y
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. New research indicates that over 80,000 Hikvision surveillance cameras ...
Threat Post2y
Hack Allows Drone Takeover Via ‘ExpressLRS’ Protocol
A radio control system for drones is vulnerable to remote takeover, thanks to a weakness in the mechanism that binds transmitter and receiver. The popular protocol for radio controlled (RC ...
Threat Post5y
Coronavirus Poll Results: Cyberattacks Ramp Up, WFH Prep Uneven
A poll of Threatpost readers shows that security preparedness is uneven as organizations make an unprecedented transition to remote working. As the COVID-19 pandemic continues to sweep the globe ...
Threat Post2y
Fake Reservation Links Prey on Weary Travelers
Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. A longtime threat group identified as TA558 has ...
Threat Post4y
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
According to Adobe, the zero-day vulnerability, which is tracked as CVE-2021-28550, “has been exploited in the wild in limited attacks targeting Adobe Reader users on Windows.” Windows users ...
Threat Post5y
Streaming TV Fraudsters Steal Millions of Ad Dollars in ‘ICEBUCKET’ Attack
Crooks manipulated connected TV supply-side ad platforms to create millions of fictional eyeballs. A massive television ad fraud campaign that abuses the programmatic advertising ecosystem for ...
Threat Post3y
iPhones Vulnerable to Attack Even When Turned Off
Wireless features Bluetooth, NFC and UWB stay on even when the device is powered down, which could allow attackers to execute pre-loaded malware. Attackers can target iPhones even when they are ...
Threat Post5y
Crooks Tap Google Firebase in Fresh Phishing Tactic
Cybercriminals are taking advantage of the Google name and the cloud to convince victims into handing over their login details. A series of phishing campaigns using Google Firebase storage URLs ...
Threat Post2y
Black Hat and DEF CON Roundup
‘Summer Camp’ for hackers features a compromised satellite, a homecoming for hackers and cyberwarfare warnings. There was nothing typical this year at BSides LV, Black Hat USA and DEF CON ...
Threat Post3y
1M Stolen Credit Cards Hit Dark Web for Free
A dump of hundreds of thousands of active accounts is aimed at promoting AllWorld.Cards, a recently launched cybercriminal site for selling payment credentials online. Threat actors have leaked 1 ...
Threat Post4y
Major Gaming Companies Hit with Ransomware Linked to APT27
Researchers say a recent attack targeting videogaming developers has ‘strong links’ to the infamous APT27 threat group. A recent slew of related ransomware attacks on top videogame companies ...
Threat Post5y
Gamaredon APT Improves Toolset to Target Ukraine Government, Military
Research have been tracking an uptick in Gamaredon cyberattacks on Ukrainian military and security institutions that started in December. The Gamaredon advanced persistent threat (APT) group has ...