tokopedia Hacker Sells 91 Million Tokopedia User Records on Dark Web A cybercriminal is selling a massive database of 91 million Tokopedia users for just $5,000, and other attackers are already cracking and sharing the exposed passwords online.
west virginia West Virginia Pioneers Smartphone Voting for Disabled Citizens West Virginia prepares to become the first state to allow voters with physical disabilities to cast ballots via smartphone apps. The plan relies on technology like Voatz, though cybersecurity experts strongly warn against the security risks of online voting.
huawei UK Government Reverses Course on Huawei and Contact-Tracing Apps in 2020 The UK government makes major U-turns in 2020 by banning Huawei from 5G networks and abandoning a centralized contact-tracing app for Apple and Google's decentralized model.
social media Social Media Platforms Deploy New Measures to Fight 2020 Election Misinformation Major social media companies are introducing new tools and policies to curb misinformation and increase transparency ahead of the 2020 presidential election. These efforts aim to prevent the foreign and domestic interference that plagued the 2016 election cycle.
cybersecurity Major Cyberattacks in November 2020 Target Healthcare and Government Sectors November 2020 sees a surge of devastating cyberattacks, with ransomware heavily impacting healthcare systems and sophisticated phishing campaigns threatening global organizations. These incidents highlight the critical need for robust security operations during the pandemic.
zoom Zoom Unveils Four-Phase End-to-End Encryption Plan for Enhanced Security Zoom publishes a draft design for end-to-end encryption on GitHub, aiming to protect users from outsiders and insiders through a structured four-phase approach.
sigred Critical Windows DNS Server Flaw SIGRed Demands Immediate Patching A highly critical, wormable vulnerability known as SIGRed affects Windows DNS Servers and allows unauthenticated attackers to gain Domain Admin rights. Organizations are urged to apply Microsoft's July Patch Tuesday updates immediately to prevent automated network compromises.
cyber monday Cyber Monday 2020 Brings Massive Tech Deals But Requires Smart Shopping Cyber Monday 2020 extends the holiday shopping season with significant gadget discounts, though online shoppers must remain cautious. Experts recommend verifying product legitimacy and carefully evaluating personal needs before making a purchase.
zoom Zoom Unveils Draft Design for Upcoming End-to-End Encryption Feature Zoom shares a preliminary technical design for its upcoming end-to-end encryption feature as part of its 90-day security plan. The draft outlines how the company plans to balance enhanced user privacy with broader platform safety.
zoom Half a Million Hacked Zoom Accounts Flood Dark Web Markets Over 500,000 stolen Zoom credentials are circulating on hacker forums and the dark web, often sold for less than a penny each. These accounts are compromised through credential stuffing attacks using login details from older data breaches.
lockbit New LockBit Ransomware Uses Self-Spreading Automation to Rapidly Encrypt Networks A relatively new ransomware strain named LockBit relies on highly automated, self-spreading features to ravage corporate networks in just hours instead of weeks. The malware exploits weak administrative passwords and missing multi-factor authentication to quickly lock down victim data.
labcorp LabCorp Faces Shareholder Lawsuit Over Concealed Data Breaches A LabCorp shareholder files a derivative suit accusing the company's board of hiding two major data breaches from investors and the public. The legal action claims inadequate cybersecurity measures exposed millions of patient records.
xiaomi Xiaomi Smartphones Secretly Record User Browsing and App Activity Cybersecurity researchers discover that Xiaomi smartphones and browsers covertly track and transmit massive amounts of private user data to remote servers. The Chinese tech giant faces serious privacy accusations affecting millions of devices worldwide.
android New EventBot Malware Targets Android Banking and Crypto Apps A sophisticated new Android malware named EventBot steals passwords and two-factor codes from over 200 banking and cryptocurrency apps. The threat exploits accessibility features to quietly siphon funds and remains actively under development.
covid-19 Privacy Fears Spark Expert Exodus From European COVID-19 Tracing Project A major European initiative to create coronavirus contact-tracing apps faces a growing backlash from cybersecurity experts over centralized data concerns. Over 300 specialists warn the approach could lead to unacceptable government surveillance.