In its biggest patch Tuesday security update ever, Microsoft released its June 2020 Patch update to fix a total of 129 newly discovered CVEs (Common Vulnerabilities and Exposures). Despite its biggest patch release, none of the vulnerabilities have been exploited in the wild before Microsoft release...

US aerospace services provider VT San Antonio Aerospace was targeted by the Maze Ransomware gang in March 2020. 1.5 TB of unencrypted files and sensitive data was reportedly stolen and now available on public domain in a massive data breach which was discovered on Jun 5.  The stolen data incl...

In a massive attack on WordPress sites hackers tried to download configuration files by attacking old vulnerabilities in unpatched plugins to steal database credentials. To take over databases, old exploits were used to download or export wp-config.php files from unpatched websites, extract database...

According to security researchers Noam Rotem and Ran Locar from vpnMentor approximately 7.26 million records were exposed through Amazon web services S3 storage bucket. The breach occurred at one of the e-governance websites https://cscbhim.in developed for the Common Service Cen...

US agency NSA issued a warning on Thursday that a Russian hacker group known as Sandworm is exploiting vulnerable email servers with a vulnerability in Exim. Exim is mail transfer agent common on Unix-based operating systems, such as Linux. The vulnerability allows an attacker to gain the ability to...

A new flaw called Thunderspy was found by Security researcher Björn Ruytenberg in the security protocols of Intel’s Thunderbolt ports.  This can allow the hacker to bypass the login screen and its hard disk encryption to gain full access of Windows or Linux-based computers. The Thunderbolt port ...

Malware known as Mandrake, was detected earlier this year. It has been around since 2016 infecting tens of thousands of users. According to a report by Bitdefender- A newly uncovered strain of Android spyware lurked on the Google Play Store disguised as cryptocurrency wallet Coinbase among other thi...

Popular online educational platform Unacademy, with a user base of 14,000 teachers, a million video lessons, and 20 million registered learners is hacked. Database including usernames, emails addresses, passwords, date joined, last login date, first and last names, account profile and account statu...

Amidst Covid-19 pandemic various organizations and universities are using learning management systems (LMS) to manage online courses, host student resources, issue and mark assignments, online registration, assessments, collaborative technologies, payment processing, and facilita...

The vulnerability, impacting both desktop and web versions allowed the attacker to access all the data- confidential information, business plans etc. from organization’s Teams accounts by sending a malicious link to an innocent-looking image.  Omer Tsarfati from cyberArk’s said, “Even if ...