North Korean hackers from the Lazarus Group have allegedly stolen nearly $100 million from two cryptocurrency payment services, highlighting the ongoing threat posed by cybercriminals to the cryptocurrency industry.
NATO is investigating an alleged data-theft hack on its Communities of Interest (COI) Cooperation Portal by a hacktivist group called SiegedSec, which claims to have exfiltrated sensitive information from the portal, including names, company affiliations, business emails, addresses, and photos from 31 NATO member nations, in protest of NATO member countries’ attacks on human rights.
Security researchers have discovered two high-severity vulnerabilities in the OverlayFS module of Ubuntu Linux, allowing attackers to execute code with root privileges on approximately 40% of Ubuntu Linux cloud workloads.
Vitalii Chychasov, a Ukrainian man, has pleaded guilty to charges related to his role as an administrator of the cybercrime marketplace SSNDOB, while another administrator, Sergey Pugach, was also arrested.
Porsche’s website and GraphQL API were found to have a security vulnerability that allowed for data exfiltration through a Cross-Site Scripting (XSS) attack.
Maximus Inc., a government services provider, has been targeted by the Clop ransomware group, resulting in the compromise of personal information belonging to as many as 11 million people.
