The Breach News

WhatsApp Vulnerability Allows Users to Alter Group Chats for Spreading Misinformation

In a recent analysis conducted by security experts at Check Point, vulnerabilities within the widely-used messaging platform WhatsApp have been exposed. These security flaws allow malicious actors to intercept and alter messages in private and group chats, raising significant concerns about the integrity of communications on the platform. The researchers…

Read MoreWhatsApp Vulnerability Allows Users to Alter Group Chats for Spreading Misinformation

Global Operation Strikes a One-Two Blow to Disrupt Cybercrime ‘Assembly Line’

Major Disruption of Cybercrime Networks in Operation Endgame In a significant coordinated law enforcement action known as Operation Endgame, a collaboration between Microsoft, Europol, and various cybersecurity firms led to the dismantling of several malicious tools associated with organized crime. This operation leveraged the Racketeer Influenced and Corrupt Organizations (RICO)…

Read MoreGlobal Operation Strikes a One-Two Blow to Disrupt Cybercrime ‘Assembly Line’

New GhostShell Hacking Group Focuses on Ukraine’s Drone Defense Systems

A recent cyberattack campaign has emerged, specifically targeting Ukraine’s drone sector, including military units, supply chains, and volunteer organizations. This campaign has been linked to a newly identified group known as GhostShell, designated with the tracking label MB-0009. Researchers from Synaptic Systems report that this group has been operational since…

Read MoreNew GhostShell Hacking Group Focuses on Ukraine’s Drone Defense Systems

New Man-in-the-Disk Attack Puts Millions of Android Phones at Risk

Recent research from Check Point Software Technologies has unveiled a critical vulnerability within the Android operating system, identified as the *Man-in-the-Disk* attack. This method allows cybercriminals to surreptitiously compromise smartphones by injecting malicious applications or executing denial-of-service attacks. At the core of this vulnerability lies the way Android applications manage…

Read MoreNew Man-in-the-Disk Attack Puts Millions of Android Phones at Risk

Adobe Unveils Critical Security Updates for Four Major Software Programs

Adobe has announced the August 2018 security patch update, addressing a total of 11 vulnerabilities across its software products. Notably, two of these vulnerabilities, affecting Adobe Acrobat and Reader, have been classified as critical. The vulnerabilities that have been tackled in this update impact a range of Adobe products, including…

Read MoreAdobe Unveils Critical Security Updates for Four Major Software Programs

Microsoft Issues Patches for 60 Vulnerabilities, Including Two Currently Under Active Exploitation

Microsoft has recently released its Patch Tuesday update for August 2018, effectively addressing a total of 60 vulnerabilities across various platforms. Among these, 19 are marked as critical, raising alarms for IT departments globally. The updates affect key components such as Microsoft Windows, the Edge browser, Internet Explorer, and multiple…

Read MoreMicrosoft Issues Patches for 60 Vulnerabilities, Including Two Currently Under Active Exploitation

White House Significantly Reduces Deadline for Transitioning Away from Quantum-Vulnerable Cryptography

The White House has set a new, accelerated deadline for government agencies and organizations to implement quantum-resistant encryption systems designed to fend off threats posed by quantum computing technologies. This extensive move aims to safeguard valuable information accumulated over decades, encompassing sensitive data from militaries, banks, governments, and private citizens…

Read MoreWhite House Significantly Reduces Deadline for Transitioning Away from Quantum-Vulnerable Cryptography

New PHP Code Execution Vulnerability Threatens WordPress Sites

New Exploit Technique Uncovered, Leaving Websites Vulnerable to PHP Deserialization Attacks Security researcher Sam Thomas from Secarma has identified a significant exploitation method that raises alarms for PHP-based web applications. This newly discovered technique enhances the potential for hackers to exploit critical deserialization vulnerabilities, particularly in functions that were previously…

Read MoreNew PHP Code Execution Vulnerability Threatens WordPress Sites