The Breach News

Google Releases Exploit Code Posing Threat to Millions of Chromium Users

Exploit Code Released for Unpatched Chromium Vulnerability On Wednesday, Google disclosed exploit code for an unresolved vulnerability within its Chromium browser framework, impacting millions of users across popular browsers including Chrome and Microsoft Edge. This vulnerability, which has persisted for 29 months without a patch, poses significant risks for users…

Read MoreGoogle Releases Exploit Code Posing Threat to Millions of Chromium Users

Two Cybersecurity Experts Sentenced to Four Years for Involvement in BlackCat Ransomware Attacks

The U.S. Department of Justice has announced the sentencing of two cybersecurity professionals, Ryan Goldberg from Georgia and Kevin Martin from Texas, to four years in federal prison each for their involvement in facilitating BlackCat ransomware attacks that occurred throughout 2023. Their actions targeted numerous victims across the United States…

Read MoreTwo Cybersecurity Experts Sentenced to Four Years for Involvement in BlackCat Ransomware Attacks

NetCAT: New Exploit Enables Remote Data Theft from Intel CPUs

Recent research has unveiled a new side-channel vulnerability in Intel processors that allows remote exploitation without the need for malware or physical access to the targeted machine. This vulnerability, referred to as **NetCAT** (Network Cache ATtack), poses a significant risk by potentially enabling cyber attackers to extract sensitive information, such…

Read MoreNetCAT: New Exploit Enables Remote Data Theft from Intel CPUs

New York Officer Injured at Boxing Match, Prompting Madison Square Garden to Ban His Attorney

Sure! Here’s a rewritten version of the content: Prominent Attorney Barred from Madison Square Garden Following Legal Dispute Involving NYPD Officer In a noteworthy development, attorney John Scola has been banned from accessing Madison Square Garden and several other venues owned by James Dolan, a notable figure in the entertainment…

Read MoreNew York Officer Injured at Boxing Match, Prompting Madison Square Garden to Ban His Attorney

China-Linked Hackers Attack Asian Governments, NATO Members, Journalists, and Activists

Recent cybersecurity research has unveiled a sophisticated espionage operation linked to China, with its sights set on government and defense sectors across South, East, and Southeast Asia, as well as a NATO-affiliated European nation. Trend Micro has identified this malicious activity under the interim designation SHADOW-EARTH-053. Analysts believe this group…

Read MoreChina-Linked Hackers Attack Asian Governments, NATO Members, Journalists, and Activists

125 New Vulnerabilities Discovered in Routers and NAS Devices from Leading Brands

In an era marked by rapid growth in connected consumer electronics and the Internet of Things (IoT), questions about the security of these devices have become increasingly pressing. With billions of gadgets—ranging from coffee makers to smart locks—connected to the internet, the vulnerabilities these systems present are drawing the attention…

Read More125 New Vulnerabilities Discovered in Routers and NAS Devices from Leading Brands

Report Reveals Data Brokers and AI Companies’ Opt-Out Forms Are Designed to Fail

Data Privacy Concerns Highlighted in Recent Research on Major Tech Firms Recent investigative findings from EPIC (Electronic Privacy Information Center) reveal significant shortcomings in the opt-out processes of prominent technology companies, raising alarms about consumer privacy rights. EPIC’s researchers discovered that platforms including Meta, X (formerly Twitter), OpenAI, and Tinder…

Read MoreReport Reveals Data Brokers and AI Companies’ Opt-Out Forms Are Designed to Fail

Cybercrime Groups Exploiting Vishing and SSO Abuse for Swift SaaS Extortion Attacks

Recent cybersecurity intelligence has uncovered the operations of two malicious groups identified as Cordial Spider and Snarky Spider. These groups are reportedly engaged in rapid, high-impact cyberattacks, predominantly targeting Software as a Service (SaaS) platforms while minimizing their digital footprints. The Cordial Spider group, also known by aliases such as…

Read MoreCybercrime Groups Exploiting Vishing and SSO Abuse for Swift SaaS Extortion Attacks

Alert: Researcher Uncovers phpMyAdmin Zero-Day Vulnerability Impacting All Versions

A cybersecurity research effort has revealed an unpatched zero-day vulnerability in phpMyAdmin, a widely-utilized application for managing MySQL and MariaDB databases. This tool is integral for many websites built on content management systems such as WordPress and Joomla. The vulnerability was identified by security researcher Manuel Garcia Cardenas, who characterized…

Read MoreAlert: Researcher Uncovers phpMyAdmin Zero-Day Vulnerability Impacting All Versions