Holidays in chaos after global IT meltdown

Guardian confirms it was hit by ransomware attack

Media firm says personal data of UK staff members was accessed in ‘highly sophisticated’ cyber-attack last month

Hundreds of SugarCRM servers infected with critical in-the-wild exploit

Attackers are using the exploit to infect on-premises servers with web shell backdoors.

US bank Silvergate hit with $8bn in crypto withdrawals

The bank has had to sell $5.2bn in assets to cover two-thirds of its customers withdrawing their deposits.

First LastPass, now Slack and CircleCI. The hacks go on (and will likely worsen)

Don't expect victims to be forthcoming. Their alerts conceal more than they reveal.

Twitter's Latest Data Debacle, Explained

An ongoing data disaster at Twitter just got a whole lot worse.

LastPass admits attackers copied password vaults

Thankfully a well encrypted copy that could take an eon to crack, unless users practiced bad password hygiene

Crooks copy source code from Okta’s GitHub repository

The hack wraps up a year of bad security incidents for identity

Microsoft digital certificates have once again been abused to sign malware

Code-signing is supposed to make people safer. In this case, it made them less so.

WhatsApp data leaked: 500 million user records for sale online | Cybernews

Someone is allegedly selling up-to-date mobile phone numbers of nearly 500 million WhatsApp users. A data sample investigated by Cybernews likely confirms this to be true.

U.S Federal Network Hacked - APT Hackers Gained Access to the Domain Controller

A Potential cyber attack on the U.S Federal network where attackers compromised the organization’s DC and possibly deployed crypto Miners.

VMware warns of three critical flaws in remote-control tool

Anyone can pretend to be your Windows IT support and take command of staff devices

Microsoft patches security flaws under active exploit

Plus: Fixes from Intel, AMD, Citrix and more

Critical Citrix ADC and Gateway Auth Bypass Flaw Let Attackers Gain Unauthorized Access

Citrix published security patches to fix a critical authentication bypass issue in Citrix ADC and Citrix Gateway. It is advised that impacted users of Citrix ADC and Citrix Gateway install the...

New StrelaStealer malware steals your Outlook, Thunderbird accounts

A new information-stealing malware named 'StrelaStealer' is actively stealing email account credentials from Outlook and Thunderbird, two widely used email clients.

OPERA1ER hackers steal over $11 million from banks and telcos

A threat group that researchers call OPERA1ER has stolen at least $11 million from banks and telecommunication service providers in Africa using off-the-shelf hacking tools.

Everything you need to know about the OpenSSL 3.0.7 Patch (CVE-2022-3602 & CVE-2022-3786)

Discussion thread: https://updatedsecurity.com/topic/9-openssl-vulnerability-cve-2022-3602-cve-2022-3786/ Vulnerability Details From https://www.openssl.org/news/secadv/20221101.txt X.509 Email...

An Unofficial Patch Has Been Released for Actively Exploited Windows MoTW Zero-Day

There is an unofficial patch from 0patch for a Zero-Day flaw in Microsoft Windows that allows bypassing the MotW (Mark-of-the-Web) protections.