leaks - DanielOnSecurity

2020-05-26 Tuesday digest

New jailbreak works on all recent iOS versions, new critical Android vulnerability named StrandHogg exploit the multitasking feature to camouflage as other apps, data breaches at PetFlow, Artsy, Lifebear, Indian and Thai records leaked online, and more...

2020-05-25 Monday digest

Netwalker ransomware targets city of Weiz, RCE in qmail, data breaches at Wishbone, Nulled.ch, Mathway, EduCBA, and more...

2020-05-19 Tuesday digest

Sodinokibi gang sold dirt on Trump to an anonymous buyer, Russian hackers tracked Ukrainian artillery units using Android implants, FBI criticizes Apple after finding links between Pensacola gunman and Al-Qaeda, and more...

2020-05-18 Monday digest

Sodinokibi gang threatens to leak dirt on Trump, massive fraud against state unemployment insurance programs, Edison Mail bug exposed users' emails to strangers, London police pauses facial recognition cameras because of face masks, and more...

2020-05-09 Saturday digest

Data breaches at MobiFriends, Digital Ocean, US Marshals service, Grubman Shire Meiselas & Sacks and many others... Drug maker Gilead targeted by Iran, rail vehicle manufacturer Stadler hit by cyber attack, and more...

2020-05-07 Thursday digest

Recent vulnerability in Saltstack causes havoc on the internet, endless stream of ransomware attacks and breaches, WordPress sites under attack, Germany issued arrest for the GRU Hacker over Bundestag hacks in 2015, 0-click RCE via MMS in Samsung phones, and much more...

2020-05-02 Saturday digest

Various malware being distributed over Google Play Store, MDM, pirated movies; zero-click bug impacting Apple devices discovered by Google Project Zero, Xiaomi devices leaking private data, state-sponsored attackers have breached high-profile Estonian mail addresses, and more...

2020-04-28 Tuesday digest

Symlink bug in 28 antivirus products could be used to delete system files, account takeover vulnerability in Microsoft Teams, Colorado hospital hit by ransomware, number plate cam site leaked 9M logs in UK, firewall zero-days used to steal credentials, and more...

2020-04-24 Friday digest

0-click RCEs on iOS via Mobilemail/Maild and Android 8-9 Bluetooth, pandemic related threats increased 30,000%, data breaches at Nintendo, NIH, WHO, Gates Foundation, and others, Facebook-NSO lawsuit reveals hundreds of WhatsApp attacks linked to one IP, and more...

2020-04-22 Wednesday digest

Millions of Facebook profiles sold on dark web, breaches at Webkinz, Vianet, coronavirus contact tracing apps under criticism from experts, Czech hospitals under attack, vulnerabilities in Chrome, OpenSSL, XILIX FPGA, Jitsi Meet on docker, SMBGhost RCE exploit demoed, and much more...

2020-04-19 Sunday digest

Aptoide suffers a data breach, Cognizant, Florida city, Olean city and MNP systems attacked with ransomware, TrickBot is the leading COVID-19 related malware, FBI says foreign states hacked into USA COVID-19 research centers, Github accounts stolen in phishing attacks, and more...

2020-04-14 Tuesday digest

Signal threatens to leave US if EARN IT act passes, Cloudflare drops reCAPTCHA, half a million Zoom accounts sold on hacker forums, and more COVID-19 themed scams and phishing attacks...

2020-04-11 Saturday digest

Data breaches at SCUF Gaming, San Francisco Airport, Maropost and others, surge in malicious emails and disinformation campaigns related to COVID-19, US wants to ban China Telecom, Zoom banned in more companies, Apple and Google to develop app for coronavirus contact tracking, and much more...

2020-04-08 Wednesday digest

NASA reports the attacks have doubled, scammers switch to gift cards, ransomware attacks on hospitals increasing, Microsoft buys corp.com domain, Taiwan government bars its agencies from using Zoom, and more...

2020-04-05 Sunday digest

Zoom still under fire for a bunch of security and privacy issues, Facebook tried to purchase a tool from NSO Group to monitor its users, criminals exploiting COVID-19, Apple bugs enabled a researcher to hijack iPhone cameras, and much more...

2020-04-01 Wednesday digest

Zoom under heavy criticism, Mariott International suffered another data breach, phishing attack for GoDaddy Employee Jeopardized Escrow.com, and more...

2020-03-30 Monday digest

Zeus Trojan is back, LightSpy spyware targets iPhone users in Hong Kong, Russia shut down credit card theft operation, Zoom under fire for privacy practices, and more...

2020-03-25 Wednesday digest

Data breaches at General Electric, PropTiger, Tamodo, TrickBot bypasses 2FA protection via screen recording, WHO being targeted by cyber criminals, Windows RCE zeroday under active exploit, critical bug in OpenWRT and more...

2020-03-23 Monday digest

Internet outages in Guinea, Russia FSB leak expose IoT "Cyber Weapon", critical vulnerability in Zyxel devices used to build a botnet, FBI warns of COVID-19 frauds, and more...

2020-03-18 Wednesday digest

Continuous flow of coronavirus-themed malware, Czech hospital and US Health department hit by cyberattack, Whisper app exposed locations, Slack bug allowed account takeover attacks, and more...

2020-03-12 Thursday digest

Coronavirus malware thrives, Chinese complain of CIA hacking, wormable Windows SMBv3 flaw, let's encrypt revoking 3M certificates, new CPU vulnerabilities, breaches at Virgin Media, T-Mobile, Koodo, J.Crew and more...

2020-03-02 Monday digest

Critical Tomcat bug impacts all versions from the last 13 years, Apple has blocked Clearview AI iPhone app, breaches at Walgreen, Decathlon, Kenneth Cole Fashion, and more...

2020-02-25 Tuesday digest

German PayPal users notified of unauthorized transactions, new critical RCE bug in OpenSMTP, Zyxel and Chrome zero-days fixed, whatsapp private groups indexed by search engines, 850k users data leak at Slickwraps, Russia blamed for defacement of Georgian websites, and more...

2020-02-20 Thursday digest

Microsoft Defender available for Linux, 10 million MGM hotel guests data leaked, hackers were inside Citrix for five months, more WordPress vulnerabilities, and more