Blog #Cybersecurity Trends

The Specops 2025 Breached Password Report reveals that over 1 billion passwords were stolen by malware in the past year, exposing persistent weaknesses in password security practices.

A security researcher, Jeremiah Fowler, discovered an unprotected database containing over 240,000 records belonging to Willow Pays, a US-based FinTech company specializing in bill payment services.

Hacker IntelBroker claims to have breached Hewlett Packard Enterprise (HPE), exposing sensitive data such as source code, certificates, and personal information (PII), now for sale on Breach Forums.

The Treasury Department has announced sanctions in response to a large-scale Chinese cyberattack targeting American telecommunications companies and breaching its own computer network.

Wolf Haldenstein Adler Freeman & Herz LLP has disclosed a data breach impacting over 3.4 million individuals in December 2023.

Cybercriminals are exploiting the California wildfires by registering fake domains and using them to target victims with phishing scams.

CVE-2024-44243 is a critical macOS vulnerability discovered by Microsoft Threat Intelligence that allows attackers to bypass Apple’s System Integrity Protection (SIP).

Adobe released patches addressing over a dozen security flaws across various products, including Photoshop, Illustrator for iPad, Animate, Substance 3D Stager, and Substance 3D Designer.

Cybercriminals are impersonating CrowdStrike recruiters to lure job seekers into downloading malware under the guise of job offers. Victims receive phishing emails directing them to a fake CrowdStrike website, where they are tricked into installing a malicious app that deploys XMRig, a cryptominer used to mine Monero cryptocurrency.

Researchers have uncovered new variants of the "Banshee macOS Stealer", which initially bypassed antivirus detection due to its use of a unique string encryption technique mimicking Apple’s XProtect antivirus engine.

A sophisticated credit card skimmer malware has been discovered targeting WordPress checkout pages by silently injecting malicious JavaScript into the WordPress database's wp_options table.

Medusind, a Florida-based medical and dental billing solutions provider, revealed a data breach affecting over 360,000 individuals, discovered on December 29, 2023.