The exposed data includes personal information of over 533 million Facebook users from 106 countries, including over 32 million records on users in the US, 11 million on users in the UK, and 6 million on users in India. It includes their phone numbers, Facebook IDs, full names, locations, birthdates, bios, and - in some cases - email addresses.
Researchers found an active campaign in the wild delivering malicious Call of Duty: Warzone cheats.The security team at Activision has discovered a new malware campaign actively targeting gamers.
A serious XSS vulnerability existed in the WordPress search plugin Ivory Search. Exploiting the bug could let an adversary execute malicious code on the target website. Given the number of active installations of the plugin, this now-patched vulnerability potentially risked over 60,000 websites.
A zero-click security vulnerability in Apple’s macOS Mail would allow a cyberattacker to add or modify any arbitrary file inside Mail’s sandbox environment, leading to a range of attack types.
Recently, 360 Security Center’s threat monitoring platform has detected an email phishing attack. This attack uses a secret-stealing Trojan called Poulight. The Poulight Trojan has been put into use since last year and has complete and powerful functions. This attack proved that it has begun to spread and use overseas.
An advanced cyberespionage campaign targeting government and military entities in Vietnam has been discovered that delivered a remote-access tool (RAT) for carrying out espionage operations, researchers said.
Data exposure is a significant, unaddressed problem for Europe’s top mobile providers and, by extension, more than 253 million customers who sign up for their services and share sensitive personal data, according to research by Tala Security.
The popular Twitch AdBlock extension has been removed from both Chrome Web Store and Firefox Addons site. Twitch AdBlock was the choice of extension among Twitch users for restricting ads when using Twitch. Before the extension's removal, the ad blocker was last seen having over 150,000 users and 6 million views per day, according to its developer.
Mobile device-tracking by Apple and Google take center stage in a report revealing that, despite both allowing users to opt out of sharing telemetry data – they do anyway.“Both iOS and Google Android transmit telemetry, despite the user explicitly opting out of this,” wrote researcher Douglas Leith from Trinity College in Ireland, in a recently published academic report.
Tracking cookies have been a privacy menace for quite some time. While most web browsers of today offer anti-tracking features, the overall browser tracking protection strategy lacks significant impact. Either the web trackers continue to run or break website functionality when eliminated. DuckDuckGo, however, has come up with better tracking protection than previous strategies.
The recently patched vulnerabilities in Microsoft Exchange have sparked new interest among cybercriminals, who increased the volume of attacks focusing on this particular vector.
