WhatsApp Phone Numbers Pop Up in Google Search Results — But is it a Bug?
A researcher found that phone numbers tied to WhatsApp accounts are indexed publicly on Google Search creating what he claims is a “privacy issue” for users.
Tycoon Ransomware Banks on Unusual Image File Tactic
To fly under the radar, the newly discovered ransomware is compiled into a Java image file format that’s rarely used by developers.
Trump, Biden Campaign Staffers Targeted By APT Phishing Emails
Google TAG researchers warn that APTs are targeting campaign staffers for both Donald Trump and Joe Biden with phishing emails.
Understanding the Payload-Less Email Attacks Evading Your Security Team
Business email compromise (BEC) attacks represent a small percentage of email attacks, but disproportionately represent the greatest financial risk.
Zoom Restricts End-to-End Encryption to Paid Users
The end-to-end encryption feature will not be offered to free users, Zoom’s CEO said, in case Zoom needed to comply with federal and local law enforcement.
U.S. Nuclear Contractor Hit with Maze Ransomware, Data Leaked
Westech International provides maintenance for the Minuteman III nuclear-missile program and runs programs for multiple branches of the military.
Google Faces Privacy Lawsuit Over Tracking Users in Incognito Mode
A $5 billion class-action lawsuit filed in a California federal court alleges that Google’s Chrome incognito mode collects browser data without people’s knowledge or consent.
ZLoader-Laced Emails Target Unemployed Victims
Researchers are warning of spear-phishing emails with CV lures that spread the ZLoader malware, which steals banking credentials from victims.
Sophisticated Info-Stealer Targets Air-Gapped Devices via USB
The newly discovered USBCulprit malware is part of the arsenal of an APT known as Cycldek, which targets government entities.
Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
An attack over the weekend unsuccessfully targeted 1.3 million WordPress websites, in attempts to download their configuration files and harvest database credentials.