South Korea’s privacy watchdog has fined Google and Meta a combined 100 billion won ($72 million) for tracking consumers’ online behavior without their consent and using their data for targeted advertisements.
US Indicts Iranians Who Hacked Power Company, Women’s Shelter
The US Department of Justice announced an indictment Wednesday against three Iranian hackers who used ransomware to extort a battered women’s shelter and a power company.
Dig Security Banks Another $34 Million for Cloud Data Security
Just four months after emerging from stealth with $11 million in seed funding, Dig Security has banked another $34 million in venture capital funding as investors continue to flock to cloud data security startups.
Bishop Fox Releases Open Source Cloud Hacking Tool ‘CloudFox’
Cybersecurity firm Bishop Fox has announced the release of CloudFox, an open source tool designed to help find exploitable attack paths in cloud infrastructure.
The command line tool has been created for penetration testers and other offensive security professionals.
WordPress Sites Hacked via Zero-Day Vulnerability in WPGateway Plugin
Many WordPress sites are at risk of full compromise as attackers are actively exploiting a zero-day vulnerability in the WPGateway plugin, Defiant’s WordFence team warns.
A premium plugin for the WPGateway cloud service, the WPGateway plugin provides users with WordPress installation, backup, and cloning capabilities.
novoShield Emerges From Stealth With Mobile Phishing Protection App
Mobile phishing protection startup novoShield has emerged from stealth mode with an enterprise-grade iPhone protection application.
The new solution, novoShield says, was designed to protect both end-users and businesses from the increasing number of phishing attacks.
Google Improves Chrome Protections Against Use-After-Free Bug Exploitation
Google this week has shared more information on recently introduced technology meant to reduce the exploitability of use-after-free vulnerabilities in the Chrome browser.
Malware Infects Magento-Powered Stores via FishPig Distribution Server
For the past several weeks, Magento stores have been injected with malware via a supply chain attack that targeted the FishPig distribution server.
Specialized in Magento optimizations and Magento-WordPress integrations, FishPig offers various Magento extensions that have gathered over 200,000 downloads.
Passengers Exposed to Hacking via Vulnerabilities in Airplane Wi-Fi Devices
Researchers have discovered two potentially serious vulnerabilities in wireless LAN devices that they say are often used in airplanes.
