GitHub now auto-blocks token and API key leaks for all repos


GitHub is now automatically blocking the leak of sensitive information like API keys and access tokens for all public code repositories. [...]


https://www.bleepingcomputer.com/news/se...all-repos/

New 'Greatness' service simplifies Microsoft 365 phishing attacks


The Phishing-as-a-Service (PhaaS) platform named 'Greatness' has seen a spike in activity as it targets organizations using Microsoft 365 in the United States, Canada, the U.K., Australia, and South Africa. [...]


https://www.bleepingcomputer.com/news/se...g-attacks/

Hacker ‘PlugwalkJoe’ pleads guilty to 2020 Twitter breach


Joseph James O'Connor, aka 'PlugwalkJoke,' has pleaded guilty to multiple cybercrime offenses, including SIM swapping attacks, cyberstalking, computer hacking, and hijacking high-profile accounts on Twitter and TikTok. [...]


https://www.bleepingcomputer.com/news/se...er-breach/

Top 5 Password Cracking Techniques Used by Hackers


In this article, we'll provide an overview of the biggest threats, password cracking, discuss the importance of strong passwords, and detail the top 5 password cracking techniques hackers use. [...]


https://www.bleepingcomputer.com/news/se...y-hackers/

Surprise! Coldplay lyrics hidden in Kingston SSD firmware


What has firmware got to do with pop rock, you ask? That's the question that crossed a security researcher's mind as he analyzed Kingston's firmware and stumbled upon the lyrics of a popular Coldplay song buried deep within it. [...]


https://www.bleepingcomputer.com/news/te...-firmware/

Cybersecurity firm Dragos discloses cybersecurity incident, extortion attempt


Industrial cybersecurity company Dragos today disclosed what it describes as a "cybersecurity event" after a known cybercrime gang attempted to breach its defenses and infiltrate the internal network to encrypt devices. [...]


https://www.bleepingcomputer.com/news/se...n-attempt/

New ransomware decryptor recovers data from partially encrypted files


Security researchers have shared a new Python-based ransomware recovery tool named 'White Phoenix' on GitHub, which lets victims of ransomware strains that use intermittent encryption recover their files for free. [...]


https://www.bleepingcomputer.com/news/se...ted-files/

Fake in-browser Windows updates push Aurora info-stealer malware


A recently spotted malvertising campaign tricked users with an in-browser Windows update simulation to deliver the Aurora information stealing malware. [...]


https://www.bleepingcomputer.com/news/se...r-malware/

YouTube tests blocking videos unless you disable ad blockers


YouTube is running an experiment asking some users to disable their ad blockers or pay for a premium subscription, or they will not be allowed to watch videos. [...]


https://www.bleepingcomputer.com/news/te...-blockers/

North Korean hackers breached major hospital in Seoul to steal data


The Korean National Police Agency (KNPA) warned that North Korean hackers had breached the network of one of the country's largest hospitals, Seoul National University Hospital (SNUH), to steal sensitive medical information and personal details. [...]


https://www.bleepingcomputer.com/news/se...teal-data/