Nancy

The popular budget airliner, Easy Jet, has announced they have been the victim of a major cyberattack. The data breach has exposed the details of around 9 million customers. What We Know On May 19, 2020, EasyJet plc released a statement online announcing " has been the target of an attack from a highly sophisticated source". The…

Attacks against high ranking employees of organizations, also known as whaling phishing, remains a persistent threat in 2020. Typically, senior-level employees have greater decision-making privileges and can take action without seeking permission. This makes higher-ups a potentially lucrative target for cybercriminals who can successfully execute…

Apple and Google, the two tech giants normally in competition with each other, have teamed up in the fight against Coronavirus. They are working to develop a contract tracing tool that will alert users when they have come into contact with someone infected with COVID-19. Infection is determined by users testing positive and reporting this. The…

Here on this website, I have shared the stories of many great hackers and IT Security Professionals, as well as those aspiring to make it in the field. I believe these stories of dedication to the craft of hacking and the passion that often accompanies it are valuable in encouraging the next generation of hackers. Now I'd like to share my…

There's a new phishing scam circulating in which the victim receives an email claiming that undelivered mail is being held for them on their Outlook Web Mail service. The email will have the subject line "Notifications | undelivered emails to your inbox". The email body contains a table of undelivered emails including the date of the…

An anonymous hacker going by the alias "SandboxEscaper" has published 3 Microsoft exploits in the last 24 hours. The bug hunter has published a total of 7 exploits in the last year. On Wednesday 22 May, SandboxEscaper published details of a Windows 10 zero-day exploit that allows for local privilege escalation (LPE).  LPE vulnerabilities can be…

Popular Chinese messaging and social media app, WeChat, is a hotspot for scammers looking to exploit victims out of money. There are different types of scams perpetrated on the WeChat platform such as romance scams, job scams, and even a scam that results in physical mugging. About WeChat WeChat is a Chinese messaging and social media app that…

Google is now granting users more control over their location data by introducing an auto-delete feature. This privacy feature, if enabled, allows users to automatically delete their location history as well as web and app activity data at regular time intervals. Although most of us use Google products and enjoy them, users have long been…

An unprotected Elasticsearch server was left exposed to the internet and has leaked the personal information of approximately 85% of Panama's citizens. The Elasticsearch server was connected to the internet, with no password or firewall and was hosted on Amazon AWS. The server was discovered by Security Discovery researcher Bob Diachenko who…

In a press release dated on Thursday 9  May, the US Department of Justice announced charges against 9 people for stealing approximately $2.5 million in cryptocurrency through sim swapping hacks. Of the nine individuals, six of them (five Americans and one Irish national) are members of a hacking group called "The Community". The other three…