Cybersecurity News - Page 205

Multiple users of Western Digital’s service My Cloud reported they couldn't access their cloud-hosted media repositories.

Researchers observed the attacks exploiting CVE-2021-35394 and CVE-2022-46169 in January and March 2023.

Active since November 2022, the service was used for malicious activities like hosting malware, botnet controllers, and carrying out DDoS attacks.

The watchdog alleges that ChatGPT has been illegally collecting user data and failing to protect kids.

The world in brief: Spyware vendors abuse zero-days in iOS and Android, thousands of companies targeted in 3CX supply chain attack, and more.

Google discovered two distinct campaigns in November and December 2022.

The trojanized 3CXDesktopApp is the first stage in a multi-stage attack chain that ultimately leads to the download of a infostealer DLL.

The company initially reported that the number of impacted customers was 328,000.

The researchers discovered an environment file hosted on the official Toyota Italy website.

The researchers said they didn’t observe the group exploiting zero-day vulnerabilities.