Cybersecurity

Cooper Aerobics: Data Security Incident Raises Concerns of Personal Information Exposure

Cooper Aerobics, representing Cooper Clinic, P.A., Cooper Medical Imaging, LLP, and Cooper Aerobics Enterprises, Inc., collectively referred to as “Cooper Aerobics,” has revealed a concerning data security incident. On January 5, 2024, the organization notified individuals about where unauthorized access to its network, stemmed from a Cooper Aerobics data breach, potentially exposing personal information. Upon […]

Cybersecurity

FTC joins global data security and privacy investigative consortium

The Federal Trade Commission (FTC) announced Wednesday that it will participate in an “international multilateral arrangement” to lend intelligence and assist privacy investigators worldwide. The Global Cooperation Arrangement for Privacy Enforcement (Global CAPE), the nonbinding consortium the FTC is joining, will also help the FTC better monitor global commerce in real time, the agency said […]

Cybersecurity

PixieFail UEFI Flaws Expose Millions of Computers to RCE, DoS, and Data Theft

Jan 18, 2024NewsroomFirmware Security / Vulnerability Multiple security vulnerabilities have been disclosed in the TCP/IP network protocol stack of an open-source reference implementation of the Unified Extensible Firmware Interface (UEFI) specification used widely in modern computers. Collectively dubbed PixieFail by Quarkslab, the nine issues reside in the TianoCore EFI Development Kit II (EDK II) and […]

Cybersecurity

Iranian Hackers Masquerade as Journalists to Spy on Israel-Hamas War Experts

Jan 18, 2024NewsroomCyber Espionage / Threat Intelligence High-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the U.K., and the U.S. have been targeted by an Iranian cyber espionage group called Mind Sandstorm since November 2023. The threat actor “used bespoke phishing lures in an attempt to […]

Cybersecurity

Android-based PAX POS vulnerabilities (Part 1) – STM Cyber Blog

Banking companies worldwide are finally shifting away from custom-made Point of Sale (POS) devices towards the wildly adopted and battle-tested Android operating system. No more obscure terminals; the era of giant, colorful touchscreens is here! While Android is a secure, hardened OS, implementing and integrating your own features with custom hardware requires a lot of […]