Tainted extension caught stealing passwords for Google, Microsoft, GitHub and Amazon accounts, but also Monero and Ethereum private keys.
Source: MEGA.nz Chrome extension caught stealing passwords, cryptocurrency private keys | ZDNet
Researchers at Lancaster University have used an active acoustic side-channel attack to steal smartphone passwords for the first time.
Source: Researchers Used Sonar Signal From a Smartphone Speaker to Steal Unlock Passwords
A new attack named VORACLE can recover HTTP traffic sent via encrypted VPN connections under certain conditions.
Source: VORACLE Attack Can Recover HTTP Data From VPN Connections
A massive trove of voter records containing personal information on millions of Texas residents has been found online. The data — a single file containing an estimated 14.8 million records — was left on an unsecured server without a password. Texas has 19.3 million registered voters. It’s the…
North Korea-linked Lazarus group used macOS malware in recent attack against a cryptocurrency exchange
Source: North Korean Hackers Hit Cryptocurrency Exchange with macOS Malware | SecurityWeek.Com