IN THE NEWS

Late last year, security researchers made a startling discovery: Kremlin-backed disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online hucksters and website hackers.

Back in the 1980s, the online world looked nothing like today. Linking a computer to ARPAnet, the government-backed research network, required planning—not casual clicks.

VPNs are often seen as the web’s invisibility cloak. Businesses rely on them for secure remote connections, while individuals use them to keep browsing private—cementing their role as symbols of online safety and freedom. But is this true?

More wannabe cybercriminals are turning to user-friendly online tool kits designed to help them steal login credentials, passwords, credit card numbers and other sensitive data.

Harrods’ mantra of “Everything’s Possible” faced a test on May 1st, when a cyber-attack attempt led the retailer to limit online access across its locations.

Hackread reports that newly identified threat operation Hazy Hawk has been exploiting DNS misconfigurations and deserted cloud resources to take over domains belonging to the Centers for Disease Control, the state of Alabama, the Australian Department of Health, the University of California at Berkeley, and the University College London, as well as Deloitte and PwC, since December 2023.

A hacking group with apparent access to a commercial domain name system archiving service is on the hunt for misconfigured records of high-reputation organizations in order to blast out links to scammy domains.

Since December 2023, the threat group has preyed on domains belonging to the US Centers for Disease Control and Prevention (CDC) and numerous other reputable organizations worldwide to redirect users to malicious sites.

Infoblox says crooks are finding and taking over ‘dangling’ CNAME records for scams. Threat actors continue to find ways of hijacking domains thanks to poor DNS record-keeping and misconfigurations by administrators, a hole that CSOs have to plug or risk financial or reputational damage to their organizations.

After a long hiatus, the federal agency updated Domain Name Sever (DNS) recommendations around protecting the network and the DNS protocol itself, say Scott Harrell and Mukesh Gupta of Infoblox.