Custom search

Amazon One Enterprise Enables Palm-Based Access to Physical Locations, Digital Assets

AWS announces Amazon One Enterprise, a palm-based identity service that enables users to easily access physical locations and digital assets.

Ars Technica

Hackers spent 2+ years looting secrets of chipmaker NXP before being detected

Chipmaker claims breach had no "material adverse effect."

The Hacker News

Transform Your Data Security Posture – Learn from SoFi's DSPM Success

This webinar showcases SoFi's success in implementing DSPM and promises real-life case studies and practical strategies for data security.

The Hacker News

Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

Researchers reveal a critical design flaw in Google Workspace, dubbed "DeleFriend," that could allow attackers to steal emails, exfiltrate data.

Security Affairs

Daixin Team group claimed the hack of North Texas Municipal Water District

The Daixin Team group claims to have hacked the North Texas Municipal Water District (US) and threatened to leak the stolen data.

Infosecurity News

5 hours ago

Cybercriminals Hesitant About Using Generative AI

An analysis of dark web forums revealed many threat actors are skeptical about using tools like ChatGPT to launch attacks

The Hacker News

How Hackers Phish for Your Users' Credentials and Sell Them

Did you know that a single stolen credential can jeopardize your entire network? Protect your organization against sophisticated phishing attacks. Lea

Cyber Security News

Ardent Health Ransomware Attack: Multiple Hospitals Affected

Ardent Health services were affected by an information Technology cybersecurity incident which has been determined as a Ransomware Attack.

Infosecurity News

Americans Receive Two Billion Spam Calls Per Month

Truecaller warns malicious calls make up the majority

The Hacker News

Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine

A coordinated effort led to the arrest of key figures in Ukraine linked to various ransomware attacks, involving LockerGoga, MegaCortex, and Dharma.

The Hacker News

Stop Identity Attacks: Discover the Key to Early Threat Detection

Account takeover: the new favorite tool for hackers. Discover the latest strategies in identity protection and why traditional methods might not be en

The Hacker News

Hackers Can Exploit 'Forced Authentication' to Steal Windows NTLM Tokens

A vulnerability in Microsoft Access that could be exploited to leak a Windows user’s NTLM tokens.

Infosecurity News

CISA Warns Congress on Chemical Industry Terror Attacks

Security agency wants to resume critical CFATS inspections

SecurityWeek

Ardent Hospitals Diverting Patients Following Ransomware Attack

Ransomware attack forces Ardent hospitals to shut down systems, impacting clinical and financial operations.

Infosecurity News

Ukraine Police Dismantle Major Ransomware Group

Affiliate deployed LockerGoga, MegaCortex, Hive and Dharma

Bleeping Computer

Police dismantle ransomware group behind attacks in 71 countries

In cooperation with Europol and Eurojust, law enforcement agencies from seven nations have arrested in Ukraine the core members of a ransomware group linked to attacks against organizations in 71 countries.

Security Affairs

Healthcare provider Ardent Health Services disclosed a ransomware attack

The US Healthcare provider Ardent Health Services disclosed that it was the victim of a ransomware attack last week.

Cyber Security News

OwnCloud Critical Vulnerability Exploited in the Wild

Owncloud was discovered with a new vulnerability which was associated with the exposure of sensitive information.

Cyber Security News

CISA & NCSC Discloses Guidelines for Secure AI System Development

New security flaws in AI systems must be taken into account in addition to the usual cyber security risks,security is frequently neglected.

CSO

10 hours ago

North Korean hackers mix code from proven malware campaigns to avoid detection

Threat actors are combining RustBucket loader with KandyKorn payload to effect an evasive and persistent RAT attack.

The Hacker News

12 hours ago

N. Korean Hackers 'Mixing' macOS Malware Tactics to Evade Detection

Lazarus Group's evolving cyber tactics target macOS systems by combining elements from multiple malware campaigns for better effectiveness and to avoi

The Record

17 hours ago

High-profile ransomware gang suspects arrested in Ukraine

The international operation, centered on Kyiv, essentially neutralized a group known for deploying variants of LockerGoga, MegaCortex, Hive and Dharma ransomware, authorities said.

The Record

17 hours ago

English council spent £1.1 million recovering from ransomware attack

Gloucester's local government released the expense figures related to a 2021 attack. The council had received a formal reprimand from the Information Commissioner's Office in August.

Bleeping Computer

20 hours ago

Microsoft deprecates Defender Application Guard for Office

Microsoft is deprecating Defender Application Guard for Office and the Windows Security Isolation APIs, and it recommends Defender for Endpoint attack surface reduction rules, Protected View, and Windows Defender Application Control as an alternative.

DarkReading

20 hours ago

General Electric, DARPA Hack Claims Raise National Security Concerns

Weapons systems data, AI research, and other classified information may be up for sale, not to mention access to other government agencies.

Ars Technica

20 hours ago

New “Stable Video Diffusion” AI model can animate any still image

Given GPU and patience, SVD can turn any image into a 2-second video clip.

Bleeping Computer

Ransomware attack on indie game maker wiped all player accounts

A ransomware attack on the "Ethyrial: Echoes of Yore" MMORPG last Friday destroyed 17,000 player accounts, deleting their in-game items and progress in the game.

Bleeping Computer

Healthcare giant Henry Schein hit twice by BlackCat ransomware

American healthcare company Henry Schein has reported a second cyberattack this month by the BlackCat/ALPHV ransomware gang, who also breached their network in October.

Ars Technica

Amazon’s $195 thin clients are repurposed Fire TV Cubes

Amazon Workspaces Thin Client is a Fire TV Cube with different software.

Latest Hacking News

Multiple Vulnerabilities Found In ownCloud File Sharing App

Numerous security vulnerabilities riddled the privacy of ownCloud users that the vendor patched recently. Exploiting these vulnerabilities could expose users’ passwords to potential adversaries. ownCloud Vulnerabilities Risked User Accounts According to the recent advisories, ownCloud addressed three

Security Affairs

Ukraine's intelligence service hacked Russia's Federal Air Transport Agency, Rosaviatsia

Ukraine's intelligence service announced the hack of the Russian Federal Air Transport Agency, 'Rosaviatsia.'

Bleeping Computer

22 hours ago

Ukraine says it hacked Russian aviation agency, leaks data

Ukraine's intelligence service, operating under the Defense Ministry, claims they hacked Russia's Federal Air Transport Agency, 'Rosaviatsia,' to expose a purported collapse of Russia's aviation sector.

The Hacker News

23 hours ago

How to Handle Retail SaaS Security on Cyber Monday

Cyber Monday Alert: $13.7 billion in spending today! Retailers, safeguard your SaaS apps to protect customer data.

Bleeping Computer

23 hours ago

Ardent hospital ERs disrupted in 6 states after ransomware attack

Ardent Health Services, a healthcare provider operating 30 hospitals across five U.S. states, disclosed today that its systems were hit by a ransomware attack on Thursday.

Infosecurity News

Cybersecurity Incident Hits Fidelity National Financial

The Alphv/BlackCat ransomware group has claimed responsibility for the attack

Latest Hacking News

Microsoft Defender Lures Researchers With Bug Bounty Program

The Redmond giant has introduced a dedicated bug bounty program for its Microsoft Defender security solution. Under this program, the tech giant aims to pay up to $20,000 as bounties to the security researchers and

Infosecurity News

SysJoker Malware: Hamas-Related Threat Expands With Rust Variant

CPR said the malware now uses OneDrive instead of Google Drive for storing dynamic C2 server URLs

Bleeping Computer

Slovenia's largest power provider HSE hit by ransomware attack

Slovenian power company Holding Slovenske Elektrarne (HSE) has suffered a ransomware attack that compromised its systems and encrypted files, yet the company says the incident did not disrupt electric power production.

Security Affairs

Iranian hacker group Cyber Av3ngers hacked the Municipal Water Authority of Aliquippa in Pennsylvania

Threat actors breached the Municipal Water Authority of Aliquippa in Pennsylvania and took control of a booster station

Latest Hacking News

Konni RAT Malware Campaign Spreads Via Malicious Word Files

Researchers caught a new campaign from the notorious Konni RAT malware exploiting malicious Word files. The threat actors distribute the malware via malicious macros embedded in Word files that infect the target systems. Konni RAT Malware

Bleeping Computer

Leveraging Wazuh to combat insider threats

Effective strategies for mitigating insider threats involve a combination of detective and preventive controls. Such controls are provided by the Wazuh SIEM and XDR platform.

Bleeping Computer

Google Drive users angry over losing months of stored data

Google Drive users are reporting that recent files stored in the cloud have suddenly disappeared, with the cloud service reverting to a storage snapshot as it was around April-May 2023.

SecurityWeek

Henry Schein Again Restoring Systems After Ransomware Group Causes More Disruption

Healthcare solutions giant Henry Schein is once again restoring systems after ransomware group claims it re-encrypted files.

Cyber Security News

Kansas Court Hack: Attackers Stole Sensitive Data From Systems

Kanas Supreme Court released the statement for the cyber incident that stole sensitive data from systems,the cybercriminals also stole data.

Cyber Security News

Broadcom Acquires VMware in a $61 Billion Deal

Broadcom has announced the triumphant acquisition of VMware, heralding a watershed moment in the sphere of infrastructure technology.

The Hacker News

Experts Uncover Passive Method to Extract Private RSA Keys from SSH Connections

The study highlights a vulnerability in SSH servers that allows passive attackers to obtain private RSA host keys.

SecurityWeek

US, UK Cybersecurity Agencies Publish AI Development Guidance

New guidance from US and UK cybersecurity agencies provides recommendations for secure AI system development.

SecurityWeek

Hacktivism: What’s in a Name… It May be More Than You Expect

Hacktivists should be treated as malicious hackers because the distance between hacking/activism, malevolence, and damage is too small and too vague.

Cyber Security News

Researcher Discloses OpenCart Vulnerability; Company Reacts Aggressively

A security researcher who goes under the name “0xbro” discovered a Static code injection vulnerability in OpenCart.

SecurityWeek

UK, Korea Warn of DPRK Supply Chain Attacks Involving Zero-Day Flaws

UK and Korea say DPRK state-sponsored hackers targeted governments, defense organizations via supply chain attacks.

Latest Hacking News

New Alerts Issued For CitrixBleed Flaw Following Active Exploits

Given the continuous rise in active exploitation of the now-known CitrixBleed flaw, governments issued new alerts to patch unpatched Netscaler systems. The recent alerts originate from the Government of Australia and the United States, alongside

SecurityWeek

Hackers Hijack Industrial Control System at US Water Utility

Municipal Water Authority of Aliquippa confirms that hackers took control of a booster station, but says no risk to water supply.

CyberScoop

Shadowy hacking group targeting Israel shows outsized capabilities

A sophisticated campaign that has targeted Israel for at least 8 years shows evidence of improving its capabilities.

Infosecurity News

KyberSwap Says Hackers Stole $55m in Crypto

Decentralized exchange offers $5m bounty

Infosecurity News

General Electric Investigates Alleged DARPA Breach

IntelBroker claims to be selling sensitive military data

Infosecurity News

UK Publishes First Guidelines on Safe AI Development

NCSC and CISA effort endorsed by 18 countries

CyberNews

Robeson Health Care admits data breach

A healthcare provider in the US has disclosed a data breach that may have exposed the sensitive data of tens of thousands.

Cyber Security News

New GPS Attacks Targeting Commercial Flights Navigation Systems

A disquieting wave of GPS spoofing attacks has swept through the Middle East, leaving commercial air crews grappling with an unforeseen menace.

CSO

GE investigates alleged data breach into confidential projects: Report

General Electric has confirmed that it has started an investigation into the data breach claims made by IntelBroker.

Cyber Security News

SysJoker Malware Attacking Windows, Linux and Mac Users Abusing OneDrive

SysJoker malware, a multi-platform backdoor with several variants for Windows, Linux, and Mac, has been observed being used by a Hamas-affiliated APT to target Israel. This malware was first identified by Intezer in 2021 and was recently used in targeted attacks. Checkpoint researchers disclosed the malware’s growth, variations in the intricacy of its execution flow, and […]

Security Affairs

The hack of MSP provider CTS potentially impacted hundreds of UK law firms

The cyber attack that hit the managed service provider (MSP) CTS potentially impacted hundreds in the United Kingdom.

Cyber Security News

Loader Malware Steal Sensitive System Data & Installs Other Malware

Loader malware emerges as a silent force, discreetly breaching unsuspecting systems and setting the stage for more sophisticated onslaughts.

Cyber Security News

IBM QRadar SIEM Bug Let Remote Attacker Trigger DoS

Multiple vulnerabilities have been found in IBM QRadar Wincollect which were associated with Denial of service that could allow a threat.

CyberSecurity Dive

The top cybersecurity events and conferences in 2024, according to security pros

Which security conferences are teams prioritizing in 2024? A new report reveals the 7 most popular events in the cybersecurity calendar.

SecurityWeek

Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons

The U.S. military is increasing use of artificial intelligence (AI) technology that will fundamentally alter the nature of war.

The Record

Multiple hospitals divert ambulances after ransomware attack on parent company

Ardent Health Services confirmed that it was responding to an incident. Hospitals in Texas, Idaho, Oklahoma, New Mexico and New Jersey reported problems over several days.

The Record

Notorious ransomware gang takes credit for cyberattack on Fidelity National Financial

The AlphV/Black Cat group claimed it breached Fidelity National Financial, a Fortune 500 provider of title insurance for property sales.

The Record

KyberSwap says $54.7 million of user cryptocurrency stolen during attack

The cryptocurrency platform KyberSwap said on Friday that around $54 million worth of cryptocurrency was stolen during a cyberattack announced earlier in the week.

Trend Micro

Cloud Security Predictions at AWS re:Invent 2023

Heading to AWS re:Invent 2023? Don’t miss out on our talk with Melinda Marks, ESG Practice Director for Cybersecurity, about cloud detection and response (CDR) and what’s trending in cloud security.

The Record

AI systems ‘subject to new types of vulnerabilities,’ British and US cyber agencies warn

British and U.S. cybersecurity authorities published guidance on Monday about how to develop artificial intelligence systems in a way that will minimize the risks they face from mischief-makers through to state-sponsored hackers.

The Record

Pennsylvania water authority hit with cyberattack allegedly tied to pro-Iran group

A water authority in Pennsylvania reportedly suffered a cyberattack, prompting officials to reassure people in the area that drinking water has not been affected by the incident.

The Record

Second top Ukrainian cyber official arrested amid corruption probe

Viktor Zhora, the ex-deputy head of Ukraine’s State Service for Special Communications and Information Protection (SSSCIP), is accused of facilitating a corruption scheme involving the procurement of software.

The Record

Ukraine claims cyber operation against Russian aviation agency

Ukraine's defense intelligence directorate reported that it had completed a “complex special operation in cyberspace” against Rosaviatsia, which oversees Russian civil aviation.

The Record

Suspected Hamas-linked hackers target Israel with new version of SysJoker malware

Cybersecurity companies Check Point and Intezer analyzed what appears to be a rewrite of backdoor malware that targeted Israel's education sector as early as 2021.

The Record

Tao Thomsen and the effort to back up what makes Ukraine uniquely Ukrainian

Since the beginning of Russia’s invasion of Ukraine, government officials, independent media organizations, and nonprofits have accused Russia of deliberately targeting churches and libraries and looting its most important museums.

Bleeping Computer

New Rust-based SysJoker backdoor linked to Hamas hackers

A new version of the multi-platform malware known as 'SysJoker' has been spotted, featuring a complete code rewrite in the Rust programming language.

Security Affairs

Security Affairs newsletter Round 447 by Pierluigi Paganini

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.

Bleeping Computer

General Electric investigates claims of cyber attack, data theft

General Electric is investigating claims that a threat actor breached the company's development environment in a cyberattack and leaked allegedly stolen data.

Security Affairs

Rhysida ransomware gang claimed China Energy hack

The Rhysida ransomware group claimed to have hacked the Chinese state-owned energy conglomerate China Energy Engineering Corporation.

Security Affairs

Lazarus is using a MagicLine4NX zero-day in supply chain attack

UK and South Korea agencies warn that North Korea-linked APT Lazarus is using a MagicLine4NX zero-day flaw in a supply-chain attack.

Bleeping Computer

Atomic Stealer malware strikes macOS via fake browser updates

The 'ClearFake' fake browser update campaign has expanded to macOS, targeting Apple computers with Atomic Stealer (AMOS) malware.

Cyber Security News

PolarDNS - A Free DNS Server For Vulnerability Research & Pentesting

Oryxlabs recently launched a free DNS server that is written in Python 3.x for vulnerability research and pentesting, dubbed as "PolarDNS."

Cyber Security News

Hackers Using Malicious Browser Extensions to Steal Facebook Business Accounts

Ducktail is a specifically designed information stealer that can have severe consequences, such as privacy breaches and identity theft.

The Hacker News

New 'HrServ.dll' Web Shell Detected in APT Attack Targeting Afghan Government

A new web shell called HrServ is part of a suspected APT attack in Afghanistan. HrServ can erase tracks and execute code in memory.

The Hacker News

Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data Breaches

ownCloud, an open-source file-sharing software, has disclosed 3 critical vulnerabilities.

Security Affairs

Hamas-linked APT uses Rust-based SysJoker backdoor against Israel

Researchers reported that a Hamas-linked APT group is using a rust-based SysJoker backdoor against Israeli entities.

Security Affairs

App used by hundreds of schools leaking children's data

Almost a million files with minors' data, including home addresses and photos were left open to anyone on the internet.

Security Affairs

Microsoft launched its new Microsoft Defender Bounty Program

Microsoft announced this week it will pay up to $20,000 for security vulnerabilities in its Defender products.

Bleeping Computer

Critical bug in ownCloud file sharing app exposes admin passwords

Open source file sharing software ownCloud is warning of three critical-severity security vulnerabilities, including one that can expose administrator passwords and mail server credentials.

Bleeping Computer

UK and South Korea: Hackers use zero-day in supply-chain attack

A joint advisory by the National Cyber Security Centre (NCSC) and Korea's National Intelligence Service (NIS) discloses a supply-chain attack executed by North Korean hackers involving the MagicLineThe National Cyber Security Centre (NCSC) and Korea's National Intelligence Service (NIS) warn that the North Korean Lazarus hacking grou

Bleeping Computer

Cyberattack on IT provider CTS impacts dozens of UK law firms

A cyberattack on CTS, a leading managed service provider (MSP) for law firms and other organizations in the UK legal sector, is behind a major outage impacting numerous law firms and home buyers in the country since Wednesday.

The Hacker News

Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale

Beware of Telekopye: The malicious Telegram bot used by the "Neanderthals" for large-scale phishing scams. It crafts phishing websites and emails.

Security Affairs

Exposed Kubernetes secrets can fuel supply chain attacks

Researchers warn of publicly exposed Kubernetes configuration secrets that could pose a threat of supply chain attack for organizations.

SecurityWeek

North Korean Software Supply Chain Attack Hits North America, Asia

North Korean hackers breached a Taiwanese company and used its systems to deliver malware to the US, Canada, Japan and Taiwan in a supply chain attack.

Infosecurity News

Cyber-Attack Disrupts UK Property Deals

A legal sector specialist infrastructure service provider has experienced a service outage that is impacting up to 200 conveyancing firms across the UK

CyberNews

Spotify’s new royalties scheme angers indie musicians

Tech has waded into another feud with artists – and for once, it’s not related to the use of AI. Musicians aren’t happy with Spotify’s new royalty scheme.

SecurityWeek

In Other News: National Laboratory Breach, Airplane GPS Attacks, Russia Accuses Allies of Hacking

Idaho National Laboratory breach, GPS attacks target airplanes, Russian accuses China and North Korea of hacking.

CyberNews

Apple sends experts to India after hacker threat warning

Tech giant to send team after local politicians received warnings on their iPhones that they’re being targeted by hackers.

The Hacker News

Tell Me Your Secrets Without Telling Me Your Secrets

GitGuardian launches "HasMySecretLeaked" service to help developers check if their sensitive information has been exposed on GitHub.

CyberNews

Pro-Russian disinfo campaign using Israel-Hamas war to stir chaos

A disinformation campaign, run or backed by Russia, has been using the Israel-Hamas war to try to create tensions elsewhere in the world.

The Hacker News

Hamas-Linked Cyberattacks Using Rust-Powered SysJoker Backdoor Against Israel

Researchers found a Rust version of SysJoker, a cross-platform backdoor used by Hamas-affiliated threat actor targeting Israel during ongoing conflict

Infosecurity News

Windows Hello Fingerprint Tech is Hacked

Blackwing researchers bypass the authentication system

Infosecurity News

Black Friday: Phishing Emails Soar 237%

Global brands impersonated to capitalize on busy shopping period

Infosecurity News

CISA Launches Project to Assess Effectiveness of Security Controls

Relaunched working group aims to tackle scourge of ransomware

Security Affairs

North Korea-linked Konni APT uses Russian-language documents

North Korea-linked Konni APT group used Russian-language Microsoft Word documents to deliver malware .............

Cyber Security News

APT Groups Using HrServ Web Shell to Hack Windows Systems

A HrServ web shell is a malicious script or program that enables remote administration of a server, allowing unauthorized access and control.

The Hacker News

Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories

Cybersecurity researchers have discovered publicly exposed Kubernetes configuration secrets, posing a risk of supply chain attacks.

The Record

Sacked Ukrainian cyber chief released on bail amid corruption probe

Ukraine's former cybersecurity chief was released from detention on Friday on $700,000 bail, according to Ukraine’s anti-corruption non-profit.

The Record

Potentially hundreds of UK law firms affected by cyberattack on IT provider CTS

The managed service provider CTS confirmed it had experienced a "cyber-incident." At least one report said the CitrixBleed bug was involved.

The Record

EU lawmakers criticize lack of action to tackle spyware abuses

The European Parliament adopted a resolution on Thursday criticizing the bloc’s executive for failing to bring forward any laws that would address spyware abuses.

The Record

Vanderbilt University Medical Center investigating cybersecurity incident

Vanderbilt University Medical Center said it is investigating a cybersecurity incident that led to the compromise of a database.

The Record

How one Russian nonprofit is trying to crack through the Kremlin’s censorship wall

A decade after its founding, the internet freedom organization Roskomsvoboda finds itself adjusting to harsh political and social realities within Russia, where a wartime regime continues to expand its authority over the internet.

The Record

North Korean supply chain attacks prompt joint warning from Seoul and London

The alert came as the two governments announced a new strategic cyber partnership “to disrupt and deter DPRK malicious cyber capabilities and activities that contribute to its WMD programs.”

The Record

Canada’s privacy watchdog investigating hack affecting military and RCMP personnel

Two contractors that provide relocation services for personnel informed the Canadian government of the breach in October.

Security Affairs

ClearFake campaign spreads macOS AMOS information stealer

Threat actors spread Atomic Stealer (AMOS) macOS information stealer via a bogus web browser update as part of ClearFake campaign.

Infosecurity News

InfectedSlurs Botnet Resurrects Mirai With Zero-Days

The investigation conducted by Akamai in late October 2023 revealed a specific HTTP exploit path

Infosecurity News

Rug Pull Schemes: Crypto Investor Losses Near $1M

New scam identified by Check Point Threat Intelligence Blockchain system

Security Affairs

Welltok data breach impacted 8.5 million patients in the U.S.

Healthcare services provider Welltok disclosed a data breach that impacted nearly 8.5 million patients in the U.S.

The Hacker News

Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks

Threat actor Konni, potentially tied to North Korea, deploys RAT in cyber espionage using Russian Word doc, exploiting WinRAR flaw.

CyberNews

MadCat ransom gang caught stealing from other criminals

New ransomware linked by security researchers to suspected scammers who pretended to sell passport details on the dark web.

CyberNews

Big Brothers Big Sisters of America targeted by cybercriminals

Cybercriminals have attacked the non-profit Big Brothers Big Sisters of America (BBBSA) stealing private user data from the organization's network.

Bleeping Computer

Black Friday 2023: Get 25% off the Zero2Automated malware analysis course

The popular Zero2Automated malware analysis and reverse-engineering course has a Black Friday 2023 through Cyber Monday sale, where you can get 25% off sitewide, including gift certificates and courses.

CyberNews

X bringing headlines back to news links

X owner Elon Musk has had a change of heart about the platform’s new headline policy after his own recent post didn’t make sense.

Cyber Security News

ClearFake a New Malware Attacking Mac users via fake browser updates

Atomic Stealer delivered a fake browser update chain tracked as ‘ClearFake’ to attack Mac users. Reported by Malwarebytes.

The Hacker News

Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails

New Malware Alert: WailingCrab, a sophisticated loader, is spreading via shipping-themed email messages.

Infosecurity News

North Korean Supply Chain Threat is Booming, UK and South Korea Warn

The UK’s NCSC and South Korea’s NIS issued a joint advisory describing some of North Korean hackers’ tactics in deploying supply chain attacks

Cyber Security News

Hackers using Weaponized Office Document to Exploit Windows Search RCE

A new attack chain campaign has been discovered which involves the exploitation of CVE-2023-36884 and CVE-2023-36584. CVE-2023-36884.

Security Affairs

North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software

North Korea-linked APT group Diamond Sleet is distributing a trojanized version of the CyberLink software in a supply chain attack.

Infosecurity News

University of Manchester CISO Speaks Out on Summer Cyber-Attack

University of Manchester CISO Heather Lowrie shared how the institution tackled a major data breach earlier in 2023

Cyber Security News

Firefox 120 Released With Security Updates: What’s New!

10 vulnerabilities are patched, including six 'High Severity' issues and two moderate and low severity issues are fixed.

SecurityWeek

Broadcom Planning to Complete Deal for $69 Billion Acquisition of VMWare After Regulators Give OK

Broadcom has cleared all regulatory hurdles and will complete its $69 billion acquisition of cloud technology company VMware.

Cyber Security News

North Korean Hackers Targeting CyberLink Users in Supply-chain Attack

Microsoft Threat Intelligence has uncovered a sophisticated supply chain attack orchestrated by the North Korean Hackers Diamond Sleet (ZINC)

The Hacker News

6 Steps to Accelerate Cybersecurity Incident Response

Effective Incident Response is more than just tools. It's a process. Explore the 6-step framework for successful IR.

The Hacker News

Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

Active malware campaign exploits zero-day vulnerabilities to create a Mirai-based DDoS botnet targeting routers and NVR devices.

CyberNews

Ingo Money claimed by Inc ransomware

Ingo Money suspected to have suffered a ransomware attack.

Cyber Security News

WailingCrab Malware Abuse Messaging Protocol for C2 Communications

WailingCrab's backdoor component has been in contact with the C2 since the middle of 2023 via the lightweight IoT message protocol MQTT.

Infosecurity News

US Seizes $9m From Pig Butchering Scammers

Crypto funds are traced back to dozens of victims

CyberNews

App used by hundreds of schools leaking children's data

Almost a million files with minors' data, including home addresses, photos, and information about the school they attend, were left open to anyone on the internet, posing a threat to children.

Infosecurity News

North Korea Blamed For CyberLink Supply Chain Attacks

Legitimate app installer modified with malicious code

CyberNews

City in Texas attacked by Akira ransomware gang

Nassau Bay has admitted to having suffered a ransomware attack, leaving more than 8,000 affected.

Infosecurity News

British Library: Ransomware Attack Led to Data Breach

Reports suggest employee data is up for sale

CyberNews

Tri Counties Bank breach exposes user financial data

Tri Counties Bank data breach expose customer financial details.

CyberNews

DDoS has evolved in 2023: longer, more frequent, and more sophisticated

Novel approaches allow cyberattackers to bypass geoblocking defenses, flooding servers more frequently and for longer.

CyberNews

Microsoft alerts CyberLink to North Korean threat

Microsoft has alerted software company CyberLink to the misuse of its software by North Korean group Diamond Sleet.

Security Affairs

Automotive parts giant AutoZone disclosed data breach after MOVEit hack

American retailer and distributor of automotive parts and accessories AutoZone discloses a data breach after a MOVEit attack

Cyber Security News

Hackers Exploiting Windows SmartScreen Zero-day Vulnerability to Deploy Remcos RAT

Microsoft released multiple security patches as part of their Patch Tuesday in which three zero-day vulnerabilities were also patched.

Cyber Security News

Bug Hunter GPT - AI Assistant that Replies for Hacking Questions

A 23-year-old hacker and CS student, Paolo Arnolfo (@sw33tLie) recently introduced "Bug Hunter GPT," an AI assistant.

Cyber Security News

Citrix Warns Admin to Kill Active or Persistent Sessions to Thwart Hackers

This vulnerability affected Citrix NetScaler Gateway and ADC devices. Following this, AssetNote published a proof-of-concept for this vulnerability named “CitrixBleed.”

The Hacker News

North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack

North Korean hackers, aka Diamond Sleet, spread a trojanized version of CyberLink's legit app.

CSO

Cyberattacks on Israel intensify as the war against Hamas rages: Check Point

Cyberattacks have grown in frequency as well as sophistication as the Israel-Hamas conflict intensifies.

CyberNews

Exclusive-OpenAI researchers warned board of AI breakthrough ahead of CEO ouster -sources

Ahead of OpenAI CEO Sam Altman’s firing, staff researchers sent the Board a letter warning of a powerful artificial intelligence discovery that could threaten humanity.

CyberNews

FEAM Aero reportedly hit by ransomware

Feam Aero, the global aircraft maintenance and technical services company, has been claimed by the LockBit ransomware gang.

The Record

Kansas Supreme Court: Hackers stole records, confidential files in October attack

Hackers who attacked the Kansas court system last month stole records and confidential files, according to the state's Supreme Court.

Trend Micro

ParaSiteSnatcher How Malicious Chrome Extensions Target Brazil

We detail the modular framework of malicious Chrome extensions that consist of various highly obfuscated components that leverage Google Chrome API to monitor, intercept, and exfiltrate victim data.

Security Affairs

New InfectedSlurs Mirai-based botnet exploits two zero-days

Mirai-based botnet InfectedSlurs has been spotted exploiting two zero-day RCE flaws to compromise routers and video recorder (NVR) devices.

CyberNews

Former OpenAI staffers slam CEO Sam Altman in new tell-all letter

Elon Musk is sent an anonymous letter dissing OpenAI’s Sam Altman - allegedly written by former OpenAI employees - and released hours before Altman is reinstated as CEO.

DarkReading

Fake Browser Updates Targeting Mac Systems With Infostealer

A pervasive ClearFake campaign targeting Windows systems with Atomic Stealer has expanded its social engineering scams to MacOS users, analysts warn.

Bleeping Computer

Kansas courts confirm data theft, ransom demand after cyberattack

The Kansas Judicial Branch has published an update on a cybersecurity incident it suffered last month, confirming that hackers stole sensitive files containing confidential information from its systems.

Ars Technica

Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet

Internet scans show 7,000 devices may be vulnerable. The true number could be higher.

Bleeping Computer

Windows Hello auth bypassed on Microsoft, Dell, Lenovo laptops

Security researchers bypassed Windows Hello fingerprint authentication on Dell Inspiron, Lenovo ThinkPad, and Microsoft Surface Pro X laptops in attacks exploiting security flaws found in the embedded fingerprint sensors.

Bleeping Computer

Welltok data breach exposes data of 8.5 million US patients

Healthcare SaaS provider Welltok is warning that a data breach exposed the personal data of nearly 8.5 million patients in the U.S. after a file transfer program used by the company was hacked in a data theft attack.

Bleeping Computer

Microsoft: Lazarus hackers breach CyberLink in supply chain attack

Microsoft says a North Korean hacking group has breached Taiwanese multimedia software company CyberLink and trojanized one of its installers to push malware in a supply chain attack targeting potential victims worldwide.

Bleeping Computer

New botnet malware exploits two zero-days to infect NVRs and routers

A new Mirai-based malware botnet named 'InfectedSlurs' has been exploiting two zero-day remote code execution (RCE) vulnerabilities to infect routers and video recorder (NVR) devices.

Infosecurity News

Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

Identified as CVE-2023-46604, the vulnerability has a CVSS score of 9.8

SecurityWeek

Researchers Discover Dangerous Exposure of Sensitive Kubernetes Secrets

Researchers say public exposure of Kubernetes configuration secrets should be considered a “ticking supply chain attack bomb.”

CSO

9 in 10 organizations have embraced zero-trust security globally

Nearly all of them still have a long way to go according to a new Cisco report.

DarkReading

Scattered Spider Hops Nimbly from Cloud to On-Prem in Complex Attack

The actor behind the high-profile MGM incident jumps across segmentations in under an hour, in a ransomware attack spanning Okta, Citrix, Azure, SharePoint, and more.

Infosecurity News

Employee Policy Violations Cause 26% of Cyber Incidents

Kaspersky said the figure closely rivals the 20% attributed to external hacking attempts

Bleeping Computer

The Black Friday 2023 Security, IT, VPN, & Antivirus Deals

Black Friday 2023 is here, and great deals are live in computer security, software, online courses, system admin services, antivirus, and VPN software.

Bleeping Computer

Open-source Blender project battling DDoS attacks since Saturday

Blender has confirmed that recent site outages have been caused by ongoing DDoS (distributed denial of service) attacks that started on Saturday.

The Hacker News

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

🔒 Multiple vulnerabilities found in laptop fingerprint sensors—allowing attackers to bypass Windows Hello authentication on Dell, Lenovo, and Microso

CyberScoop

Researchers want more detail on industrial control system alerts

A vulnerability in an industrial control system exploited by a state-backed hacking group illustrate problems in how vendors share data.

Security Affairs

SiegedSec hacktivist group hacked Idaho National Laboratory (INL)

The Idaho National Laboratory (INL) disclosed a data breach after the SiegedSec hacktivist group leaked stolen human resources data.

Infosecurity News

Why Ensuring Supply Chain Security in the Space Sector is Critical

Cybersecurity challenges facing the space sector are unique and securing the supply chain is a high priority

SecurityWeek

185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone

Car parts giant AutoZone says nearly 185,000 individuals were impacted by a data breach caused by the MOVEit hack.

CyberNews

Netflix renews Black Mirror for season 7, Brooker teases surprises

Black Mirror, the mind-bending sci-fi show created by Charlie Brooker, is coming back to Netflix for a seventh season. Moreover, there are rumors of upcoming surprises.

CyberNews

Thousands of exposed gas pumps invite cyberwarriors

Gas station pump controllers could become vital targets in a cyber war.

SecurityWeek

Windows Hello Fingerprint Authentication Bypassed on Popular Laptops

Researchers have tested the fingerprint sensors used for Windows Hello on three popular laptops and managed to bypass them.

SecurityWeek

Sam Altman is Back as OpenAI CEO Just Days After Being Removed, Along With a New Board

OpenAI reached an agreement for Sam Altman to return to OpenAI as CEO with a new initial board of directors, after he was fired a week prior.

SecurityWeek

Microsoft Offers Up to $20,000 for Vulnerabilities in Defender Products

Microsoft invites researchers to new bug bounty program focused on vulnerabilities in its Defender products.

The Hacker News

North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

North Korean hackers posing as recruiters infect software developers with cross-platform malware.

SecurityWeek

Humans Are Notoriously Bad at Assessing Risk

7 Steps Toward Objective Risk Management: How security teams can ensure their risk assessment, management, and mitigation is as objective as possible.

Infosecurity News

LockBit Affiliates Exploiting Citrix Bleed, Government Agencies Warn

Multiple threat actor groups are found to be exploiting a vulnerability in Citrix NetScaler gateway appliances, government agencies have warned

SecurityWeek

Kansas Officials Blame 5-Week Disruption of Court System on ‘Sophisticated Foreign Cyberattack’

Kansas court system said it would take several weeks to return to normal operations after a disruptive ransomware attack hit its systems.

Cyber Security News

Hackers Exploiting 0-day RCE Flaws in the Wild to Deploy Mirai Malware

The Mirai botnet is a malicious network of infected computers, routers, and IoT devices harnessed by cybercriminals to launch large-scale DDoS attacks.

The Hacker News

AI Solutions Are the New Shadow IT

AI Solutions Are the New Shadow IT - Ambitious Employees Tout New AI Tools, Ignore Serious SaaS Security Risks

SecurityWeek

Citrix, Gov Agencies Issue Fresh Warnings on CitrixBleed Vulnerability

Administrators are urged to patch the recent CitrixBleed NetScaler vulnerability as LockBit starts exploiting it.

Cyber Security News

Microsoft Defender Bounty Program: Rewards up to $20,000 USD

Microsoft introduced the Defender Bounty Program to enhance the security of customers' experience with rewards to researchers up to USD 20,000.

Security Affairs

CISA adds Looney Tunables Linux bug to its Known Exploited Vulnerabilities catalog

US CISA added Looney Tunables Linux vulnerability (tracked as CVE-2023-4911) to its Known Exploited Vulnerabilities catalog.

Infosecurity News

Microsoft Launches Defender Bug Bounty Program

Ethical hackers could win cash prizes of up to $20,000

Infosecurity News

Regulator Issues Privacy Ultimatum to UK’s Top Websites

ICO warns of enforcement action if they don’t give users fair choices

CyberNews