Bleeping Computer
The Norwegian National Cyber Security Centre (NCSC) recommends replacing SSLVPN/WebVPN solutions with alternatives due to the repeated exploitation of related vulnerabilities in edge network devices to breach corporate networks.
Bleeping Computer
Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor.
The Cyber Express
A ransomware attack has compromised MediSecure, a leading Australian script provider facilitating electronic prescribing and dispensing of prescriptions. The MediSecure
The Cyber Express
In response to heightened cyber threats targeting political candidates, election officials and civil society groups, the National Cyber Security Centre
The Record
The National Cyber Security Centre worked with the U.K.'s insurance industry on new guidelines for organizations facing ransomware attacks.
The Record
The Share and Defend system will provide a list of malicious domains to a range of U.K. communications providers so the domains can be added to blocklists.
Infosecurity News
The National Cyber Security Centre launches an opt-in Personal Internet Protection service to safeguard individuals from cyber threats during the upcoming election
Infosecurity News
NCSC CTO argues current market rewards prioritize cost over security, hindering the development of secure technology
The Record
The U.K. government has warned that the accounts of political candidates and election officials are “almost certainly attractive targets for cyber actors looking to carry out espionage operations.”
Infosecurity News
GCHQ chief warns China's cyber actions threaten global internet security, while Russia and Iran pose immediate risks
Infosecurity News
UK insurers and the National Cybersecurity Centre release new guidance to discourage ransomware payments by businesses
The Cyber Express
Hackers exploited an unpatched remote access server vulnerability in the Helsinki education division data breach to scour through records of
The Record
GCHQ Director Anne Keast-Butler warned at the CyberUK conference that the Kremlin’s partnership with criminal groups was contributing to cyberattacks as well as other operations.
The Hacker News
Fake Android apps mimicking popular platforms like Google & WhatsApp are stealing user data.
The Cyber Express
The personal data of an unspecified number of active UK military personnel had been compromised in a significant Ministry of
.png)
Cyber Security News
The weekly news summary keeps you up to date with what’s happening in cybersecurity, including developments, vulnerabilities, breaches, threats, and defensive strategies. Knowing about new cyber risks and attack vectors helps you put up safeguards and preventive measures as soon as possible to protect your systems. Remaining constantly aware gives you a holistic view of […]
Security Affairs
Government agencies from the US, Canada and the UK warn of Russian threat actors targeting critical infrastructure in North America and Europe
.webp)
Cyber Security News
The NCSC has issued a stark warning about a new wave of cyber threats from Russian-aligned groups targeting the UK's national infrastructure.
Infosecurity News
The US and its allies claim Russian hacktivists are disruptive operations in water, energy, food and agriculture sectors
Bleeping Computer
The US government is warning that pro-Russian hacktivists are seeking out and hacking into unsecured operational technology (OT) systems used to disrupt critical infrastructure operations.
Infosecurity News
The UK’s National Cyber Security Centre claims its AMS model will protect firms from state-backed mobile threats
Trend Micro
This blog entry aims to highlight the dangers of internet-facing routers and elaborate on Pawn Storm's exploitation of EdgeRouters, complementing the FBI's advisory from February 27, 2024.
Security Affairs
The UK National Cyber Security Centre (NCSC) orders smart device manufacturers to ban default passwords starting from April 29, 2024.
The Hacker News
The U.K. is the first country to ban default passwords on smart devices starting April 29, 2024. Manufacturers must provide unique passwords and secur
Infosecurity News
IoT manufacturers, retailers and importers must comply with new security legislation, the PSTI act, from today
The Cyber Express
The notorious NoName ransomware group this time has allegedly set its sights on Moldova, targeting key government websites in what
Infosecurity News
An advisory from Cisco Talos has highlighted a sophisticated cyber-espionage campaign targeting government networks globally
The Cyber Express
Networking giant Cisco warned that a group of state-sponsored hackers exploited zero-days in its firewall appliances to spy on government
Infosecurity News
One in five UK organizations have had corporate data exposed unwittingly by employees using generative AI
The Record
Sweden's NCSC will become part of the signals intelligence agency the Defence Radio Establishment (FRA). The restructuring will make the NCSC more like similar bodies in the U.K., Norway and Denmark.
Infosecurity News
The UK’s National Cyber Security Centre will see Richard Horne take over as its new boss in the autumn
CSO
According to the non-profit, the breach occurred in January 2024 when the nation-state threat actor conducted a reconnaissance of MITRE’s networks by exploiting one of its VPNs through two Ivanti Connect Secure zero-day vulnerabilities.
Security Affairs
Government agencies revealed that Akira ransomware has breached over 250 entities worldwide and received over $42 million in ransom payments.
Bleeping Computer
While ransomware attacks decreased after the LockBit and BlackCat disruptions, they have once again started to ramp up with other operations filling the void.
The Cyber Express
The Akira ransomware group has been identified as the culprit behind a series of cyberattacks targeting businesses and critical infrastructure
SecurityWeek
Akira ransomware has hit over 250 organizations worldwide and received over $42 million in ransom payments.
Infosecurity News
A joint advisory from Europol and US and Dutch government agencies estimated that Akira made around $42m in ransomware proceeds from March 2023 to January 2024
The Record
Richard Horne will be the U.K. National Cyber Security Centre's first permanent chief executive with any formal academic training in cybersecurity.
The Record
CERT-UA is attributing the surge to a group tracked as UAC-0184, which was also recently spotted targeting an unnamed Ukrainian entity in Finland.
Bleeping Computer
According to a joint advisory from the FBI, CISA, Europol's European Cybercrime Centre (EC3), and the Netherlands' National Cyber Security Centre (NCSC-NL), the Akira ransomware operation has breached the networks of over 250 organizations and raked in roughly $42 million in ransom payments.
The Record
The group’s large number of attacks shortly after emerging has led experts to believe it is made up of experienced ransomware actors.
DarkReading
"Kapeka" and "Fuxnext" are the latest examples of malware to emerge from the long-standing conflict between the two countries.
Cyber Security News
In an era where artificial intelligence (AI) systems are becoming increasingly integral to our daily lives, the National Security
Bleeping Computer
Ivanti has released security updates to fix 27 vulnerabilities in its Avalanche mobile device management (MDM) solution, two of them critical heap overflows that can be exploited for remote command execution.
The Record
The former leader of the United Kingdom’s National Cyber Security Centre (NCSC) has taken Britain's top diplomatic job in New Delhi.
The Record
Officials in Westminster are being urged to put more money behind operations to disrupt ransomware gangs in the wake of a growing number of attacks impacting a wide range of services.
Infosecurity News
Leicester City Council confirmed around 25 sensitive documents have been leaked online, including personal ID information, following claims by the Inc Ransom gang
The Record
Before Russia invaded Ukraine almost three years ago, a Ukrainian entrepreneur who goes by the alias Ted said he spent his time building tech companies in Ukraine and abroad. When Moscow launched its first missiles on Ukrainian cities, Ted and other local techies joined a group called the IT Army, crowdsourced by Ukraine’s Ministry of Digital Transformation, to fight Russia in cyberspace using scrappy attacks like defacing websites and knocking them offline.
DarkReading
An economic success story in Asia, Vietnam is seeing more manufacturing and more business investment. But with that comes a significant uptick in cybercrime as well.
SecurityWeek
Avoiding burnout in cybersecurity: Mental well-being is essential but is under constant threat from stress in the cybersecurity profession.
The Record
The United Kingdom’s independent nuclear safety regulator says it will be prosecuting the company that oversees the Sellafield site over alleged lapses from 2019 to 2023.
SecurityWeek
The inside story on the destructive ransomware cyberattack that the British Library experienced in October 2023.
Bleeping Computer
The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service (NHS) of Scotland.
Security Affairs
UK, Australia and New Zealand are accusing China-linked threat actors of cyber operations against UK institutions and parliamentarians.
.webp)
Cyber Security News
New Zealand has joined the UK in a strong condemnation of the PRC for its state-backed cyber activities that targeted democratic institutions
SecurityWeek
CVE-2023-48788, a critical SQL injection vulnerability in Fortinet’s FortiClient EMS product, is being exploited in the wild.
SecurityWeek
Australia and New Zealand support the UK in condemning Chinese hackers for targeting UK institutions and parliamentarians.
CSO
The UK has similarly linked a Chinese state-affiliated entity to the compromise of the UK Electoral Commission’s systems between 2021 and 2022.
Security Affairs
U.S. CISA adds FortiClient EMS, Ivanti EPM CSA, Nice Linear eMerge E3-Series bugs to its Known Exploited Vulnerabilities catalog.
Bleeping Computer
The U.S. Treasury Department has sanctioned a Wuhan-based company used by the Chinese Ministry of State Security (MSS) as cover in attacks against U.S. critical infrastructure organizations.
Infosecurity News
The UK’s NCSC assesses that China-backed APT31 was “almost certainly” responsible for hacking the email accounts of UK parliamentarians
The Record
Deputy Prime Minister Oliver Dowden said the U.K. would not tolerate attacks against democratic institutions, and announced sanctions against two individuals and a front company linked to a hacking campaign targeting British parliamentarians.
SC Magazine
The U.S.-led global guidance notes the need for vulnerability management and data protection.
Security Affairs
Researchers released a PoC exploit for a critical flaw in Fortinet's FortiClient EMS software, which is actively exploited.
Security Affairs
Researchers released a PoC exploit for a critical flaw in Fortinet's FortiClient EMS software, which is actively exploited.
Bleeping Computer
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.
Infosecurity News
Thales latest report also suggests less than half of organizations have a formal ransomware response plan
The Cyber Express
Unknown hackers exploited vulnerabilities in Ivanti software to infiltrate the Cybersecurity and Infrastructure Security Agency (CISA), leading to a significant
HACKRead
NHS Dumfries and Galloway, a health board serving the southwestern region of Scotland, announced on Friday, March 15, 2024.
Infosecurity News
The UK’s National Cyber Security Centre wants to help organizations migrate their SCADA systems to the cloud
.webp)
Cyber Security News
NCSC has recently published guidelines designed to assist organizations in securely transitioning their SCADA systems to cloud environments.
SecurityWeek
UK’s NCSC releases security guidance for OT organizations considering migrating their SCADA solutions to the cloud.
Infosecurity News
Scottish NHS trust reveals patient and staff data may have been taken in security breach
The Record
“By responding to its attack in the transparent way that it has, the library has set a great example," said the NCSC's interim head in a letter published by the Guardian.
Cyber Security News
Hackers target and backdoor the digital locks to gain unauthorized access to sensitive information and resources.
The Record
NHS Dumfries and Galloway said there were “incursions into our systems” and warned “there is a risk that hackers have been able to acquire a significant quantity of data.”
DarkReading
CVE-2024-48788, like many other recent Fortinet flaws, will likely be an attractive target, especially for nation-state backed actors.
Infosecurity News
Fortinet has released a security update to fix a critical vulnerability in its endpoint management software
The Hacker News
Fortinet warns of a severe flaw in FortiClientEMS allowing attackers to execute code remotely. CVE-2023-48788 has a CVSS score of 9.3.
Bleeping Computer
Fortinet patched a critical vulnerability in its FortiClient Enterprise Management Server (EMS) software that can allow attackers to gain remote code execution (RCE) on vulnerable servers.
Security Affairs
Fortinet released security updates to address critical code execution vulnerabilities in FortiOS, FortiProxy, and FortiClientEMS.
CyberNews
The Health Service Executive (HSE) in Ireland accidentally exposed the private information of an estimated one million citizens in December 2021, a researcher has shared.
Infosecurity News
An influential parliamentary committee claims government short-termism is exposing the country to ransomware catastrophe
The Record
"It will take until at least the middle of the week before we will be able to start the recovery process, beginning with our most critical services," Leicester City Council says.
Bleeping Computer
We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government.
Bleeping Computer
We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government.
Ars Technica
Midnight Blizzard is now using stolen secrets in follow-on attacks against customers.
CyberNews
swiss ncsc releases in-depth analysis of Xplain attack
Security Affairs
The ransomware attack on Xplain impacted tens of thousands Federal government files, said National Cyber Security Centre (NCSC) of Switzerland
The Record
Hackers associated with the SVR are leveraging information from the November incident, which was discovered in January, to ”gain, or attempt to gain, unauthorized access” as part of a cyber-espionage campaign, Microsoft said.
Bleeping Computer
The National Cyber Security Centre (NCSC) of Switzerland has released a report on its analysis of a data breach following a ransomware attack on Xplain, disclosing that the incident impacted thousands of sensitive Federal government files.
HACKRead
In June 2023, Xplain, a Swiss IT services provider, fell victim to a cyberattack claimed by the Play ransomware group.
Infosecurity News
Sensitive data from Switzerland government departments were leaked by the Play ransomware group after an attack on Xplain, including classified documents and log in credentials
The Record
Switzerland’s National Cyber Security Centre (NCSC) published analysis of the data stolen during the attack last May — when hackers connected to the Play ransomware gang targeted IT vendor Xplain.
Infosecurity News
UK’s National Cyber Security Centre warns of dangers of insecure perimeter products
Infosecurity News
Government agencies from the Five Eyes coalition said that Ivanti’s own tools are not sufficient to detect compromise
Infosecurity News
The UK government provided a preview of its future Cybersecurity Governance Code of Practice, which aims to be the go-to cyber guideline for UK businesses
The Record
A new cybercrime group listed Ireland's Department of Foreign Affairs on its extortion site. The claim is bogus, according to the government.
DarkReading
CISA and its counterparts in the UK and other countries this week offered new guidance on how to deal with the threat actor's recent shift to cloud attacks.
Cyber Security News
The sophisticated tactics, techniques, and procedures (TTPs) employed by APT29, a notorious cyber espionage group linked to Russia's SVR intelligence services.
Loading more articles....