Latest Cybersecurity News and Articles

---

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the exposure of other users' personal information and chat titles in the upstart's ChatGPT service earlier this week. The glitch, which came to light on March 20, 2023, enabled certain users to view brief descriptions of other users' conversations from the chat history sidebar, prompting the company to

---

CISA Gets Proactive With New Pre-Ransomware Alerts

By taking immediate action when receiving an early warning, organizations can reduce potential data loss, avoid impact on operations, and reduce financial impact and other detrimental consequences.

---

Ransomware cases saw a 26% year-over-year decline

New research reveals a year of turbulence within the threat actor community due to international conflicts and enhanced attack methods.

---

Philadelphia warns citizens against tax-based phishing attacks

In response to the IRS warning against tax-based phishing attempts, the city of Philadelphia released cybersecurity recommendations to protect data.

---

Malicious JavaScript Injection Campaign Infects 51,000 Websites

Unit 42 researchers have been tracking a widespread malicious JavaScript (JS) injection campaign that redirects victims to malicious content such as adware and scam pages.

---

Researchers Uncover Chinese Nation State Hackers' Deceptive Attack Strategies

Attack chains mounted by the group commence with a spear-phishing email to deploy a wide range of tools for backdoor access, command-and-control (C2), and data exfiltration.

---

Fake IRS tax email delivers Emotet malware

In this case, Form W-9 is being used as a lure for people to download something sinister. The attachment, W-9 form.zip, is 709 KB in size. Opening the attachment reveals a Word document called W-9 form.doc that is over 500MB in size.

---

How one CEO founded a successful cyber security company

As we celebrate Women’s History Month, we’re recognizing the significant women who have played a role in shaping the field of cyber security. Learn about one of the amazing and trailblazing individuals who’s making cyber security history. In this exclusive CyberTalk.org interview, the CEO of Safe ID, Sandra Suarez, shares insights into her career path, […] The post How one CEO founded a successful cyber security company appeared first on CyberTalk.

---

Security leaders discuss CISA access management best practices

The Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA) has released access management best practices.

---

A look at a Magecart skimmer using the Hunter obfuscator

When a victim who is shopping at a compromised online store goes to the checkout page, there will be additional fields injected in the contact form that aren't normally there.

---

New legislation to enhance N.J. cybersecurity protections

Recently signed legislation will require state agencies and government contractors to report cybersecurity incidents within 72 hours of an incident.

---

Russian Hackers Deploy New AresLoader Malware via Decoy Installers

The malicious program appears to be developed and used by several members of a pro-Russia hacktivist group and is typically distributed inside decoy installers for legitimate software.

---

13 new members join CISA's Cybersecurity Advisory Committee

Earlier this week 13 new members were appointed to the Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Advisory Committee (CSAC).

---

GitHub.com rotates its exposed private SSH key

In a succinct blog post published today, GitHub acknowledged discovering this week that the RSA SSH private key for GitHub.com had been ephemerally exposed in a public GitHub repository.

---

City of Toronto and Financing Firm Investissement Québec Confirm Being Hit by Ransomware Attack

“Today, the City of Toronto has confirmed that unauthorized access to City data did occur through a third party vendor. The access is limited to files that were unable to be processed through the third-party secure file transfer system,” it said.

---

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and exfiltrate credentials and other valuable data. It has since been taken down, but not before attracting

---

High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian

Cisco’s Talos threat intelligence and research unit this week disclosed the details of two high-severity vulnerabilities discovered last year in WellinTech’s KingHistorian industrial data historian software.

---

SideCopy APT Targets India's Premier Defense Research Agency

SideCopy APT traditionally uses spear phishing as its method to gain initial entry. Emails in the latest campaign purportedly contain research material about military technologies sent as attachments.

---

User Data Leak at Korean Beauty Platform PowderRoom Impacts One Million People

The Cybernews research team discovered that the South Korean social platform, powderroom.co.kr – which markets itself as the nation’s biggest beauty community – was leaking the private data of a million users.

---

‘Badsecrets’ Open Source Tool Detects Secrets in Many Web Frameworks

This pure Python open-source library has a modular design and is currently offering ten modules, which are meant to be replacements for existing tools for finding known secrets.