Latest Cybersecurity News and Articles

---

BidenCash Market Leaks Two Million Credit Cards in Birthday Blitz

The one-year-old leaked dataset contains card information from all over the world, with a significant number of them issued in the United States, China, Mexico, India, Canada, and the UK.

---

Aruba Networks fixes six critical vulnerabilities in ArubaOS

The critical flaws addressed by Aruba this time can be separated into two categories: command injection flaws and stack-based buffer overflow problems in the PAPI protocol (Aruba Networks access point management protocol).

---

Record Number of Mobile Phishing Attacks in 2022

Lookout also investigated the evolution of mobile phishing on professional devices, and since 2021 mobile phishing encounter rates have increased by roughly 10% for enterprise phones.

---

Canadian book giant says employee data was stolen during ransomware attack

In an undated followup FAQ, Indigo now says employee data was involved in the attack. The Toronto-based company did not respond to requests for comment about how many people were affected.

---

Pierce Transit and City of Lakewood Investigating Potential Ransomware Attacks

A Pierce Transit spokesperson told KOMO News in a statement that on Feb. 14, the agency "experienced a ransomware incident that temporarily disrupted some agency systems.

---

Research finds UEFI bootkit capable of bypassing security measures

New research shows that a unified extensive firmware interface (UEFI) bootkit is capable of bypassing security features despite system updates. 

---

Blackfly: Espionage Group Targets Materials Technology

The Blackfly espionage group (aka APT41, Winnti Group, Bronze Atlas) has continued to mount attacks against targets in Asia and recently targeted two subsidiaries of an Asian conglomerate, likely attempting to steal intellectual property

---

Cambodia-Based "Sour Grapes" Pig Butchering Scam Targets Southeast Asia

The teams running these scams include a young man or woman acting as the face of the scam, keyboarders who keep the victim engaged, and a team generating and repurposing media content with fabricated proof of their backstory.

---

1 year of war: From weaponizing Ukraine to Russia's outsourced cyber war

In Episode 14 of the Cybersecurity & Geopolitical Podcast from Security magazine, hosts Ian Thornton-Trump and Philip Ingram assess the Russia-Ukraine conflict.

---

R3NIN Sniffer Malware Stealing Credit Card Data From E-Commerce Consumers

In the event of a website being hacked, attackers may implant an encoded malicious script into the web server, designed to activate when a target user accesses the corrupted web page.

---

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software. "The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary software and credentials," Sysdig said in a new report. The advanced cloud attack also entailed the

---

Cisco to Acquire Valtix for Cloud Network Security Tech

Cisco is dipping into the acquisition pool to beef up its cybersecurity portfolio with plans to acquire Valtix, an early-stage Silicon Valley startup in the cloud network security business.

---

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

GootLoader, active since late 2020, is a first-stage downloader that's capable of delivering a wide range of secondary payloads such as Cobalt Strike and various ransomware.

---

New cyberattack tactics rise up as ransomware payouts increase

While phishing, business email compromise (BEC), and ransomware still rank among the most popular cyberattack techniques, a mix of new-breed attacks is gaining steam, according to a new report from cybersecurity and compliance company Proofpoint.

---

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack. "Underpinning this campaign was the use of transfer[.]sh," Cado Security said in a report shared with The Hacker News. "It's possible that it's an attempt at evading detections based on other common code

---

2023 Browser Security Report Uncovers Major Browsing Risks and Blind Spots

As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices. A new report published by LayerX, a browser security vendor, finds that attackers are exploiting this reality and are targeting it in increasing

---

SCARLETEEL Hackers Use Advanced Cloud Skills to Steal Source Code, Data

While the attackers deployed cryptominers in the compromised cloud environments, the hackers showed advanced expertise in AWS cloud mechanics, which they used to burrow further into the company's cloud infrastructure.

---

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured information stealer and remote access trojan. The package, named colourfool, was identified by Kroll's Cyber Threat Intelligence team, with the company calling the malware Colour-Blind. "The 'Colour-Blind' malware points to the democratization of cybercrime that could lead to an

---

Scammers hijack business listings on search engines to lay down phishing bait

Scammers manipulate search engine business listings, bid for digital ads displaying fake numbers, and place phishing links in the comment section of websites like Quora or business ratings to trap customers into calling phony customer care numbers.

---

Google adds client-side encryption to Gmail and Calendar. Should you care?

On Tuesday, Google made client-side encryption available to a limited set of Gmail and Calendar users in a move designed to give them more control over who sees sensitive communications and schedules.