Latest Cybersecurity News and Articles

---

The Secret Vulnerability Finance Execs are Missing

The (Other) Risk in Finance A few years ago, a Washington-based real estate developer received a document link from First American – a financial services company in the real estate industry – relating to a deal he was working on. Everything about the document was perfectly fine and normal. The odd part, he told a reporter, was that if he changed a single digit in the URL, suddenly, he could see

---

Previously Unknown Group 'Hydrochasma' Targets Medical and Shipping Organizations in Asia

Hydrochasma, the threat actor behind this campaign, has not been linked to any previously identified group, but appears to have a possible interest in industries that may be involved in COVID-19-related treatments or vaccines.

---

Meta successfully resists certification in data privacy collective action

In an early victory for Meta, the Competition Appeal Tribunal has refused to certify a collective claim brought on behalf of some 45 million consumers by proposed class representative Dr. Liza Lovdahl Gormsen (the “PCR”).

---

New Hacking Cluster 'Clasiopa' Targeting Materials Research Organizations in Asia

Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools. Symantec, by Broadcom Software, is tracking the cluster under the moniker Clasiopa. The origins of the hacking group and its affiliations are currently unknown, but there are hints that suggest the adversary could have ties to India. This includes references to "

---

Lazarus Group Using New WinorDLL64 Backdoor to Exfiltrate Sensitive Data

A new backdoor associated with a malware downloader named Wslink has been discovered, with the tool likely used by the notorious North Korea-aligned Lazarus Group, new findings reveal. The payload, dubbed WinorDLL64 by ESET, is a fully-featured implant that can exfiltrate, overwrite, and delete files; execute PowerShell commands; and obtain comprehensive information about the underlying machine.

---

European Commission bans staff from using TikTok on work devices

Employees given until 15 March to comply amid concerns over app’s Chinese ownershipThe EU’s executive body has banned its thousands of staff from using TikTok, as governments and officials become increasingly concerned over the company’s data practices and Chinese ownership.The European Commission sent an email to employees ordering them to delete the app from all work phones and devices, and any personally owned ones that use the commission’s apps and email. Employees have until 15 March to comply. Continue reading...

---

Two Health Data Hacks Affect More Than One Million Individuals

Two recent separate hacking incidents involving attackers stealing copies of protected health information have affected more than one million patients of a New Jersey healthcare system and an Alabama cardiovascular clinic.

---

Android Voice Chat App With 5 Million Installs Leaked User Chats

Researchers warned that malicious actors could have deleted the dataset, resulting in a permanent loss of users’ private messages, if the leaked data had not been backed up.

---

DDoS Attacks Becoming More Potent, Shorter in Duration

Tech giant Microsoft says it observed distributed denial-of-services attacks become shorter in duration in 2022 while also becoming more potent and capable of larger impact.

---

New S1deload Malware Hijacking Users' Social Media Accounts and Mining Cryptocurrency

An active malware campaign has set its sights on Facebook and YouTube users by leveraging a new information stealer to hijack the accounts and abuse the systems' resources to mine cryptocurrency. Bitdefender is calling the malware S1deload Stealer for its use of DLL side-loading techniques to get past security defenses and execute its malicious components. "Once infected, S1deload Stealer steals

---

Russia blames 'hackers' for fake missile strike alerts

Millions of Russians in almost a dozen cities throughout the country were greeted Wednesday morning by radio alerts, text messages, and sirens warning of an air raid or missile strikes that never occurred. The warnings were later blamed on hackers.

---

Dutch intelligence say many cyberattacks by Russia are not yet public knowledge

Many of Russia’s cyber operations against Ukraine and NATO members during the past year have not yet become public knowledge, according to a joint report published this week by two Dutch intelligence services.

---

Civil liberties groups call for EU-wide ban on spyware

The European Digital Rights (EDRi) association on Tuesday called for the European Parliament committee investigating spyware to amend its recommendations around the technology.

---

NCUA Issues Final Rule on Cyber Incident Notification

On February 16, 2023, the National Credit Union Administration (NCUA) issued its final rule on cyber incident notification requirements for federally insured credit unions.

---

Five Lawsuits Filed in Ransomware Breach Affecting 3.3 Million

At least five proposed class action lawsuits have been filed in recent days in the wake of a California medical group's February 1 report of a ransomware attack last December that affected more than 3.3 million individuals.

---

HardBit 2.0 Ransomware Asks for Insurance Policy to Negotiate Ransom

A report from Varonis revealed its findings about the second version of HardBit ransomware that extorts organizations. Its first version was observed in October 2022. This time, actors were spotted negotiating with certain victims as per their terms of cyber insurance. Victims are given 48 hours to get in touch with hackers, who use a peer-to-peer chat program that is open-source and encrypted.

---

NSA shares guidance on how to secure your home network

The guide published by the Defense Department's intelligence agency on Wednesday includes a long list of recommendations, including a short list of highlights urging teleworkers to ensure their devices and software are up to date.

---

Ukraine’s largest charity wants to raise $1.3 million for ‘cyber offensive’

The campaign aims to raise $1.3 million to purchase technology and equipment that will help Ukraine’s cyber forces conduct digital operations that could impede Russia’s advances on the real battlefield.

---

Irish TV broadcaster says attempted hack will affect programming

In a statement, the company described identifying “an unauthorized attempt to access our systems in recent days” which it said had been “contained, isolated, and terminated.”

---

Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries

Cybersecurity researchers are warning of "imposter packages" mimicking popular libraries available on the Python Package Index (PyPI) repository. The 41 malicious PyPI packages have been found to pose as typosquatted variants of legitimate modules such as HTTP, AIOHTTP, requests, urllib, and urllib3. The names of the packages are as follows: aio5, aio6, htps1, httiop, httops, httplat, httpscolor