Latest Cybersecurity News and Articles

---

Scammers Exploit Tax Season Anxiety With AI Tools

About 25% of Americans have lost money to online tax scams, according to a McAfee study. Of the people who clicked on fraudulent links from supposed tax services, 68% lost money.

---

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

A now-patched security flaw in the Microsoft Edge web browser could have been abused to install arbitrary extensions on users' systems and carry out malicious actions.  "This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly install additional browser extensions with broad permissions without the user's knowledge," Guardio

---

Hackers Exploit Ray Framework Flaw to Breach Servers, Hijack Computing Resources

A new hacking campaign dubbed "ShadowRay" targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and leak sensitive data from thousands of companies.

---

Report: Only 5% of Boards Have Cybersecurity Expertise

Just 5% of businesses have a cyber expert on the board, despite stronger cybersecurity correlating with significantly higher financial performance, according to a new report by Diligent and Bitsight.

---

Critical infrastructure may be the subject of disruptive cyberattacks

The White House has stated that critical infrastructure may be targeted by malicious actors, and security leaders are sharing their insights on the situation. 

---

Ransomware Attack on The Big Issue, a Street Newspaper Supporting the Homeless

The Big Issue, a street newspaper in the United Kingdom famed for providing homeless people with a legitimate income by paying them as vendors to distribute the magazine, has confirmed being impacted by a cyber incident.

---

Phishing Remains Top Route to Initial Access

Phishing is a classic that never goes out of style. Threat actors used phishing links or attacks in 71% of all security incidents in 2023, according to ReliaQuest’s Annual Cyber-Threat Report released Tuesday.

---

UK Telecom and IT Trade Union Confirms Suffering Disruptive Cyberattack

The Communications Workers Union (CWU), which represents hundreds of thousands of employees in sectors across the UK economy including tech and telecoms, is currently working to mitigate a cyberattack.

---

SASE Solutions Fall Short Without Enterprise Browser Extensions, New Report Reveals

As SaaS applications dominate the business landscape, organizations need optimized network speed and robust security measures. Many of them have been turning to SASE, a product category that offers cloud-based network protection while enhancing network infrastructure performance. However, a new report: "Better Together: SASE and Enterprise Browser Extension for the SaaS-First Enterprise" (

---

Truck-to-Truck Worm Could Infect Entire US Fleet

Vulnerabilities in common Electronic Logging Devices (ELDs) required in US commercial trucks could be present in over 14 million medium- and heavy-duty rigs, according to researchers at Colorado State University.

---

Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

Cybersecurity researchers are warning that threat actors are actively exploiting a "disputed" and unpatched vulnerability in an open-source artificial intelligence (AI) platform called Anyscale Ray to hijack computing power for illicit cryptocurrency mining. "This vulnerability allows attackers to take over the companies' computing power and leak sensitive data," Oligo Security researchers Avi

---

Reinforcement Learning is the Path Forward for AI Integration Into Cybersecurity

AI algorithms and machine learning can cull through immense volumes of data efficiently and in a relatively short amount of time. This can help defenders sift through a never-ending supply of alerts and identify those that pose a possible threat.

---

New GEOBOX Tool Hijacks Raspberry Pi, Lets Hackers Fake Location

Cybercriminals now repurpose devices like Raspberry Pi into ‘plug-and-play’ weapons for digital fraud. GEOBOX's capabilities are even more sophisticated, enabling manipulation of GPS, network simulation, Wi-Fi mimicry, and anti-fraud filter evasion.

---

Germany Warns of 17K Vulnerable Microsoft Exchange Servers Exposed Online

According to the German Federal Office for Information Security (BSI), around 45,000 Microsoft Exchange servers in Germany have Outlook Web Access (OWA) enabled and are accessible from the Internet.

---

iSoon Leak Shows Links to Chinese APT Groups

Chinese hacking contractor iSoon supported three separate cyberespionage operations on behalf of Beijing, said security researchers who analyzed a leaked data trove belonging to the firm.

---

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

A new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla. Trustwave SpiderLabs said it identified a phishing email bearing this attack chain on March 8, 2024. The message masquerades as a bank payment notification, urging the user to open an archive file attachment. The archive ("Bank Handlowy w Warszawie

---

GCHQ director and U.S. cyber chief among speakers confirmed for CYBERUK 2024

NCSC announces colleagues and experts from across the globe to speak at this year’s conference in Birmingham.

---

Dubious NuGet Package May Portend Chinese Industrial Espionage

"SqzrFramework480" is a .NET dynamic link library (DLL) that seems to pertain to Bozhon Precision Industry Technology Co., a Chinese manufacturer of consumer electronics and various industrial technologies.

---

Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries

Two China-linked advanced persistent threat (APT) groups have been observed targeting entities and member countries affiliated with the Association of Southeast Asian Nations (ASEAN) as part of a cyber espionage campaign over the past three months. This includes the threat actor known as Mustang Panda, which has been recently linked to cyber attacks against Myanmar as well as

---

Everything you need to know about the Microsoft Exchange Server hack

Updated: A new critical vulnerability impacting Exchange Server is being exploited in the wild.