Latest Cybersecurity News and Articles

---

Cryptocurrency Exchange FixedFloat Hacked to Siphon Off $26 Million in BTC, ETH

FixedFloat, a non-KYC crypto exchange, was hacked for $26 million worth of Bitcoin and Ethereum due to vulnerabilities and insufficient security measures, leading to frozen transactions and missing funds.

---

Breach at Aussie Telecom Tangerine Affects 232,000 Customers

The company confirmed that no credit/debit card numbers were compromised and assured that customer accounts are protected by multifactor authentication, ensuring security from unauthorized access.

---

Trust in biometric data is declining among consumers

Confidence in biometric technology and the security of organizations that store biometric data is declining, according to a new report. 

---

US Health Tech Giant Change Healthcare Hit by Cyberattack

The incident disrupted patient payments and prescription processing, affecting a significant portion of the U.S. healthcare system due to Change Healthcare's extensive reach and role in handling healthcare transactions.

---

Researchers Find Monumental Rise in Valid Account Attacks

The IBM X-Force Threat Intelligence Index report found that valid account compromises were the most common way for cyber attackers to gain access in 2023, with a 71% increase in such attacks.

---

New Mustang Panda Campaign Targets Asia with a Backdoor Dubbed DOPLUGS

The DOPLUGS malware acts as a downloader and supports four backdoor commands, including the ability to download a generic version of the PlugX malware, and it utilizes the KillSomeOne module to support USB worm capability.

---

36% of Code Generated by GitHub CoPilot Contains Security Flaws

A new report by Veracode revealed the prevalence of security debt in applications and organizations, with 42% of applications and 71% of organizations having unfixed flaws.

---

A New Age of Hacktivism

In the past 2 years, we have observed a significant surge in hacktivism activity due to ongoing wars and geopolitical conflicts in various regions. Since the war against Ukraine began, we have witnessed a notable mobilization of non-state and state-backed actors alike, forming new groups or joining existing hacker collectives.  We understand hacktivism as a form of computer hacking that is

---

Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities. "SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network," Sysdig researcher Miguel Hernández said. "The worm automatically searches through known credential

---

Russian Government Software Backdoored to Deploy Konni RAT Malware

An installer for a tool likely used by the Russian Consular Department of the Ministry of Foreign Affairs (MID) has been backdoored to deliver a remote access trojan called Konni RAT (aka UpDog). The findings come from German cybersecurity company DCSO, which linked the activity as originating from the Democratic People's Republic of Korea (DPRK)-nexus actors targeting Russia. The

---

Europe Announces Launch of Formal Probe Into TikTok Under Digital Rights Law

The European Commission is investigating TikTok for potential violations of the Digital Services Act related to child protection, advertising transparency, and harmful content.

---

Report: Initial Ransomware Demands Jump 20% to $600,000 in 2023

A report by Arctic Wolf on cybercrime in 2023 revealed that ransomware demands rose by 20%, with some industries facing median demands of $1 million or more per incident.

---

NCSC-UK Sounds Alarm Over Private Branch Exchange Attacks

The UK's National Cyber Security Centre (NCSC) has warned smaller organizations about the potential vulnerability of their private branch exchange (PBX) phone systems to cyberattacks.

---

Report: Manufacturing Bears the Brunt of Industrial Ransomware

The industrial sector, particularly manufacturing, has been heavily targeted by ransomware attacks, with over 900 incidents reported in the past year, according to a report by Dragos.

---

Singapore Struggles With Scams as Cybercrime Cases Keep Climbing

Scams and cybercrime cases in Singapore increased by 49.6% in 2023, with victims losing a total of SG$651.8 million (~US$483.62 million), despite industry-wide measures being implemented to combat such incidents.

---

Web3 Crypto Malware: Angel Drainer - From Phishing Sites to Malicious Injections

The growth of Web3 and Dapp technologies has attracted cybercriminals, leading to the creation of thousands of Web3 phishing sites with crypto drainers and an increase in attacks targeting Dapp users.

---

NSA Cyber Director Rob Joyce to Retire

The director of cybersecurity at the National Security Agency, Rob Joyce, is retiring after 34 years of service. David Luber, deputy director of the Cybersecurity Directorate, will succeed Joyce.

---

New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

These vulnerabilities could lead users to join a malicious network or allow attackers to access trusted networks without a password. The vulnerabilities could result in potential attacks such as malware infections and data theft.

---

U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

The U.S. State Department has announced monetary rewards of up to $15 million for information that could lead to the identification of key leaders within the LockBit ransomware group and the arrest of any individual participating in the operation. "Since January 2020, LockBit actors have executed over 2,000 attacks against victims in the United States, and around the world, causing costly

---

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

ReversingLabs' research revealed a broader campaign involving multiple packages and sophisticated tactics, indicating an emerging trend of DLL sideloading attacks in open-source environments.