Latest Cybersecurity News and Articles

---

Vulnerability Prioritization is Only the Beginning

Vulnerability prioritization is crucial in managing security threats but is only the beginning. Knowing which vulnerabilities to address is not enough; the focus should be on quickly addressing and mitigating them.

---

Marketing Data Security Threats Are Rising: Where CMOs See Gaps

A new report from the CMO Council and KPMG shows that building strong relationships between marketing and data security teams is crucial, but one-third of partnerships struggle with collaboration.

---

Fraud Tactics and the Growing Prevalence of AI Scams

Hiya, a call-blocking service, identified nearly 20 billion spam calls in the first half of 2024, with over 107 million spam calls daily. Of the 42 countries analyzed, 25 had spam flag rates exceeding 20%, some even surpassing 50%.

---

US Charges Alleged Member of Russian Karakurt Ransomware Group

A 33-year-old Latvian man, Deniss Zolotarjovs, residing in Moscow, has been charged in the U.S. with money laundering, financial fraud, and extortion related to the Russian ransomware group Karakurt.

---

Report: 63% of security practitioners experience burnout

A survey shows 63% of security practitioners experience burnout and reveals the key steps to retaining security talent. 

---

Over 3400 High and Critical Cyber Alerts Recorded in First Half 2024

A report from Critical Start’s Cyber Research Unit revealed over 3400 high and critical cyber alerts in the first half of 2024, marking a 46.15% increase in attacks in the US compared to 2023.

---

Fake Funeral Live Stream Scams Target Grieving Users on Facebook

This type of scam typically starts with a comment on a funeral home's Facebook notification, promoting a fake live stream of the funeral service or soliciting donations on behalf of the deceased family.

---

Russian Laundering Millions for Lazarus Hackers Arrested in Argentina

A 29-year-old Russian national has been arrested in Buenos Aires, Argentina by the federal police on charges of money laundering for North Korean Lazarus hackers using cryptocurrency.

---

WordPress Websites Used to Distribute ClearFake Trojan Malware

WordPress websites were found distributing the ClearFake Trojan malware, a dangerous threat that can lead to ransomware infections. The malware was disguised as a prompt to install a root certificate.

---

SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauthorized access to the devices. The vulnerability, tracked as CVE-2024-40766 (CVSS score: 9.3), has been described as an improper access control bug. "An improper access control vulnerability has been identified in the SonicWall SonicOS

---

Dutch Regulator Fines Uber €290 Million for GDPR Violations in Data Transfers to U.S.

The Dutch Data Protection Authority (DPA) has fined Uber a record €290 million ($324 million) for allegedly failing to comply with European Union (E.U.) data protection standards when sending sensitive driver data to the U.S. "The Dutch DPA found that Uber transferred personal data of European taxi drivers to the United States (U.S.) and failed to appropriately safeguard the data with regard to

---

CISA’s $524M headquarters slated for DHS campus in 2027

CISA's new $524M headquarters, set to be completed in 2027, will be located at the DHS campus in Washington. Construction is expected to begin in the fall, consolidating the agency's workforce currently spread across five office rentals.

---

Hundreds of Online Stores Hacked in New Campaign

A new malware campaign has targeted numerous online stores, compromising their security by injecting digital skimmers that can steal credit card information during the checkout process.

---

Telecom Company Hit with $1 Million Penalty Over AI-Generated Fake Robocalls

Lingo Telecom failed to comply with caller ID rules before the New Hampshire primary. FCC is seeking a $6 million fine against political consultant Steve Kramer for arranging the calls.

---

US Authorities Warn Healthcare Sector of Everest Ransomware Threats

The group, which has been active since 2020, specializes in data extortion and ransomware attacks. They have targeted at least 20 healthcare entities since 2021 and claim to have stolen patient information.

---

Georgia Tech Sued Over Cybersecurity Violations

The US government has filed a lawsuit against the Georgia Institute of Technology (Georgia Tech) and its affiliate Georgia Tech Research Corporation (GTRC) for alleged cybersecurity violations.

---

Two Remote Code Execution Vulnerabilities Discovered in Traccar GPS Tracking System

The two vulnerabilities are path traversal flaws, with CVE-2024-24809 allowing unrestricted file upload with dangerous types and CVE-2024-31214 enabling remote code execution through device image uploads.

---

NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams

NIST has issued new quantum-resistant cryptography standards, alerting cybersecurity teams to prepare for quantum threats. Quantum computing is expected to jeopardize current cryptographic methods within ten years.

---

2 out of 3 major political donation sites lack critical security

As the election season draws closer, the increase in political donations may attract cyber criminals. 

---

2 out of 3 major pollical donation sites lack critical security

As the election season draws closer, the increase in political donations may attract cyber criminals.