Latest Cybersecurity News and Articles

---

Cybersecurity Deals Boom as Investment Dips, Pinpoint Reports

The cybersecurity sector recorded 346 funding rounds and 91 mergers and acquisition (M&A) transactions in 2023, according to cyber recruitment firm Pinpoint Search Group.

---

Fallout Mounting From Recent Major Health Data Hacks

Several high-profile health data hacks, including those affecting medical transcription vendor Perry Johnson and Associates and hospital chain Prospect Medical Holdings, are resulting in growing lists of affected individuals and triggering lawsuits.

---

First responders look to technology to prevent cyberattacks

According to a Mark43 report, 82% of first responders worry that their organization’s data could be stolen or fall victim to ransomware.

---

DDoS Attack Traffic Surged in 2023, Cloudflare Finds

Distributed denial of service (DDoS) attacks reached an all-time high in 2023, with a significant increase in the number and intensity of attacks, driven by the exploitation of vulnerabilities like the HTTP/2 Rapid Reset.

---

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Two Russian men, known as Icamis and Salomon, co-ran the top spam forum Spamdot and worked closely with dangerous cybercriminals, controlling botnets and harvesting passwords.

---

Paraguay Warns of Black Hunt Ransomware Attacks After Tigo Business Breach

Last week, Tigo Business, a division of Paraguay's largest mobile carrier, suffered a cyberattack that impacted their cloud and hosting services. While it did not confirm the attack, reports suggest that it was targeted by the Black Hunt ransomware.

---

Jadee Hanson hired as Chief Information Security Officer at Vanta

Jadee Hanson has been hired as CISO at Vanta. Hanson will oversee security, enterprise engineering, privacy and governance, risk and compliance.

---

DOJ to up Tempo of Cybercrime Operations in 2024, Senior Official Says

The US Department of Justice expects an increase in government disruption operations in cybersecurity in 2024, with a focus on dismantling cybercriminal infrastructure and targeting individuals and companies supporting cybercrime.

---

Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote Attack

The vulnerability permits any unauthenticated user to upload arbitrary files, including potentially malicious PHP files, which could lead to remote code execution on the affected system.

---

FTC Settles Unprecedented Case Against Geolocation Data Broker

The FTC's action against Outlogic marks the first-ever ban on the use and sale of sensitive location data, emphasizing the importance of limiting the tracking and use of personal information.

---

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

A new Mirai-based botnet called NoaBot is being used by threat actors as part of a crypto mining campaign since the beginning of 2023. “The capabilities of the new botnet, NoaBot, include a wormable self-spreader and an SSH key backdoor to download and execute additional binaries or spread itself to new victims,” Akamai security researcher Stiv Kupchik said in a report shared with The

---

The security year ahead: What will 2024 have in store?

In episode 19 of The Cybersecurity and Geopolitical Discussion, our trio of hosts examine how compelling world events could impact global security.

---

Hacker Claims to Breach Indian ISP Hathway and Leaks Four Million Users' KYC Data

The leaked data includes the personal information of over 41 million Hathway customers, but analysis suggests that the actual number of impacted accounts is around 4 million.

---

anecdotes Raises $25M in Series B Funding

The round was led by Glilot Capital Partners, with participation from existing investors. The company plans to use the funds to introduce new data-driven innovations in the GRC landscape and expand into markets across the US, EMEA, and APAC regions.

---

Entire Population of Brazil Possibly Exposed in Massive Data Leak

The private data of hundreds of millions of Brazilian individuals, including full names, dates of birth, and CPF numbers, were publicly accessible, putting them at risk of identity theft and cybercrimes.

---

Myanmar Rebels Take Control of ‘Pig Butchering’ Scam City Amid Chinese Pressure on Junta

The rebel groups' focus on tackling the scam industry is likely an attempt to gain favor with China, as many of its citizens have been targeted by these scams run from Mynamar.

---

Here’s Some Bitcoin: Oh, and You’ve Been Served!

A California man who lost $100,000 in a 2021 SIM-swapping attack is suing the unknown holder of a cryptocurrency wallet that harbors his stolen funds. The case is thought to be first in which a federal court has recognized the… Read More »

---

Pro-Ukraine Hackers Claim Breach of Russian Internet Provider

This incident highlights the ongoing cyberwar between Ukraine and Russia, with Ukrainian hackers allegedly cooperating with security services to target Russian organizations.

---

If You Prepare, a Data Security Incident Will Not Cause an Existential Crisis

Effective data security incident response requires building trust and clear role definition within the company and with external partners. Practicing decision-making with limited information is key to maintaining calm during cybersecurity crises.

---

Black Basta-Affiliated Threat Actor Water Curupira Spreads Pikabot via Spam Campaign

Pikabot, a loader malware similar to Qakbot, has been actively used in phishing campaigns by the Water Curupira threat actor, possibly as a replacement for Qakbot after its takedown.