Latest Cybersecurity News and Articles

---

Merck Settles With Insurers Who Denied $700 Million NotPetya Claim

This settlement has implications for the insurance industry, as it clarifies the need to exclude coverage for state-backed cyberattacks linked to war and incidents that significantly disrupt a state's functioning.

---

Canada: Memorial University Recovers From Cyberattack, Delays Semester Start

The Memorial University of Newfoundland experienced a cyberattack in late December, leading to the postponement of classes and disruptions to IT services at its Grenfell campus.

---

Report: Cyberattacks Drain $1.84 Billion From Web3 in 2023

The average cost per incident was $2.45m in 2023. However, there was a wide disparity between the losses suffered, with the 10 most costly attacks alone accounting for $1.11bn.

---

Webinar – Leverage Zero Trust Security to Minimize Your Attack Surface

Digital expansion inevitably increases the external attack surface, making you susceptible to cyberthreats. Threat actors increasingly exploit the vulnerabilities stemming from software and infrastructure exposed to the internet; this ironically includes security tools, particularly firewalls and VPNs, which give attackers direct network access to execute their attacks. In fact, Gartner&

---

NIST Warns of Security and Privacy Risks from Rapid AI System Deployment

The increased deployment of AI systems poses significant security and privacy challenges, including adversarial manipulation of training data and the potential exfiltration of sensitive information.

---

Iranian Crypto Exchange Bit24.cash Leaks User Passports and IDs

Iranian cryptocurrency exchange, Bit24.cash, has exposed sensitive data belonging to nearly 230,000 users. The exchange's misconfigured storage system granted access to KYC data, including passports, IDs, and credit cards.

---

Slash your overdraft costs and get ‘free’ cash: how to get your bank and savings into shape

Switch to a better current account, revive your Isa and pick a savings best buy to make the most of your moneyAuthorised overdraft costs can vary dramatically. Many banks have overdraft calculators on their websites, so log on and compare what your bank charges versus what you would be charged if you took your custom elsewhere. But can you switch your current account if you are overdrawn? The answer is yes, says the Current Account Switch Service (Cass). However, you will need to agree any overdraft you require with your new bank. Alternatively, they may be able to provide facilities to help you pay off your existing overdraft. Continue reading...

---

NIST Warns of Security and Privacy Risks from Rapid AI System Deployment

The U.S. National Institute of Standards and Technology (NIST) is calling attention to the privacy and security challenges that arise as a result of increased deployment of artificial intelligence (AI) systems in recent years. “These security and privacy challenges include the potential for adversarial manipulation of training data, adversarial exploitation of model vulnerabilities to

---

DOJ Wraps xDedic Dark Web Marketplace Case; 19 Charged Worldwide

xDedic Marketplace was known for selling login credentials and personal information of U.S. residents illegally. The marketplace listed over 700,000 compromised servers for sale, affecting thousands in the United States.

---

DoJ Charges 19 Worldwide in $68 Million xDedic Dark Web Marketplace Fraud

The U.S. Department of Justice (DoJ) said it charged 19 individuals worldwide in connection with the now-defunct xDedic Marketplace, which is estimated to have facilitated more than $68 million in fraud. In wrapping up its investigation into the dark web portal, the agency said the transnational operation was the result of close cooperation with law enforcement authorities from Belgium

---

North Korea's Cyber Heist: DPRK Hackers Stole $600 Million in Cryptocurrency in 2023

Threat actors affiliated with the Democratic People's Republic of Korea (also known as North Korea) have plundered at least $600 million in cryptocurrency in 2023. The DPRK "was responsible for almost a third of all funds stolen in crypto attacks last year, despite a 30% reduction from the USD 850 million haul in 2022," blockchain analytics firm TRM Labs said last week. "Hacks

---

Syrian Threat Group Peddles Destructive SilverRAT

A group known as Anonymous Arabic, with links to Turkey and Syria, is behind a sophisticated remote access Trojan called SilverRAT. They plan to release an updated version that can control compromised Windows systems and Android devices.

---

Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

Telecommunication, media, internet service providers (ISPs), information technology (IT)-service providers, and Kurdish websites in the Netherlands have been targeted as part of a new cyber espionage campaign undertaken by a Türkiye-nexus threat actor known as Sea Turtle. "The infrastructure of the targets was susceptible to supply chain and island-hopping attacks, which the attack group

---

Swatting: The New Normal in Ransomware Extortion Tactics

Extortionists are resorting to swatting as a new tactic to pressure hospitals into paying ransom demands. Swatting involves making false reports to the police, resulting in heavily armed officers showing up at victims' homes.

---

West Virginia City Latest Municipality Hit With Cyberattack

The city of Beckley, West Virginia, is currently grappling with a cyberattack, which has disrupted their computer network and prompted investigations into the incident's source and impact.

---

Pro-Iranian Hacker Group Targeting Albania with No-Justice Wiper Malware

The recent wave of cyber attacks targeting Albanian organizations involved the use of a wiper called No-Justice. The findings come from cybersecurity company ClearSky, which said the Windows-based malware "crashes the operating system in a way that it cannot be rebooted." The intrusions have been attributed to an Iranian "psychological operation group" called Homeland

---

Hackers Target Apache RocketMQ Servers Vulnerable to RCE Attacks

Attackers can exploit these vulnerabilities to execute commands on vulnerable NameServer components of RocketMQ, highlighting the importance of upgrading to version 5.1.2/4.9.7 or above to mitigate the risk.

---

Iranian APT Used No-Justice Wiper in Recent Albanian Attacks

The cybersecurity firm ClearSky identified the tools used, including the No-Justice wiper and a PowerShell code. The malware had a valid digital signature, making it appear legitimate.

---

Web3 Security Firm CertiK's X Account Hacked to Push Crypto Drainer

This incident is part of a larger-scale social engineering campaign targeting verified X accounts on Twitter, highlighting the vulnerability of high-profile accounts to cryptocurrency scams and phishing attacks.

---

66% of consumers would not trust a company following a data breach

A recent report found that 75% of consumers expressing their readiness to sever ties with a brand in the aftermath of any cybersecurity issue.