Latest Cybersecurity News and Articles

---

Yahoo Survivor Football Bug Let Players Pick Winners After NFL Games Were Over

A bug on Yahoo's sports betting platform allowed users to cheat by placing bets after the games had already been decided, potentially impacting the outcome of survivor pools with real money involved.

---

Update: Notorious Ransomware Group Tussles With Law Enforcement, Regenerates After Takedown

The ransomware group AlphV has re-emerged just hours after law enforcement agencies took down its infrastructure. The group claimed to have "unseized" its data leak site and updated information about new victims.

---

Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector

Organizations in the Defense Industrial Base (DIB) sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under its weather-themed moniker Peach Sandstorm (formerly Holmium), which is also known as APT33, Elfin, and Refined Kitten. "

---

St Vincent’s Health Australia says data stolen in cyber-attack

Hospital and aged care operator says cyber-attack was first detected on Tuesday and is investigating what data has been accessedFollow our Australia news live blog for latest updatesSt Vincent’s – Australia’s largest not-for-profit health and aged care provider – has confirmed it has fallen victim to a cyber-attack and hackers have stolen some of its data.In a statement, St Vincent’s Health Australia confirmed it began responding to a cybersecurity incident on Tuesday. It discovered late on Thursday that data had been stolen. Continue reading...

---

Malware targeting video came users discovered by researchers

A new malware scam was discovered by ReasonLabs, affecting individuals attempting to download torrented versions of popular video games. 

---

Ivanti Releases Patches for 13 Critical Avalanche RCE Flaws

Ivanti's Avalanche enterprise MDM solution has been found to have 13 critical security vulnerabilities, including buffer overflow weaknesses, that can be exploited by attackers to gain remote code execution on unpatched systems.

---

Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware

A new analysis of the sophisticated commercial spyware called Predator has revealed that its ability to persist between reboots is offered as an "add-on feature" and that it depends on the licensing options opted by a customer. "In 2021, Predator spyware couldn't survive a reboot on the infected Android system (it had it on iOS)," Cisco Talos researchers Mike Gentile, Asheer Malhotra, and Vitor

---

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication

Cybersecurity researchers have discovered an updated version of an Android banking malware called Chameleon that has expanded its targeting to include users in the U.K. and Italy. "Representing a restructured and enhanced iteration of its predecessor, this evolved Chameleon variant excels in executing Device Takeover (DTO) using the accessibility service, all while expanding its targeted region,

---

Google Addressed a New Actively Exploited Chrome Zero-Day

Google has released emergency updates to fix a zero-day vulnerability in the Chrome browser. The vulnerability, known as CVE-2023-7024, is a heap buffer overflow issue in WebRTC.

---

Cyber Risk Strategies in Hot Seat as SEC Rules Go Live

Companies are reassessing their incident response plans and determining the materiality of cyber incidents. The SEC aims to improve companies' preparedness to mitigate breaches and attacks.

---

Indian Tech Giant HCL Investigating Ransomware Attack

HCL Technologies has reported a ransomware attack on one of its projects in an isolated cloud environment. The company stated that the incident has had no impact on its overall network and that cybersecurity and data protection are top priorities.

---

Fake Delivery Websites Surge By 34% in December

These scammers create fake delivery notification sites that mimic legitimate postal operators and use official names, logos, and typosquatted URLs to appear more convincing.

---

Russian Water Utility Rosvodokanal Hit by Disruptive Cyberattack From Blackjack Group

This attack was seen as retaliation for an earlier cyberattack on Kyivstar, a phone company in Ukraine, which was attributed to Russian hackers. There are suspicions that the Security Service of Ukraine (SBU) may have played a role in the attack.

---

Subdominator: Open-Source Tool for Detecting Subdomain Takeovers

Subdominator is a highly accurate and fast open-source tool for identifying subdomain takeovers, offering significant improvements over existing tools in terms of fingerprint accuracy and count, nested DNS support, and alternate DNS record matching.

---

New Phishing Attack Steals Instagram Backup Codes to Bypass 2FA Protection

The campaign sends phishing emails pretending to be from Meta, Instagram's parent company, claiming that the recipient's account has been restricted due to copyright infringement.

---

AI’s Efficacy is Constrained in Cybersecurity, but Limitless in Cybercrime

The use of AI in cybersecurity has created a cycle where both cyber professionals and cybercriminals employ AI to enhance their tools and techniques. However, there are limitations and trust issues with AI security solutions.

---

Fake F5 Vulnerability 'Update' Delivers Data Wiper to Israeli Victims

The attacker takes advantage of a vulnerability in F5's BIG-IP and tricks recipients into downloading a file that is supposed to be an update for the vulnerability. However, the file actually contains a wiper that deletes F5 servers.

---

EMBA: Open-Source Security Analyzer for Embedded Devices

The tool extracts firmware, conducts static and dynamic analysis, and generates web-based reports. Some unique features include enhanced firmware extraction, UEFI analysis, AI support, firmware diffing mechanisms, and user mode emulation.

---

New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide

A new piece of JavaScript malware has been observed attempting to steal users' online banking account credentials as part of a campaign that has targeted more than 40 financial institutions across the world. The activity cluster, which employs JavaScript web injections, is estimated to have led to at least 50,000 infected user sessions spanning North America, South America, Europe, and Japan.

---

Data Leak Exposes User Information From Car-Sharing Service Blink Mobility

The leaked information, including phone numbers, email addresses, encrypted passwords, and vehicle rental details, could be exploited by cybercriminals for financial gain and fraudulent activities.