Latest Cybersecurity News and Articles

---

MongoDB Investigates Data Breach Impacting Customer Account Information

The breach was detected on December 13, and the company is currently investigating the incident. MongoDB believes that customer data stored in their Atlas platform was not accessed, but customer account metadata and contact information were exposed.

---

InfectedSlurs Botnet Targets QNAP VioStor NVR Vulnerability

Default admin credentials and outdated, unsupported networked systems are being exploited as routes for botnet infections, highlighting the importance of updating and securing legacy systems.

---

NY Engineer Pleads Guilty to Stealing Millions From Two Crypto Exchanges

A former security engineer has pleaded guilty to hacking two decentralized cryptocurrency exchanges, resulting in the theft of over $12 million. The hacker exploited vulnerabilities in the smart contracts of the exchanges.

---

Four U.S. Nationals Charged in $80 Million Pig Butchering Crypto Scam

Four U.S. nationals have been charged for participating in an illicit scheme that earned them more than $80 million via cryptocurrency investment scams. The defendants – Lu Zhang, 36, of Alhambra, California; Justin Walker, 31, of Cypress, California; Joseph Wong, 32, Rosemead, California; and Hailong Zhu, 40, Naperville, Illinois – have been charged with conspiracy to commit money laundering,

---

Qbot Malware Returns in Campaign Targeting Hospitality Industry

The malware is being distributed through emails pretending to be from an IRS employee, with recipients unknowingly downloading the QakBot DLL when attempting to view a PDF attachment.

---

Fortifying Cyber Defenses: A Proactive Approach to Ransomware Resilience

Investing in cutting-edge cybersecurity tools not only enhances defensive capabilities but also stimulates innovation and fosters public-private partnerships to strengthen the nation's cyber defenses.

---

Hunters International Ransomware Gang Claims to Have Hacked the Fred Hutch Cancer Center

Patients have received email threats, stating that their personal information has been compromised. The center has taken impacted systems offline, notified law enforcement, and launched an investigation.

---

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

The new rules require affected companies to assess the severity of the incident and report it immediately to the local industry supervision department without omitting or concealing any facts.

---

Unmasking the Dark Side of Low-Code/No-Code Applications

Low-code/no-code (LCNC) and robotic process automation (RPA) have gained immense popularity, but how secure are they? Is your security team paying enough attention in an era of rapid digital transformation, where business users are empowered to create applications swiftly using platforms like Microsoft PowerApps, UiPath, ServiceNow, Mendix, and OutSystems? The simple truth is often swept under

---

WordPress Hosting Service Kinsta Targeted by Google Phishing Ads

Users are advised to be vigilant and only access the official kinsta.com or my.kinsta.com websites, enable two-factor authentication, and disregard any suspicious emails or messages claiming to be from Kinsta.

---

UK's cultural institutions gather for summit on the cyber threat

Organisations across the UK’s culture sectors have been coached on how to reduce the risk of falling victim to cyber criminals.

---

Rhadamanthys Stealer Malware Evolves With More Powerful Features

The malware targets email, FTP, and online banking credentials. The latest version includes a new plugin system for customization, a "Data Spy" plugin for capturing RDP login credentials, and improvements in stealing data from browsers.

---

Four Apprehended by Indian Authorities in ICMR Data Breach Impacting 800 Million People

The suspects not only leaked data from the ICMR, but also claimed to have pilfered information from the FBI and Pakistan's CNIC, highlighting the extent of their illegal activities.

---

QakBot Malware Resurfaces with New Tactics, Targeting the Hospitality Industry

A new wave of phishing messages distributing the QakBot malware has been observed, more than three months after a law enforcement effort saw its infrastructure dismantled by infiltrating its command-and-control (C2) network. Microsoft, which made the discovery, described it as a low-volume campaign that began on December 11, 2023, and targeted the hospitality industry. "Targets

---

Malvertising Campaign by UNC2975 Found Distributing Backdoors

A threat actor known as UNC2975 has been using malicious advertisements to distribute malware since 2021. They create fake websites related to topics like unclaimed money and astrology to trick users into visiting them.

---

UK's cultural institutions gather for summit on the cyber threat

Organisations across the UK’s culture sectors have been coached on how to reduce the risk of falling victim to cyber criminals.

---

UK: Corringham School Apologizes After Sharing Personal Pupil Data

Ortu Gable Hall School in Essex mistakenly sent an email to parents containing the personal data of 69 pupils who were being disciplined for bad behavior, leading to an apology from the school.

---

10,000 People’s Data Stolen in Genetic Testing Company Asper Biogene Leak

Personal and health data belonging to approximately 10,000 people has been illegally downloaded from Asper Biogene's database, making it the biggest data leak recorded in Estonia so far.

---

Google's New Tracking Protection in Chrome Blocks Third-Party Cookies

Google will begin testing a new feature called "Tracking Protection" in January 2024 for 1% of Chrome users. The feature aims to restrict third-party cookies by default, limiting cross-site tracking.

---

Newfound School District Still Working to Recover Data After Cyberattack

Newfound Area School District in Bristol, New Hampshire, is recovering from a recent cyber breach that was described as a ransomware attack. The attack locked users out of the system, but no financial demand was made.