Latest Cybersecurity News and Articles
08 December 2023
New records obtained through a public records request reveal that over 22,000 people were affected by a data breach at the Sweetwater Union High School District in California.
08 December 2023
Experts suggest that the updated Terms of Use may not protect 23andMe from lawsuits, as it could be challenging to prove that users were given reasonable notice to opt out of the new terms.
08 December 2023
The affected data was limited to information related to the franchise partner's operations in a specific overseas territory and did not include any financial or payment card information.
08 December 2023
Data breaches in the U.S. have reached an all-time high, with 2.6 billion personal records compromised in the past two years, driven by aggressive ransomware attacks and breaches targeting third-party vendors.
08 December 2023
A recent study reveals that the media, academia and the general public overestimate the prevalence of system intrusions while underestimating more common causes of cybersecurity incidents and data breaches.
08 December 2023
The North Korean threat actor known as Kimsuky has been observed targeting research institutes in South Korea as part of a spear-phishing campaign with the ultimate goal of distributing backdoors on compromised systems.
"The threat actor ultimately uses a backdoor to steal information and execute commands," the AhnLab Security Emergency Response Center (ASEC) said in an
08 December 2023
Russian APT28 hackers, also known as Fancy Bear, exploited a Microsoft Outlook zero-day vulnerability to target European NATO member countries, including a NATO Rapid Deployable Corps.
08 December 2023
Understanding human vulnerabilities and the ways in which attackers manipulate emotions and fundamental traits is crucial for identifying and responding to cybersecurity threats.
08 December 2023
The default configuration of Microsoft Dynamic Host Configuration Protocol (DHCP) servers leaves a significant number of organizations vulnerable to these attacks, making them accessible to a wide range of attackers.
08 December 2023
The round was led by Tikehau Capital, through its new vintage of Brienne, its flagship private equity cybersecurity strategy with the French Ministry of Defence’s Definvest fund, managed by Bpifrance.
08 December 2023
The HeadCrab malware has resurfaced with a new variant that allows root access to Redis servers, infecting over 1,100 servers and enabling the attacker to control and modify responses.
08 December 2023
The cryptocurrency exchange operated with lax know-your-customer (KYC) procedures and had a significant partnership with the Hydra darknet marketplace for cryptocurrency transactions.
08 December 2023
Microsoft is making changes to its cybersecurity leadership, with Bret Arsenault being moved from his role as CISO to a chief security adviser position. Igor Tsyganskiy will take over as the new CISO.
08 December 2023
Ransomware attacks have become a significant and pervasive threat in the ever-evolving realm of cybersecurity. Among the various iterations of ransomware, one trend that has gained prominence is Ransomware-as-a-Service (RaaS). This alarming development has transformed the cybercrime landscape, enabling individuals with limited technical expertise to carry out devastating attacks.
08 December 2023
Star Blizzard uses extensive research and preparation, including creating fake email accounts and social media profiles, to build trust with their targets before delivering malicious links.
08 December 2023
Progress Software has disclosed two new high-severity vulnerabilities in its MOVEit file-transfer service, bringing the total number of vulnerabilities to eight since a zero-day exploit in May.
08 December 2023
Unauthorized websites distributing trojanized versions of cracked software have been found to infect Apple macOS users with a new Trojan-Proxy malware.
"Attackers can use this type of malware to gain money by building a proxy server network or to perform criminal acts on behalf of the victim: to launch attacks on websites, companies and individuals, buy guns, drugs, and other illicit
08 December 2023
Hackers are using the free website Genial.ly to send phishing links as part of a Business Compromise 3.0 attack. Users receive legitimate-looking emails inviting them to click on a link to view content created in Genial.ly.
08 December 2023
This malware is a Python-based information stealer compressed with cx-Freeze to evade detection. MrAnon Stealer steals its victims' credentials, system information, browser sessions, and cryptocurrency extensions.
08 December 2023
WordPress has released version 6.4.2 with a patch for a critical security flaw that could be exploited by threat actors by combining it with another bug to execute arbitrary PHP code on vulnerable sites.
"A remote code execution vulnerability that is not directly exploitable in core; however, the security team feels that there is a potential for high severity when combined with some plugins,