Latest Cybersecurity News and Articles


The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

16 August 2024
SaaS applications have become indispensable for organizations aiming to enhance productivity and streamline operations. However, the convenience and efficiency these applications offer come with inherent security risks, often leaving hidden gaps that can be exploited. Conducting thorough due diligence on SaaS apps is essential to identify and mitigate these risks, ensuring the protection of your

DDoS Attack Volume Rises, Peak Power Reaches 1.7 Tbps

16 August 2024
According to Gcore, the number of DDoS attacks in the first half of 2024 increased by 46% compared to the same period in 2023, reaching a total of 830,000 attacks. The peak attack power also rose to 1.7 terabits per second.

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

16 August 2024
The GitHub vulnerability named 'ArtiPACKED' exposes repositories to potential takeovers. This attack vector in GitHub Actions artifacts could allow malicious actors to compromise services by leaking tokens due to misconfigurations and security flaws.

Google Warns of Iranian Hackers Targeting Affiliates of Both US Presidential Campaigns

16 August 2024
Iranian hackers linked to the government of Iran have increased their phishing attacks on high-profile individuals in the U.S. and Israel, including those affiliated with U.S. presidential campaigns, according to Google.

Leaked Environment Variables Allow Large-Scale Extortion Operation of Cloud Environments

16 August 2024
Cybercriminals are infiltrating organizations' cloud storage containers, stealing sensitive data, and sometimes being paid off by the victims to keep the data private. According to Palo Alto Networks, the attackers likely used automation techniques.

Kiteworks Captures $456M at a $1B+ Valuation to Help Secure Sensitive Data

16 August 2024
Kiteworks (formerly Accellion) secured $456 million in private equity funding. The investment from Insight Partners and Sixth Street Growth will support Kiteworks' acquisitions, including four smaller enterprise startups since 2022.

An Analysis of Common Malware Loaders

16 August 2024
In 2024, loaders were involved in nearly 40% of critical security incidents, with popular ones being SocGholish, GootLoader, and Raspberry Robin, aiming to deliver malware like ransomware, according to Reliaquest.

Ransomware Group Behind Major Indonesian Attack Wears Many Masks

16 August 2024
Researchers have linked Brain Cipher to at least three other groups operating under different names. Despite its global reach, the group's tactics are not particularly sophisticated.

M&A Activity can Amplify Ransomware Insurance Losses, Research Finds

16 August 2024
M&A activity can increase ransomware insurance losses, with the severity of claims rising over 400% from 2022 to 2023, according to research by cyber risk company Resilience.

New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data

16 August 2024
A new threat actor has emerged targeting diplomats from Azerbaijan and Israel, aiming to steal sensitive data. Identified as Actor240524, they use spear-phishing emails to target diplomats and have the ability to steal secrets and modify files.

Highly-Personalized Phishing Campaign Targets Russian Government Dissidents

16 August 2024
A spear-phishing campaign targeting Russian government dissidents and Western organizations, attributed to the Russian FSB and threat actor COLDRIVER, uses personalized social engineering tactics to gain access to online accounts.

New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems

16 August 2024
Cybersecurity researchers have uncovered new stealer malware that's designed to specifically target Apple macOS systems. Dubbed Banshee Stealer, it's offered for sale in the cybercrime underground for a steep price of $3,000 a month and works across both x86_64 and ARM64 architectures.  "Banshee Stealer targets a wide range of browsers, cryptocurrency wallets, and around 100 browser

Massive Cyberattack Hit Central Bank of Iran

16 August 2024
A major cyberattack struck the Central Bank of Iran and other Iranian banks, causing disruptions. The incident, reported by Iranian news outlets and Iran International, resulted in the crippling of the banks' computer systems.

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

16 August 2024
A large percentage of Google's own Pixel devices shipped globally since September 2017 included dormant software that could be used to stage nefarious attacks and deliver various kinds of malware. The issue manifests in the form of a pre-installed Android app called "Showcase.apk" that comes with excessive system privileges, including the ability to remotely execute code and install arbitrary

NationalPublicData.com Hack Exposes a Nation’s Data

15 August 2024
A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post examines what we know about a breach that has exposed hundreds of millions of consumer records. We'll also take a closer look at the data broker that got hacked -- a background check company founded by an actor and retired sheriff's deputy from Florida.

Research Uncovers New Microsoft Outlook Vulnerability

15 August 2024
A new vulnerability has been discovered in Microsoft Outlook by security researchers, labeled as CVE-2024-38173 with a CVSS score of 6.7. This Form Injection RCE flaw is similar to a previous vulnerability, CVE-2024-30103, patched in July 2024.

New Phishing Attack Uses Sophisticated Infostealer Malware

15 August 2024
A new phishing attack with advanced infostealer malware has been discovered by analysts. The malware collects sensitive data like passwords, cookies, credit card info, and browsing history.

Windows TCP/IP RCE Impacts all Systems with IPv6 Enabled, Patch Now

15 August 2024
A critical TCP/IP remote code execution (RCE) vulnerability affecting all Windows systems with IPv6 enabled has been discovered, prompting Microsoft to issue a warning urging users to patch their systems immediately.

New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining

15 August 2024
A new variant of the Gafgyt botnet has been discovered by cybersecurity researchers, targeting machines with weak SSH passwords to mine cryptocurrency using GPU power. This variant is focusing on servers in cloud native environments.

SolarWinds Urges Upgrade After Revealing Critical RCE Bug

15 August 2024
SolarWinds is advising customers to upgrade their Web Help Desk platform due to a critical vulnerability, CVE-2024-28986, discovered by Inmarsat Government researchers. The bug allows for remote code execution through Java deserialization.