Latest Cybersecurity News and Articles
08 November 2023
The malware runs a Discord bot and enables the threat actor to harvest a wide range of information, including passwords from web browsers and screenshots, execute arbitrary commands, encrypt files, and deactivate Microsoft Defender on the host.
08 November 2023
DHS launches Shields Ready, a new campaign promoting security and resilience for critical infrastructure organizations.
The post DHS Launches New Critical Infrastructure Security and Resilience Campaign appeared first on SecurityWeek.
08 November 2023
By monitoring telemetry associated with two prominent Chinese APT groups, researchers observed network connections predominately originating from Cambodia, including inbound connections originating from at least 24 Cambodian government organizations.
08 November 2023
Latest Cyber Aware campaign aims to help shoppers protect themselves online in the run up to the festive period.
08 November 2023
On Monday evening, the maker of electronics and aerospace products replaced its website with a static message indicating some of its servers were accessed by hackers last Thursday.
08 November 2023
Offensive Security does not focus on discreet attacks, singular actors, or Indicators of compromise, but understands the entirety of both sides of the battlefield.
The post Offense Intended: How Adversarial Emulation Went From State Secret To Board Bullet Point appeared first on SecurityWeek.
08 November 2023
Work-life balance compromises continue to be a challenge as a new report shows a majority of cybersecurity professionals check email, Slack and other forms of work communication even when on vacation.
08 November 2023
The contents of the leaked database on BreachForums, as observed by Hackread.com, include publicly available information from LinkedIn profiles, containing full names and profile bios.
08 November 2023
Cybersecurity researchers have developed what's the first fully undetectable cloud-based cryptocurrency miner leveraging the Microsoft Azure Automation service without racking up any charges.
Cybersecurity company SafeBreach said it discovered three different methods to run the miner, including one that can be executed on a victim's environment without attracting any attention.
"While this
08 November 2023
Meta-owned WhatsApp is officially rolling out a new privacy feature in its messaging service called "Protect IP Address in Calls" that masks users' IP addresses to other parties by relaying the calls through its servers.
"Calls are end-to-end encrypted, so even if a call is relayed through WhatsApp servers, WhatsApp cannot listen to your calls," the company said in a statement shared with The
08 November 2023
A new report reveals that more than 40% of businesses have reported an increased requirement from insurers for cybersecurity tools.
08 November 2023
Cloud monitoring and SIEM firm Sumo Logic is urging users to rotate credentials following the discovery of a security breach.
The post Sumo Logic Urges Users to Change Credentials Due to Security Breach appeared first on SecurityWeek.
08 November 2023
A new set of malicious Python packages has slithered their way to the Python Package Index (PyPI) repository with the ultimate aim of stealing sensitive information from compromised developer systems.
The packages masquerade as seemingly innocuous obfuscation tools, but harbor a piece of malware called BlazeStealer, Checkmarx said in a report shared with The Hacker News.
"[BlazeStealer]
08 November 2023
Farnetwork has been linked to the development and management of various ransomware strains, including JSWORM, Nefilim, Karma, Nemty, and their own program based on the Nokoyawa ransomware.
08 November 2023
The hackers responsible for the attack, known as the DAIXIN Team, have gradually leaked samples of the stolen patient data and expressed interest in selling it to data brokers.
08 November 2023
FBI warns that ransomware operators continue to abuse third-party vendors and services as an attack vector.
The post FBI Highlights Emerging Initial Access Methods Used by Ransomware Groups appeared first on SecurityWeek.
08 November 2023
According to a statement published by the resort, the incident occurred on October 19-20 and involved unauthorized third-party access to its non-casino customers’ loyalty program membership data.
08 November 2023
Download the free guide, "It's a Generative AI World: How vCISOs, MSPs and MSSPs Can Keep their Customers Safe from Gen AI Risks."
ChatGPT now boasts anywhere from 1.5 to 2 billion visits per month. Countless sales, marketing, HR, IT executive, technical support, operations, finance and other functions are feeding data prompts and queries into generative AI engines. They use these tools to write
08 November 2023
Singapore’s Marina Bay Sands luxury resort has disclosed a data breach impacting the information of 665,000 customers.
The post Marina Bay Sands Discloses Data Breach Impacting 665k Customers appeared first on SecurityWeek.
08 November 2023
A recent study by Quantum Xchange reveals that a large percentage of network traffic has encryption flaws due to the use of older protocols like TLS 1.0 and SSL v3 and is unencrypted, posing a significant risk to businesses.