Latest Cybersecurity News and Articles

---

Henry Schein Provides Information on Cybersecurity Incident

Henry Schein, Inc. experienced a cybersecurity incident that temporarily disrupted some of its business operations but did not impact its clients' practice management software.

---

Iran-Linked OilRig Targets Middle East Governments in 8-Month Cyber Campaign

The Iran-linked OilRig threat actor targeted an unnamed Middle East government between February and September 2023 as part of an eight-month-long campaign. The attack led to the theft of files and passwords and, in one instance, resulted in the deployment of a PowerShell backdoor called PowerExchange, the Symantec Threat Hunter Team, part of Broadcom, said in a report shared with The Hacker News

---

Finland Charges Psychotherapy Hacker With Extortion

A hacker in Finland has been charged with over 21,000 counts of extortion for stealing psychotherapy patient records and attempting to extort money from a therapy center.

---

North Korean Hackers Exploiting Recent TeamCity Vulnerability

Multiple North Korean hacking groups have exploited a recent TeamCity vulnerability and Microsoft warns of potential supply chain attacks. The post North Korean Hackers Exploiting Recent TeamCity Vulnerability appeared first on SecurityWeek.

---

Google Play Protect Bolsters Security Against Malicious Apps

Google has announced a significant update to its Google Play Protect feature in response to the increasing threats targeting mobile devices. It includes real-time code-level scanning during the installation process to counter evasion techniques.

---

Ukrainian Hacktivists Claim Trigona Ransomware Takedown

Pro-Ukrainian hackers known as the Ukrainian Cyber Alliance claim to have wiped out the servers of the Trigona ransomware gang, a group linked to the Russian cybercriminal underground.

---

Darwinium Raises $18 Million for Edge-Based Fraud Prevention Tech

San Francisco-based startup Darwinium has raised $18 million in a Series A funding round led by U.S. Venture Partners. The company, which focuses on fraud prevention, has developed a digital security platform that runs on the perimeter edge.

---

Government-Backed Actors Exploiting WinRAR Vulnerability

The recent campaigns targeting various sectors, including the energy and government sectors, highlight the effectiveness of known vulnerabilities even with available patches, emphasizing the importance of proactive software security measures.

---

North Korean Hackers Exploiting Critical Flaw in DevOps Tool

The vulnerability allows attackers to execute arbitrary code on the server, potentially leading to the theft of source code and private keys. TeamCity is used by many high-profile organizations, making it an attractive target for hackers.

---

Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

North Korean threat actors are actively exploiting a critical security flaw in JetBrains TeamCity to opportunistically breach vulnerable servers, according to Microsoft. The attacks, which entail the exploitation of CVE-2023-42793 (CVSS score: 9.8), have been attributed to Diamond Sleet (aka Labyrinth Chollima) and Onyx Sleet (aka Andariel or Silent Chollima). It's worth noting that both the

---

Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw

A number of state-back threat actors from Russia and China have been observed exploiting a recent security flaw in the WinRAR archiver tool for Windows as part of their operations. The vulnerability in question is CVE-2023-38831 (CVSS score: 7.8), which allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The shortcoming has been actively

---

Finland Charges Psychotherapy Hacker With Extortion

Finland charged a hacker, accused of the theft of tens of thousands of records from psychotherapy patients, with over 21,000 counts of extortion. The post Finland Charges Psychotherapy Hacker With Extortion appeared first on SecurityWeek.

---

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw

Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks. The post Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw appeared first on SecurityWeek.

---

Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

A critical security flaw in Citrix NetScaler ADC and Gateway appliances (CVE-2023-4966) is being actively exploited, potentially allowing hijacking of authenticated sessions and bypassing multi-factor authentication.

---

Oracle Patches 185 Vulnerabilities With October 2023 CPU

Oracle has released 387 new security patches to address vulnerabilities in its own code and third-party components, with over 40 patches addressing critical severity flaws.

---

Fraud Prevention Firm Fingerprint Raises $33 Million

The fraud prevention provider's $33 million Series C funding round brings the total raised by the company to $77 million. The new investment round was led by Nexus Venture Partners, with additional funding from Uncorrelated Ventures.

---

Report: Over 40,000 Admin Portal Accounts Use ‘admin’ as a Password

IT administrators are putting enterprise networks at risk by using weak passwords, including default passwords, leaving them vulnerable to cyberattacks, as per a new report by Outpost24.

---

Delete-Your-Data Laws Have a Perennial Problem: Data Brokers Who Fail to Register

The number of registered data brokers in states with operative registries does not accurately reflect the size and reach of the industry, raising concerns about non-compliance.

---

Roles of AI, automation and humans in security

Jordan Lippel, Vice President of Sales at ECAMSECURE, discusses how security professionals can stay updated regarding integration of automation and AI into their security operations.

---

Qubitstrike Targets Jupyter Notebooks with Cryptomining and Rootkit Campaign

The threat actor behind Qubitstrike, likely from Tunisia, employs sophisticated techniques to evade detection and exploit cloud services, with the potential for carrying out various attacks on compromised systems.