Latest Cybersecurity News and Articles

---

After Hackers Distribute Malware In-Game Updates, Steam Adds SMS-based Security Check for Developers

The feature involves SMS-based two-factor authentication for game developers on Steam, where they receive a confirmation code via text message to log into their accounts.

---

Spyware Caught Masquerading as Israeli Rocket Alert Applications

A threat actor targets Israelis with spyware masquerading as an Android application for receiving rocket alerts. The post Spyware Caught Masquerading as Israeli Rocket Alert Applications appeared first on SecurityWeek.

---

Lumma Stealer Found Being Distributed via Discord CDN

Lumma Stealer robs user credentials and is being sold as a service on underground forums. The malware is distributed through direct messages on Discord, where victims are tricked into downloading and executing a malicious file.

---

EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits

Environmental Protection Agency (EPA) withdraws recent water sector cybersecurity rules due to lawsuits by states and water associations. The post EPA Withdraws Water Sector Cybersecurity Rules Due to Lawsuits appeared first on SecurityWeek.

---

Signal Debunks Zero-Day Vulnerability Reports, Finds No Evidence

Encrypted messaging app Signal has pushed back against "viral reports" of an alleged zero-day flaw in its software, stating it found no evidence to support the claim. "After responsible investigation *we have no evidence that suggests this vulnerability is real* nor has any additional info been shared via our official reporting channels," it said in a series of messages posted in X (formerly

---

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

NTLM, which has been used as a fallback mechanism, relies on a three-way handshake and password hashing, while Kerberos uses a two-part process and encryption. NTLM has security weaknesses and is vulnerable to relay attacks.

---

Colonial Pipeline Attributes Ransomware Claims to ‘Unrelated’ Third-Party Data Breach

The Ransomed.vc gang attempted to extort Colonial Pipeline last week but was unsuccessful. As per researchers, the stolen documents shared by the gang appear to be unrelated to Colonial Pipeline.

---

UK Fines Equifax $13.6 Million for 2017 Data Breach

Equifax Ltd's outsourcing of data processing to its US parent company led to delays in addressing the breach, as the UK arm was only informed minutes before the incident was publicly announced, hindering its ability to respond effectively.

---

AI Algorithm Detects MitM Attacks on Unmanned Military Vehicles

Researchers have developed an algorithm using machine learning techniques to detect and prevent man-in-the-middle attacks on unmanned military robots, which are highly susceptible to cyberattacks.

---

Singapore and US pledge to combat online scams in cross-border cooperation

The collaboration aims to enhance regulatory enforcement activities, exchange information, and implement anti-scam measures in both countries to mitigate the risks faced by citizens and businesses.

---

Cybersecurity Should be a Business Priority for CEOs

A recent report by Accenture reveals that although 96% of CEOs consider cybersecurity to be critical for organizational growth and stability, 74% are concerned about their ability to minimize damage from cyberattacks.

---

As Biohacking Evolves, How Vulnerable are we to Cyber Threats?

The security of implantable technologies lies in the devices themselves, not the human body, and it is crucial to prioritize the security of these technologies before implanting them.

---

Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign

Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bulletproof hosting." The campaign, detected two months ago, has been codenamed EtherHiding by Guardio Labs. The novel twist marks the latest iteration in an ongoing campaign that leverages compromised WordPress sites to serve unsuspecting

---

‘Our health data is about to flow more freely, like it or not’: big tech’s plans for the NHS – podcast

The government is about to award a £480m contract to build a vast new database of patient data. But if people don’t trust it, they’ll opt out – I know, because I felt I had to Continue reading...

---

Voice Phishing Campaigns Using Access Keys

The phishing attack starts with an HTML file disguised as a voice message, which leads to the download of a file hosted on a disguised AWS URL. The attackers initially impersonate Zoom but later switch to spoofing Outlook and Teams login pages.

---

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

Microsoft has announced that it plans to eliminate NT LAN Manager (NTLM) in Windows 11 in the future, as it pivots to alternative methods for authentication and bolster security. "The focus is on strengthening the Kerberos authentication protocol, which has been the default since 2000, and reducing reliance on NT LAN Manager (NTLM)," the tech giant said. "New features for Windows 11 include

---

Kwik Trip IT Systems Outage Caused by Mysterious ‘Network Incident’

The outages have affected various operations, such as new orders, payments, and access to support systems, leading to customer frustration and the posting of signs by employees.

---

“EtherHiding” — Hiding Web2 Malicious Code in Web3 Smart Contracts

A new malware campaign called "EtherHiding" has emerged, using BSC contracts to host parts of a malicious code chain. The campaign starts by hijacking WordPress sites and tricking users into downloading fake browser updates that are actually malware.

---

Juniper Networks Patches Over 30 Vulnerabilities in Junos OS

Six high-severity vulnerabilities, including five that can be exploited remotely, have been addressed by the patches, which could potentially lead to denial of service (DoS) attacks.

---

18% of African banking apps have vulnerable high severity secrets

The security of African financial service applications were analyzed in a recent report by Approov, finding sensitive data was left vulnerable.