Latest Cybersecurity News and Articles


Ransomware Gang Targets IT Workers With New SharpRhino Malware

06 August 2024
The Hunters International ransomware group is using a new C# remote access trojan named SharpRhino to target IT workers and breach corporate networks. It is distributed through a typosquatting site posing as Angry IP Scanner's website.

Cyberattacks Still Ravage Schools, Defying White House Efforts Launched Last Year

06 August 2024
Last year, the White House launched an initiative to strengthen school cybersecurity, but cyberattacks on schools persist. Private sector resources have been utilized by thousands of school districts to enhance their defenses.

48% of healthcare organizations are using AI to manage cyber risk

06 August 2024
A recent cybersecurity report found that 83% of businesses recognize the importance of informing their supply chain about how AI is being used.

Email attacks rose by 293% compared to the first half of 2023

06 August 2024
A new report emphasizes emerging cybersecurity trends related to ransomware, phishing, email attacks and more.

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

06 August 2024
The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns. The packages in question, harthat-api and harthat-hash, were published on July 7, 2024, according to Datadog Security Labs. Both the libraries did not attract

Suspicious Minds: Insider Threats in The SaaS World

06 August 2024
Everyone loves the double-agent plot twist in a spy movie, but it’s a different story when it comes to securing company data. Whether intentional or unintentional, insider threats are a legitimate concern. According to CSA research, 26% of companies who reported a SaaS security incident were struck by an insider.  The challenge for many is detecting those threats before they lead to full

Around 20K Ubiquiti IoT Cameras & Routers are Sitting Ducks for Hackers

06 August 2024
Around 20,000 Ubiquiti IoT cameras and routers are at risk due to a vulnerability that has been known for five years. Researchers have found that despite patches being available, many devices are still vulnerable.

New Android Spyware LianSpy Evades Detection Using Yandex Cloud

06 August 2024
Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021. Cybersecurity vendor Kaspersky, which discovered the malware in March 2024, noted its use of Yandex Cloud, a Russian cloud service, for command-and-control (C2) communications as a way to avoid having a dedicated infrastructure and evade detection. "This threat is

Google Fixes Android Kernel Zero-Day Exploited in Targeted Attacks

06 August 2024
Google has patched a zero-day vulnerability in the Android kernel that was being exploited in targeted attacks. The vulnerability, tracked as CVE-2024-36971, allows for arbitrary code execution without user interaction on unpatched devices.

Mint Stealer: New MaaS Malware Threatens Confidential Data

06 August 2024
A new MaaS malware known as Mint Stealer has emerged, threatening confidential data. This malware, identified by experts from Cyfirma, is designed to steal a wide range of information by employing advanced encryption and obfuscation techniques.

Researchers Warn of a New Critical Apache OFBiz Flaw

06 August 2024
The vulnerability allows unauthenticated users to execute screen rendering code under certain conditions in versions up to 18.12.14, with version 18.12.15 addressing the issue.

Google Patches New Android Kernel Vulnerability Exploited in the Wild

06 August 2024
Google has addressed a high-severity security flaw impacting the Android kernel that it has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. "There are indications that CVE-2024-36971 may be under limited, targeted exploitation," the tech giant noted in its monthly Android security

New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

06 August 2024
A new zero-day pre-authentication remote code execution vulnerability has been disclosed in the Apache OFBiz open-source enterprise resource planning (ERP) system that could allow threat actors to achieve remote code execution on affected instances. Tracked as CVE-2024-38856, the flaw has a CVSS score of 9.8 out of a maximum of 10.0. It affects Apache OFBiz versions prior to 18.12.15. "The

Low-Drama ‘Dark Angels’ Reap Record Ransoms

05 August 2024
A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. Security experts say the Dark Angels have been around since 2021, but the group doesn't get much press because they work alone and maintain a low profile, picking one target at a time and favoring mass data theft over disrupting the victim's operations.

US Senate Confirms First DOD Cyber Policy Chief

05 August 2024
The Senate has confirmed Michael Sulmeyer as the first cyber policy chief at the Defense Department, where he will serve as the assistant secretary of Defense for cyber policy.

More Legal Records Stolen in 2023 Than Previous 5 Years Combined

05 August 2024
The sensitive nature of legal data makes law firms lucrative targets for hackers, who aim to access valuable information for specific purposes. Despite the costly demands, firms face the dilemma of paying the ransom or risking backlash from clients.

Organizations Fail to Log 44% of Cyberattacks, Major Exposure Gaps Remain

05 August 2024
According to Picus Security, organizations are failing to detect 44% of cyberattacks, revealing major exposure gaps. 40% of environments tested allowed for attack paths leading to domain admin access.

99% of Global 2000 organizations are linked to a supply chain breach

05 August 2024
99% of Global 2000 organizations have been directly linked to a supply chain breach.

Israeli Hacktivist Group Claims it Took Down Iran’s Internet

05 August 2024
WeRedEvils announced their intention to target Iranian systems on Telegram, claiming their attack was successful in infiltrating Iran's computer systems, stealing data, and causing the outage.

US Sues TikTok for Violating Children Privacy Protection Laws

05 August 2024
The lawsuit alleges that TikTok collected personal information from children under 13 without parental consent, failed to delete children-created accounts, and misled parents about data collection.