Latest Cybersecurity News and Articles

---

Big Cyberespionage Attack Against Japan Attributed to China

Classified military networks run by Japan reportedly suffered a massive breach in 2020 at the hands of a Chinese cyberespionage group that proved tough to eject even after being discovered.

---

Android 14 Introduces First-Of-Its-Kind Cellular Connectivity Security Features

Android 14 introduces new security measures to mitigate the risks associated with 2G networks, allowing users and enterprises to disable 2G connectivity and protect against potential attacks.

---

Lockbit Threatens to Leak Medical Data of Cancer Patients Stolen From Varian Medical Systems

Lockbit has fixed the deadline for the ransom payment on August 17, 2023. If confirmed the incident could have a dramatic impact on the privacy of cancer patients. The company has yet to disclose the security incident.

---

China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign

Hackers associated with China's Ministry of State Security (MSS) have been linked to attacks in 17 different countries in Asia, Europe, and North America from 2021 to 2023. Cybersecurity firm Recorded Future attributed the intrusion set to a nation-state group it tracks under the name RedHotel (previously Threat Activity Group-22 or TAG-222), which overlaps with a cluster of activity broadly

---

For TSA’s Updated Pipeline Security Directive, Consistency and Collaboration are Key

This most recent update does not vacate previously established requirements in the simple pursuit of change. Instead, the new directive pursues incremental change that builds on but does not abandon previous requirements.

---

SESARAM Confirms Cyberattack and Suspends Non-Urgent Activity

SESARAM issued a statement confirming the occurrence of a “deliberate and malicious cyberattack with the sole objective of causing damage and disrupting the normal functioning of the Regional Health Service of the Autonomous Region of Madeira”.

---

Lawmaker Quizzes Google on 'Guardrails' for AI in Healthcare

Sen. Mark Warner sent a letter quizzing Google CEO Sundar Pichai about how the tech giant is applying privacy, trust, and ethical "guardrails" around the development and use of its generative AI product, Med-PaLM 2, in healthcare settings.

---

UK Voters’ Data Exposed in Electoral Commission Cyberattack

The malicious actors accessed “reference copies” of the electoral registers, held by the Commission for research purposes and to enable permissibility checks on political donations.

---

Organizations concerned about enterprise security from unsafe VPNs

A recent report reveals that organizations have concerns about their network security due to the risks from VPNs.

---

Tesla Infotainment Jailbreak Unlocks Paid Features, Extracts Secrets

Researchers from the Technical University of Berlin have developed a method to jailbreak the AMD-based infotainment systems used in all recent Tesla car models and make it run any software they choose.

---

Police officers in Northern Ireland may leave force or move after data breach

Serving PSNI members and staff fear that they could be attacked or intimidated after their personal information was posted online in errorPolice officers in Northern Ireland may consider leaving the force or moving home after an unprecedented data breach disclosed details of more than 10,000 officers and staff, it has been claimed.Political leaders and police representatives on Wednesday grappled with the security and financial implications of an error that could expose officers, including those who work undercover, to terrorist intimidation and attack. Continue reading...

---

QakBot Malware Operators Expand C2 Network with 15 New Servers

A majority of the bot C2 servers, which communicate with the victim hosts, are located in India and the U.S. Destination IP addresses identified from outbound T2 connections are primarily based in the U.S., India, Mexico, and Venezuela.

---

Continuous Security Validation with Penetration Testing as a Service (PTaaS)

Validate security continuously across your full stack with Pen Testing as a Service. In today's modern security operations center (SOC), it's a battle between the defenders and the cybercriminals. Both are using tools and expertise – however, the cybercriminals have the element of surprise on their side, and a host of tactics, techniques, and procedures (TTPs) that have evolved. These external

---

As Cars Hoover up More and More Drivers’ Data, is it Time to Regulate the Industry?

According to the California Privacy Protection Agency, cars are “connected computers on wheels” and should be treated as such. It recently announced its enforcement division will review the data privacy practices of connected vehicle manufacturers.

---

‘Downfall’ Vulnerability Leaves Billions of Intel CPUs at Risk

The vulnerability, known as Downfall, exploits a technique used to increase performance in the x86 architecture. By sharing a small register buffer, different applications can inadvertently leave data that can be accessed by an attacker.

---

Managing Human Cyber Risks Matters Now More Than Ever

As artificial intelligence amplifies the sophistication and reach of phishing, vishing, and smishing attacks, understanding and managing human cyber risks has become increasingly vital, according to the SANS Institute.

---

U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons

The U.K. Electoral Commission on Tuesday disclosed a "complex" cyber attack on its systems that went undetected for over a year, allowing the threat actors to access years worth of voter data belonging to 40 million people. "The incident was identified in October 2022 after suspicious activity was detected on our systems," the regulator said. "It became clear that hostile actors had first

---

Interpol Takes Down 16shop Phishing-as-a-Service Platform

These platforms are a significant risk as they lower the bar of entry for inexperienced cybercriminals, offering them a simple and cost-effective way to launch phishing attacks with only a few clicks.

---

Electoral Commission and PSNI data breaches: what we know so far

Russia named as likely culprit in cyber-attack on election watchdog, while police service accidentally publishes staff detailsThe UK election watchdog and Northern Ireland’s police service both announced serious data breaches on Tuesday, in the latest example of the vulnerability of personal details to hacks and human error.The UK data regulator, the Information Commissioner’s Office (ICO), is looking at the incidents, which have raised immediate safety concerns over the consequences of leaking personal data. Here is what has happened and what we know so far. Continue reading...

---

Seasoned Cyber Pros are More Complacent in Their Skills Than Junior Staff

Average response time accelerated from 29 to 19 days, from 2021 to 2022, with lessons from Log4j and other high-profile vulnerabilities having a significant impact on urgency levels, according to Immersive Labs.