Latest Cybersecurity News and Articles
27 July 2023
As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even thousands of technologies that make up the patchwork quilt of development and cloud environments, security processes are all too often applied in only the final phases of software development.
Placing security at the very end of the
27 July 2023
Computer security guidelines often become overwhelming and confusing due to the inclusion of excessive information, leading to the most important points being lost in the shuffle.
27 July 2023
Misconfigured and poorly secured Apache Tomcat servers are being targeted as part of a new campaign designed to deliver the Mirai botnet malware and cryptocurrency miners.
The findings come courtesy of Aqua, which detected more than 800 attacks against its Tomcat server honeypots over a two-year time period, with 96% of the attacks linked to the Mirai botnet.
Of these attack attempts, 20% (or
27 July 2023
Mac users are facing increasing threats to their security, with hackers specifically targeting Apple devices using malware such as Geacon, MacStealer, CloudMensis, and JockerSpy, compromising user data and privacy.
27 July 2023
A city court in Moscow on Wednesday convicted Group-IB co-founder and CEO Ilya Sachkov of "high treason" and jailed him for 14 years in a "strict regime colony" over accusations of passing information to foreign spies.
"The court found Sachkov guilty under Article 275 of the Russian Criminal Code (high treason) sentencing him to 14 years of incarceration in a maximum-security jail, restriction
27 July 2023
Proxy services like SocksEscort are exploited by cybercriminals to hide their true location online and engage in malicious activities, making it difficult to trace their actions back to the original source.
27 July 2023
Despite the decline in global ransomware attempts (-41%), a variety of other attacks have trended up globally, including cryptojacking (+399%), IoT malware (+37%), and encrypted threats (+22%), according to SonicWall.
27 July 2023
In a research note posted Wednesday, Wiz calculated that more than 60 percent of AWS environments are running EC2 instances with Zen 2 CPUs and may therefore be affected by the use-after-free memory corruption bug.
27 July 2023
The US Securities and Exchange Commission (SEC) has adopted new rules requiring publicly listed firms to disclose serious incidents within four days. The regulator voted 3-2 to adopt the rules.
27 July 2023
Two recent flaws tracked as CVE-2023-32629 and CVE-2023-2640 discovered by Wiz's researchers S. Tzadik and S. Tamari were recently introduced into the operating system, impacting roughly 40% of Ubuntu's userbase.
27 July 2023
The U.S. Securities and Exchange Commission (SEC) on Wednesday approved new rules that require publicly traded companies to publicize details of a cyber attack within four days of identifying that it has a "material" impact on their finances, marking a major shift in how computer breaches are disclosed.
"Whether a company loses a factory in a fire — or millions of files in a cybersecurity
26 July 2023
President Biden has nominated Harry Cocker, Jr. for National Cyber Director. From 2017 to 2019, Coker served as the Executive Director of the NSA.
26 July 2023
Protect AI announced that it raised $35 million in a Series A round led by Evolution Equity Partners with participation from Salesforce Ventures, Acrew Capital, boldstart ventures, Knollwood Capital and Pelion Ventures.
26 July 2023
The Russian government today handed down a treason conviction and 14-year prison sentence on Iyla Sachkov, the former founder and CEO of one of Russia's largest cybersecurity firms. Sachkov, 37, has been detained for nearly two years under charges that the Kremlin has kept classified and hidden from public view, and he joins a growing roster of former Russian cybercrime fighters who are now serving hard time for farcical treason convictions.
26 July 2023
According to a recent report by SecurityScorecard, 78% of financial institutions experienced a third-party data breach in the past year.
26 July 2023
The implementation plan for the national cybersecurity strategy assigns specific tasks and responsibilities to various government agencies, highlighting the need for coordination and collaboration.
26 July 2023
Several UK NHS ambulance organizations have been struggling to record patient data and pass it to other providers following a cyberattack aimed at health software company Ortivus.
26 July 2023
Cybercriminals are using artificial intelligence tools like FraudGPT to create sophisticated phishing attacks and other malicious activities, posing a significant threat to organizations.
26 July 2023
Sweeping federal privacy legislation now under debate in Congress is expected to move oversight of the telecom industry’s privacy practices from the FCC to the FTC, a shift that has long been a priority for telecom companies.
26 July 2023
Chad LeMaire has been hired as CSO at Echelon Risk + Cyber. LeMaire is a senior cybersecurity executive and CIO with more than 30 years of experience.