Latest Cybersecurity News and Articles

---

Cyber Command to expand 'canary in the coal mine' unit working with private sector

U.S. Cyber Command is doubling the size of a little-known program that serves as one of the military's chief links to private industry in order to bolster the country’s defenses against cyber threats.

---

Manic Menagerie 2.0: The Evolution of a Highly Motivated Threat Actor

The threat actor used a variety of tactics, techniques, and tools to evade detection and maintain access to the compromised networks, including deploying web shells, exploiting vulnerabilities, and attempting local privilege escalation.

---

Dark Power Ransomware on the Ascent – A Technical Insight into 2023’s Latest Ransomware Strain

Dark Power is a highly advanced ransomware strain that uses advanced encryption techniques and targets various industries globally. It stops critical system services and processes, encrypts files, and drops a ransom note with payment instructions.

---

From MuddyC3 to PhonyC2: Iran's MuddyWater Evolves with a New Cyber Weapon

The Iranian state-sponsored group dubbed MuddyWater has been attributed to a previously unseen command-and-control (C2) framework called PhonyC2 that's been put to use by the actor since 2021. Evidence shows that the custom made, actively developed framework has been leveraged in the February 2023 attack on Technion, an Israeli research institute, cybersecurity firm Deep Instinct said in a

---

Security analyst wanted by both Russia and the US

A Russian network security specialist and former editor of Hacker magazine who is wanted by the US and Russia on cybercrime charges has been detained in Kazakhstan as the two governments seek his extradition.

---

31% of breaches are being identified later

A report from Gigamon analyzed the difference between how secure an organization perceives itself to be and how secure it actually is.

---

US Patent and Trademark Office Notifies Filers of Years-Long Data Leak

The U.S. Patent and Trademark Office (USPTO) said in a notice sent to affected trademark applicants that their private domicile address — often their home address — inadvertently appeared in public records between February 2020 and March 2023.

---

Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes

Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse. The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report published last week. Fluhorse was first documented by Check Point in early May 2023, detailing its

---

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts

Tracked as CVE-2023-2982 (CVSS score: 9.8), the authentication bypass flaw impacts all versions, including and prior to 7.6.4. It was addressed on June 14, 2023, with the release of version 7.6.5 following responsible disclosure on June 2, 2023.

---

Enterprise SIEMs miss 76% of all MITRE ATT&CK techniques used

According to industry analysts, the SIEM continues to be the "operating system of the SOC" and is not going away anytime soon.

---

Cyware Raises $30 Million to Accelerate Expansion of AI-Powered Global Cyber Fusion and Threat Sharing Networks

The Cyware platform is used by top Fortune 1000 and MSSP security teams to transform their legacy SOCs into Cyber Fusion Centers and facilitate collaboration and automation in threat intelligence sharing and response.

---

CryptosLabs Scam Ring Targets French-Speaking Investors, Rakes in $525 Million

Cybersecurity researchers have exposed the workings of a scam ring called CryptosLabs that's estimated to have made $525 million in illegal profits by targeting users in French-speaking individuals in France, Belgium, and Luxembourg since April 2018.

---

Submarine Cables at Growing Risk of Cyber-Attacks

Submarine communication cables are a growing target for cyber-threat actors, with potential incidents capable of causing huge global internet disruption, a new report has found.

---

The Right Way to Enhance CTI with AI (Hint: It's the Data)

Cyber threat intelligence is an effective weapon in the ongoing battle to protect digital assets and infrastructure - especially when combined with AI. But AI is only as good as the data feeding it. Access to unique, underground sources is key. Threat Intelligence offers tremendous value to people and companies. At the same time, its ability to address organizations' cybersecurity needs and the

---

North Korean Hacker Group Andariel Strikes with New EarlyRat Malware

The North Korea-aligned threat actor known as Andariel leveraged a previously undocumented malware called EarlyRat in attacks exploiting the Log4j Log4Shell vulnerability last year. "Andariel infects machines by executing a Log4j exploit, which, in turn, downloads further malware from the command-and-control (C2) server," Kaspersky said in a new report. Also called Silent Chollima and Stonefly,

---

Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users' Personal Data

Android-based phone monitoring app LetMeSpy has disclosed a security breach that allowed an unauthorized third-party to steal sensitive data associated with thousands of Android users. "As a result of the attack, the criminals gained access to email addresses, telephone numbers and the content of messages collected on accounts," LetMeSpy said in an announcement on its website, noting the

---

Ukraine's Critical Infrastructure Hit 3,000 Times Since 2022

The State Service of Special Communications and Information Protection of Ukraine warned that such attacks may continue for years even after the fighting on the ground is over.

---

Study Reveals Alarming Gap in SIEM Detection of Adversary Techniques

The claims come from CardinalOps’ 2023 Report on State of SIEM Detection Risk, which examined over 4000 detection rules, one million log sources, and various unique log source types from production SIEMs.

---

Vendor Pays $75,000 HIPAA Fine in Data Exfiltration Breach

The Department of Health and Human Services on Wednesday said the HIPAA settlement with iHealth Solutions, which does business as Advantum Health, involved an investigation into the 2017 incident affecting 267 individuals.

---

White House releases cybersecurity budget priorities for FY 2025

The Office of Management and Budget and the Office of the National Cyber Director released a memo outlining five cybersecurity budget priorities for federal departments and agencies for FY 2025 consistent with the National Cybersecurity Strategy.