Latest Cybersecurity News and Articles

---

U.S. saw 45% fewer ransomware victims posted on the dark web

The rise in ransomware attacks have changed how security leaders protect their organizations, including filing claims for cyber insurance.

---

Patients angered after Oklahoma allergy clinic blames cyberattack for shutdown

The Oklahoma Institute of Allergy Asthma and Immunology posted a notice on its doors this month saying it will be closing "effective immediately due to a cybersecurity event.” Clinics in the towns of Norman and Yukon were both closed.

---

Dr. Chase Cunningham named VP of Security Market Research at G2

With more than two decades of industry experience, Dr. Chase Cunningham has been appointed Vice President of Security Market Research at G2.

---

Leveraging Dropbox to Soar Into Inbox

The new way that hackers originate BEC 3.0 attacks is through legitimate services. In this attack, hackers create free Dropbox accounts and leverage their domain legitimacy to create pages with phishing embedded within them.

---

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages, social media and online messaging accounts and monetization via advertisements and click fraud,"

---

Russian Hackers Target Ukrainians' Personal Data, Says Kyiv

Ukraine's top cybersecurity agency says Russian hackers took a sudden interest in obtaining personal data and mounted successful attacks against more than one-third of the country's largest insurers.

---

Real estate agents push back against Australian privacy law changes designed to protect personal data

Real Estate Institute of Australia president says additional layer of responsibility could force smaller agencies to close downGet our morning and afternoon news emails, free app or daily news podcastReal estate agents are pushing back against proposed privacy law changes, saying small businesses should not face more red tape to keep customer and tenant data safe.The Real Estate Institute of Australia president, Hayden Groves, said that an “additional layer of responsibility is really not necessary” on top of agents’ existing duties, saying that increased regulatory risks could be “the last straw” for smaller agencies which may shut up shop.Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup Continue reading...

---

Millions of Smartphones Distributed Worldwide With Preinstalled ‘Guerrilla’ Malware

Since 2021, Trend Micro has been tracking a different operation that appears to be linked to Triada. The group behind the campaign is tracked by the cybersecurity firm as Lemon Group and the malware preloaded on devices is called Guerrilla.

---

Royal Ransomware Group Builds Its Own Malware Loader

The Royal ransomware group, which spun off from Conti in early 2022, is refining its downloader using tactics and techniques that appear to draw directly from other post-Conti groups, says Yelisey Bohuslavskiy, chief research officer at Red Sense.

---

Lawmakers advance cyber bills aimed at open-source, satellite vulnerabilities

The House Homeland Security Committee on Wednesday easily advanced legislation to ensure the federal government and critical infrastructure can tap open-source software securely.

---

China-Taiwan Tensions Spark Surge in Cyberattacks on Taiwan

Trellix has observed a surge in malicious emails targeted toward Taiwan, starting April 7 and continuing until April 10. The number of malicious emails during this time increased to over four times the usual amount.

---

Cyber-Resilience Programs Failing on Poor Visibility

Cyber-resilience has become a top priority for global organizations, but over half (52%) of those with programs are struggling because they lack a comprehensive assessment approach, according to Osterman Research.

---

Malicious Microsoft VSCode Extensions Steal Passwords, Open Remote Shells

According to Check Point, whose analysts discovered the malicious extensions and reported them to Microsoft, the malware enabled the threat actors to steal credentials, system information, and establish a remote shell on the victim's machine.

---

Access to Energy Sector ICS/OT Systems Offered on Hacker Forums

Threat actors have been offering access to energy sector organizations, including industrial control systems (ICS) and other operational technology (OT) systems, according to a new report from Searchlight Cyber.

---

MalasLocker Ransomware Targets Zimbra Servers, Demands Charity Donation

A new ransomware operation is hacking Zimbra servers to steal emails and encrypt files. However, instead of demanding a ransom payment, the threat actors claim to require a donation to charity to provide an encryptor and prevent data leaking.

---

Join This Webinar — Zero Trust + Deception: Learn How to Outsmart Attackers!

Cybersecurity is constantly evolving, but complexity can give hostile actors an advantage. To stay ahead of current and future attacks, it's essential to simplify and reframe your defenses. Zscaler Deception is a state-of-the-art next-generation deception technology seamlessly integrated with the Zscaler Zero Trust Exchange. It creates a hostile environment for attackers and enables you to track

---

Insider threats surge across US CNI as attackers exploit human factors

Economic pressures and remote working could be increasing critical national infrastructure insider threats while nation-state actors and ransomware attacks continue to pose significant risks.

---

ScanSource Says Ransomware Attack Impacted its Systems, Business Operations, and Customer Portals

Starting around May 15th, ScanSource customers contacted BleepingComputer saying they no longer had access to the company's customer portals and websites, concerned that they suffered a cyberattack.

---

Four Countries Join NATO Cyber Defense Center

The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) announced on Wednesday that four more countries have joined as members: Ukraine, Ireland, Japan, and Iceland.

---

How to Reduce Exposure on the Manufacturing Attack Surface

Digitalization initiatives are connecting once-isolated Operational Technology (OT) environments with their Information Technology (IT) counterparts. This digital transformation of the factory floor has accelerated the connection of machinery to digital systems and data. Computer systems for managing and monitoring digital systems and data have been added to the hardware and software used for