Latest Cybersecurity News and Articles

---

Why is ‘Juice Jacking’ Suddenly Back in the News?

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about "juice jacking," a term first coined here in 2011 to describe a potential threat of data theft when one plugs their mobile device into a public charging kiosk. It remains unclear what may have prompted the alerts, but the good news is that there are some fairly basic things you can do to avoid having to worry about juice jacking.

---

Researchers Disclosure Cisco ISE Broken Access Control Issue

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to bypass authorization and access system files.

---

Juniper Networks Patches Critical Third-Party Component Vulnerabilities

Networking, cloud, and cybersecurity solutions provider Juniper Networks this week published advisories detailing tens of vulnerabilities found across its product portfolio, including critical bugs in third-party components of Junos OS and STRM.

---

New landscapes in cloud security (2023)

Richard Flanders has 35 years’ experience in advising clients on all aspects of enterprise IT. He has held senior roles at VMware, Fujitsu and Computacenter and others and is currently leading Check Points’ cloud security business in Eastern EMEA and Africa. He has been in this role at Check Point for seven years. In this […] The post New landscapes in cloud security (2023) appeared first on CyberTalk.

---

Privacy-invasive and Clicker Android Adware found in popular apps in South Korea

Some apps were removed from Google Play while others were updated by the official developers. Users are encouraged to update the apps to the latest version to remove the identified threat from their devices.

---

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

---

12,000 Indian Government Websites on Alert for Indonesian Hacking Threat

CERT-In issued an ‘Urgent- High Alert’ warning to all Central and state agencies and departments to be alert of potential attacks by Indonesian hackers and report any such incidents to them immediately.

---

Cyber assets increased by 133% year-over-year

Cloud access for security leaders was analyzed in a recent report by JupiterOne and found that cyber assets increased by 133% year-over-year.

---

Nation-state actors are taking advantage of weak passwords to go after cloud customers, Google says

Weak passwords and other comprises of user identity continue to drive security incidents for Google Cloud customers, with weak passwords accounting for nearly half of the incidents affecting its clients, according to a report released by the company.

---

Biden administration announces plan to protect patient privacy

As abortion access is debated within the United States, concerns have risen over the ability to protect patient privacy, including on mobile devices.

---

47% organizations experienced ransomware attack in the past year

A recent study reveals that security teams are unprepared for ransomware and struggle with increasing regulatory complexity.

---

Bitrue Hot Wallet Exploit Results in $23M Cryptocurrency Theft

The exchange said it will suspend all withdrawals temporarily to conduct additional security checks, and withdrawals are expected to resume on April 18, 2023. The exchange explained that they will compensate all identified users affected in full.

---

Non-internet facing systems have significant risk density

Security leaders work hard to securing potential data vulnerabilities within their organizations using security assessments and penetration tests.

---

Former TSB chief information officer fined $101,000 over IT meltdown in 2018

UK regulators have imposed an £81,000 (~$101,000) fine on a former TSB information officer over the bank’s IT meltdown in 2018 that left millions of customers locked out of their accounts.

---

GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures

“GuLoader, also known as CloudEyE, is a loader malware that is known to deliver additional malware, such as infostealers and Remote Access Trojans (RATs),” wrote eSentire’s Threat Response Unit (TRU).

---

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

The Russia-linked APT29 (aka Cozy Bear) threat actor has been attributed to an ongoing cyber espionage campaign targeting foreign ministries and diplomatic entities located in NATO member states, the European Union, and Africa. According to Poland's Military Counterintelligence Service and the CERT Polska team, the observed activity shares tactical overlaps with a cluster tracked by Microsoft as

---

Five arrested after 33,000 victims lose $98M to online investment fraud

Europol and Eurojust announced today the arrest of five individuals believed to be part of a massive online investment fraud ring with at least 33,000 victims who lost an estimated €89 million (roughly $98 million).

---

Russian APT Hackers Actively Targeting European NATO Allies

The Russian cyberespionage campaign is targeting European government agencies and diplomats to steal Western government intelligence on the war in Ukraine, says the Polish CERT and Military Counterintelligence Service.

---

Beware of Juice Jacking and Impersonation Attacks - Warns FCC and FBI

The FCC warns against using free charging stations at airports, hotels, and shopping centers. It is also advisable to use an electrical outlet instead of USB charging ports to stay safe. Meanwhile, the FBI raises the alarm about adversaries impersonating Chinese officials to target Chinese users in the U.S. 

---

'RTM Locker' Cybercrime Group Now Targets Businesses via Ransomware Affiliates

"The business-like set up of the group, where affiliates are required to remain active or notify the gang of their leave, shows the organizational maturity of the group, as has also been observed in other groups, such as Conti," Trellix reported.