Latest Cybersecurity News and Articles

---

Judge Denies Class Certification in Blackbaud Hack Lawsuit

The judge said the plaintiffs did not show an "administratively feasible" way for the court to determine whether a particular individual is a class member without extensive and individualized fact-finding.

---

Latrodectus Malware Loader Emerges as Potential Replacement for IcedID

Researchers have observed a surge in email phishing campaigns delivering Latrodectus, a new malware loader believed to be the successor to the IcedID malware, which is capable of deploying additional payloads such as QakBot, DarkGate, and PikaBot.

---

The Importance of Access Controls in Incident Response

Adequate IAM policies are essential for incident management tooling to ensure the right people can quickly address issues without being blocked. Authentication verifies a person's identity, while authorization manages permissions and access levels.

---

Grandoreiro Banking Trojan is Back With Major Updates

The Grandoreiro banking Trojan has resurfaced with major updates, including enhanced functionality and the ability to target over 1500 global banking applications and websites in more than 60 countries, making it a more potent threat.

---

Addressing the Cybersecurity Vendor Ecosystem Disconnect

Experts highlight the need for better collaboration within the cybersecurity vendor ecosystem to help security teams defend against increasing automated, machine-generated cyberattacks.

---

Kinsing Hacker Group Expands its Cryptoming Botnet Network with More Vulnerability Exploits

The Kinsing hacker group has demonstrated its ability to continuously evolve and adapt, quickly integrating newly disclosed vulnerabilities into its exploit arsenal to expand its cryptojacking botnet across various operating systems and platforms.

---

White House Unveils AI Safety Framework for US Workers

The White House unveiled a framework to protect U.S. workers from AI risks, emphasizing health and safety rights, governance, human oversight, and transparency as organizations adopt new technologies.

---

CISA Senior Official Goldstein to Leave Agency in June

Eric Goldstein, the executive assistant director for cybersecurity at the CISA, is leaving the agency in June after playing a crucial role in driving the agency's secure-by-design initiatives and strengthening partnerships with the private sector.

---

Intel Discloses Max Severity Bug in Its AI Model Compression Software

Intel has disclosed a critical vulnerability in its AI model compression software, Intel Neural Compressor, that allows remote attackers to execute arbitrary code on affected systems.

---

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

Multiple threat actors are weaponizing a design flaw in Foxit PDF Reader to deliver a variety of malware such as Agent Tesla, AsyncRAT, DCRat, NanoCore RAT, NjRAT, Pony, Remcos RAT, and XWorm. "This exploit triggers security warnings that could deceive unsuspecting users into executing harmful commands," Check Point said in a technical report. "This exploit has been used by multiple

---

Are All Linux Vendor Kernels Insecure? A New Study Says Yes, but There’s a Fix

A study by CIQ found that Linux vendor kernels, such as those used in Red Hat Enterprise Linux (RHEL), have significant security vulnerabilities due to the backporting process used to maintain stability.

---

Two Students Uncover Security Bug That Could Let Millions Do Their Laundry for Free

Two students at UC Santa Cruz, Alexander Sherbrooke and Iakov Taranenko, discovered a security vulnerability in the API used by CSC ServiceWorks' mobile app that allows anyone to remotely operate the company's laundry machines for free.

---

Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

All developers want to create secure and dependable software. They should feel proud to release their code with the full confidence they did not introduce any weaknesses or anti-patterns into their applications. Unfortunately, developers are not writing their own code for the most part these days. 96% of all software contains some open-source components, and open-source components make

---

UK Government Publishes AI Cybersecurity Guidance

The UK government has released guidance to help AI developers and vendors protect their AI models from hacking and potential sabotage, with the goal of transforming this guidance into a global standard to promote security by design in AI systems.

---

Researchers Report High-Impact Cat-Phishing Targeting Users

HP's new report reveals that cybercriminals are increasingly using "cat-phishing" techniques, exploiting open redirects in legitimate websites to deceive users and deliver malware.

---

Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

A "multi-faceted campaign" has been observed abusing legitimate services like GitHub and FileZilla to deliver an array of stealer malware and banking trojans such as Atomic (aka AMOS), Vidar, Lumma (aka LummaC2), and Octo by impersonating credible software like 1Password, Bartender 5, and Pixelmator Pro. "The presence of multiple malware variants suggests a broad cross-platform targeting

---

CISA Issues Guidance to Help Federal Agencies Better Encrypt DNS Traffic

The CISA has issued new guidance to help federal civilian agencies better encrypt their Domain Name System (DNS) traffic as part of a broader effort to improve the security posture of their internal networks and meet a zero trust deadline this fall.

---

CISA Warns of Hackers Exploiting Chrome, EoL D-Link Bugs

CISA has added a high-severity vulnerability (CVE-2024-4761) in Chrome's V8 JavaScript engine to its 'Known Exploited Vulnerabilities' catalog, which is being actively exploited.

---

Norway Recommends Replacing SSL VPN to Prevent Breaches

The Norwegian NCSC recommends organizations replace SSL VPN/WebVPN solutions with more secure alternatives, like IPsec with IKEv2, by 2025 to prevent breaches from repeated vulnerabilities.

---

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Cybersecurity researchers have observed a spike in email phishing campaigns starting early March 2024 that delivers Latrodectus, a nascent malware loader believed to be the successor to the IcedID malware. "These campaigns typically involve a recognizable infection chain involving oversized JavaScript files that utilize WMI's ability to invoke msiexec.exe and install a remotely-hosted MSI