Latest Cybersecurity News and Articles


New Bill Would Create a Governing Body for Water System Cyber Standards

17 April 2024
A measure led by two House Republicans would enable the Environmental Protection Agency to certify a governing body to develop and recommend cybersecurity requirements for water treatment and wastewater systems.

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

17 April 2024
Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. The vulnerability (CVE-2023-22518) allows an unauthenticated attacker to reset Confluence and create an administrator account.

Pentesting accounts for an average of 13% of total IT security budgets

17 April 2024
A recent report has emphasized the prevalence and importance of pentesting among enterprise security teams. 

GenAI: A New Headache for SaaS Security Teams

17 April 2024
The introduction of Open AI’s ChatGPT was a defining moment for the software industry, touching off a GenAI race with its November 2022 release. SaaS vendors are now rushing to upgrade tools with enhanced productivity capabilities that are driven by generative AI. Among a wide range of uses, GenAI tools make it easier for developers to build software, assist sales teams in mundane email writing,

Several GTKWave Vulnerabilities Fixed in Debian

17 April 2024
Recently, the Debian security team fixed several issues in GTKWave, an open-source waveform viewer for VCD files. These vulnerabilities, if exploited, could result in the execution of arbitrary code, posing a significant risk to users.

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

17 April 2024
Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. The attacks leverage CVE-2023-22518 (CVSS score: 9.1), a critical security vulnerability impacting the Atlassian Confluence Data Center and Server that allows an unauthenticated attacker to reset Confluence and create an administrator account. Armed with this access, a

T-Mobile, Verizon Workers Get Texts Offering $300 for SIM Swaps

17 April 2024
According to many reports, this is part of a campaign targeted at current and former mobile carrier workers who could have access to the systems required to perform a SIM swap.

Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

17 April 2024
Cybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads. The activity entails the exploitation of CVE-2023-48788 (CVSS score: 9.3), a critical SQL injection flaw that could permit an unauthenticated attacker to execute unauthorized code or

Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread

17 April 2024
Recently, FortiGuard Labs observed multiple attacks focusing on this year-old vulnerability, spotlighting botnets like Moobot, Miori, the Golang-based agent “AGoent,” and the Gafgyt Variant.

Update: Researchers Released Exploit Code for Actively Exploited Palo Alto Networks PAN-OS Bug

17 April 2024
Researchers at watchTowr Labs have released a technical analysis of the vulnerability CVE-2024-3400 in Palo Alto Networks’ PAN-OS and a proof-of-concept exploit that can be used to execute shell commands on vulnerable firewalls.

BreachForums Down, But Not Out: Hackers Claim Attack, Admins Remain Unfazed

17 April 2024
The domain of the notorious BreachForums data leak and hacking forum has been taken down by rival threat actors. The threat actor group, R00TK1T, along with the Cyber Army of Russia, announced a breach of user data following the takedown.

Misinformation and Hacktivist Campaigns Targeting the Philippines Skyrocket

17 April 2024
Amidst rising tensions with China in the South China Sea, Resecurity has observed a significant spike in malicious cyber activity targeting the Philippines in Q1 2024, increasing nearly 325% compared to the same period last year.

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

17 April 2024
Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since at least March 18, 2024. "These attacks all appear to be originating from TOR exit nodes and a range of other anonymizing tunnels and proxies," Cisco Talos said. Successful attacks could

From Social Engineering to DMARC Abuse: TA427’s Art of Information Gathering

17 April 2024
To craftily pose as its chosen personas, TA427 uses a few tactics including DMARC abuse in concert with free email addresses, typosquatting, and private email account spoofing.

Top Officials Again Push Back on Ransom Payment Ban

16 April 2024
Due to multiple reasons, the Institute for Security and Technology’s Ransomware Task Force threw cold water on the need for a ransomware payment ban in a report released Wednesday.

Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown

16 April 2024
Two individuals have been arrested in Australia and the U.S. in connection with an alleged scheme to develop and distribute a remote access trojan called Hive RAT (previously Firebird).

Report: Bad Bots Drive 10% Annual Surge in Account Takeover Attacks

16 April 2024
Internet traffic associated with malicious bots now accounts for a third (32%) of the total, driving a 10% year-on-year (YoY) increase in account takeover (ATO) attacks last year, according to Imperva.

FTC Bans Online Mental Health Firm From Sharing Certain Data

16 April 2024
The FTC in its complaint against Cerebral Inc. and the company's former CEO Kyle Robertson, alleges unfair or deceptive practice violations of the FTC Act and the Opioid Act, which pertains to substance use disorder treatment services.

Microsoft will Limit Exchange Online Bulk Emails to Fight Spam

16 April 2024
"Exchange Online enforces a Recipient Rate limit of 10,000 recipients. The 2,000 ERR limit will become a sub-limit within this 10,000 Recipient Rate limit," the Exchange Team said on Monday.

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

16 April 2024
New cybersecurity research has found that command-line interface (CLI) tools from Amazon Web Services (AWS) and Google Cloud can expose sensitive credentials in build logs, posing significant risks to organizations.