Latest Cybersecurity News and Articles

---

US State Department Warns Employees of Fraud Scheme Targeting Payroll Systems

The State Department alert said that cybercriminals are attempting to use “phishing, email account takeovers, and social engineering” to veer employee payroll deposits into their own bank accounts.

---

Airbus Enhances Cybersecurity Offerings with INFODAS Acquisition

The acquisition is poised to significantly bolster Airbus’ cybersecurity portfolio, a critical component of its strategic vision aimed at enhancing the digital protection of its European and global clientele.

---

Finnish Police Linked APT31 to the 2021 Parliament Attack

The investigation relied on an international information exchange, the National Bureau of Investigation collaborated with international entities and the Finnish Security and Intelligence Service

---

Breaking Boundaries: Mispadu's Infiltration Beyond LATAM

Recently, Morphisec Labs identified a significant increase in activity linked to the Mispadu banking trojan. Initially concentrated on LATAM countries and Spanish-speaking individuals, Mispadu has broadened its scope in the latest campaign.

---

Two Chinese APT Groups Found Targeting ASEAN Entities

Over the past 90 days, Unit 42 researchers identified two Chinese APT groups conducting cyberespionage activities against entities and member countries affiliated with the Association of Southeast Asian Nations (ASEAN).

---

Feds Wave Sticks & Carrots at Health Sector to Bolster Cyber

The Department of Health and Human Services' recently released budget proposal for fiscal 2025 includes $1.3 billion in financial help, such as grants, for hospitals to invest in cybersecurity over the next several years.

---

92% of IT leaders report cyberattacks are more frequent than last year

Cyberattacks are growing in volume and sophistication, and security leaders must adapt to face increasingly complex threats. 

---

TheMoon Malware Infects 6,000 ASUS Routers in 72 Hours for Proxy Service

TheMoon is linked to the "Faceless" proxy service, which uses some of the infected devices as proxies to route traffic for cybercriminals who wish to anonymize their malicious activities.

---

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-source information stealer malware called HackBrowserData and exfiltrate sensitive information in some cases by using Slack as command-and-control (C2). "The information stealer was delivered via a phishing email, masquerading as an invitation letter

---

Tech Industry’s Focus on Innovation Leaves Security Behind

The rapid digital transformation and technological progress within the technology sector have enlarged the attack surface for companies operating in this space, according to Trustwave.

---

Patched Microsoft Edge Flaw Could be Used for Covert Extension Installation

This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly install additional browser extensions with broad permissions without the user’s knowledge.

---

Portugal Forces Worldcoin to Stop Collecting Biometric Data

The Portuguese National Data Protection Commission (Comissão Nacional de Proteção de Dados, or CNPD) announced on March 26 that it ordered Worldcoin to suspend its ‘orb’ device from collecting data in the country.

---

Japan Runs Inaugural Cyber Defense Drills With Pacific Island Nations

Japan held cyber defense exercises with five Pacific island nations last month in an effort to shore up cybersecurity defenses in the region. The cybersecurity exercise event, held in Guam in mid-February, was a first for Japan.

---

CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting the Microsoft Sharepoint Server to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2023-24955 (CVSS score: 7.2), is a critical remote code execution flaw that allows an authenticated attacker with

---

Scammers Exploit Tax Season Anxiety With AI Tools

About 25% of Americans have lost money to online tax scams, according to a McAfee study. Of the people who clicked on fraudulent links from supposed tax services, 68% lost money.

---

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

A now-patched security flaw in the Microsoft Edge web browser could have been abused to install arbitrary extensions on users' systems and carry out malicious actions.  "This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly install additional browser extensions with broad permissions without the user's knowledge," Guardio

---

Hackers Exploit Ray Framework Flaw to Breach Servers, Hijack Computing Resources

A new hacking campaign dubbed "ShadowRay" targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and leak sensitive data from thousands of companies.

---

Report: Only 5% of Boards Have Cybersecurity Expertise

Just 5% of businesses have a cyber expert on the board, despite stronger cybersecurity correlating with significantly higher financial performance, according to a new report by Diligent and Bitsight.

---

Critical infrastructure may be the subject of disruptive cyberattacks

The White House has stated that critical infrastructure may be targeted by malicious actors, and security leaders are sharing their insights on the situation. 

---

Ransomware Attack on The Big Issue, a Street Newspaper Supporting the Homeless

The Big Issue, a street newspaper in the United Kingdom famed for providing homeless people with a legitimate income by paying them as vendors to distribute the magazine, has confirmed being impacted by a cyber incident.