Latest Cybersecurity News and Articles

---

Update: IMF Says February Cyberattack Involved Compromise of 11 Email Accounts

The breach was discovered on February 16, 2024, and after an investigation conducted with the help of cybersecurity experts, the nature of the breach was determined, and remediation actions were taken.

---

Pennsylvania’s Scranton School District Dealing with Ransomware Attack

As a result of the attack, some computer systems and services are temporarily disrupted, causing files to be inaccessible and certain functions to operate slower than usual.

---

Inside the Rabbit Hole: BunnyLoader 3.0 Unveiled

The new BunnyLoader variant comes with a Command and Control (C2) update, modularization of the binary, and various modules such as keylogger, stealer, clipper, and DoS functions.

---

Encina Wastewater Authority Allegedly Becomes Latest Victim of BlackByte Ransomware

As of now, the situation regarding the alleged cyberattack on Encina Wastewater Authority remains unconfirmed, and the organization has not issued an official statement or response regarding the claims made by the threat actor.

---

Critical Vulnerability Remains Unpatched in Two Permanently Closed MiniOrange WordPress Plugins

Thousands of WordPress websites are at risk due to critical vulnerabilities in two discontinued MiniOrange plugins, allowing attackers to escalate privileges and compromise sites.

---

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution. Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known as Spectre v1 (CVE-2017-5753). The approach combines speculative execution and race conditions. "All the common synchronization primitives implemented

---

Threat Actors are Turning to Novel Malware as Malicious Attacks Rise

A new report by BlackBerry revealed that 62% of industry-related cyberattacks from September to December 2023 were directed at critical infrastructure providers. The use of novel malware saw a 27% increase.

---

Security experts weigh in on Tik Tok ban

Security leaders offer their insights now that the proposed TikTok ban has passed in the House of Representatives. 

---

MobSF: Open-Source Security Research Platform for Mobile Apps

The Mobile Security Framework (MobSF) offers both static analysis for mobile app binaries and dynamic analysis for Android and iOS applications, streamlining security assessments.

---

Change Healthcare Locates Ransomware Attack Vector

UnitedHealth Group reportedly identified the source of the cyberattack on its subsidiary, Change Healthcare. The company has conducted a forensic analysis and established a safe restore point to move forward with the restoration of data and systems.

---

Scottish Health Service Says ‘Focused and Ongoing Cyber Attack’ May Disrupt Services

In response to the cyberattack, Neil Gray, the Scottish health secretary, confirmed that established procedures are being followed to address the situation, and support is being provided to NHS Dumfries and Galloway.

---

Alabama Suffered DDoS Cyberattack by Pro-Russian Hacker Group

Alabama's state and city governments have been grappling with cyber incidents and network disruptions, impacting critical systems such as law enforcement's ability to verify stolen vehicles.

---

Google Safe Browsing Makes Real-Time Protection Private

The Standard version of Safe Browsing has been updated to support real-time data lookup, as many unsafe sites exist for less than 10 minutes, slipping through locally stored lists.

---

FCC Adopts Voluntary ‘Cyber Trust Mark’ Labeling Rule for IoT Devices

The FCC intends for the label to apply to a range of products, including home security cameras, internet-connected appliances, fitness trackers, garage door openers, baby monitors, and voice-activated devices.

---

Phishing attempts increased by 40% in 2023

Phishing emails were on the rise in 2023, and security leaders should ensure their organization can spot the signs of a scam. 

---

Third-Party ChatGPT Plugins Could Lead to Account Takeovers

Cybersecurity researchers have found that third-party plugins available for OpenAI ChatGPT could act as a new attack surface for threat actors looking to gain unauthorized access to sensitive data. According to new research published by Salt Labs, security flaws found directly in ChatGPT and within the ecosystem could allow attackers to install malicious plugins without users' consent

---

TikTok Faces US Ban as House Votes to Compel ByteDance to Sell

The US House of Representatives has passed a bill requiring ByteDance, the parent company of TikTok, to sell the social media platform within 165 days or face a complete ban in the United States.

---

Most Widely Distributed Ransomware Now Evades Detection

StopCrypt ransomware, also known as STOP Djvu, has evolved with a new multi-stage execution process involving shellcodes to evade security tools. Unlike ransomware operations targeting businesses, StopCrypt primarily targets consumers.

---

PoC for Critical Arcserve UDP Vulnerabilities Published

Arcserve has addressed critical security vulnerabilities (CVE-2024-0799, CVE-2024-0800) in its Unified Data Protection (UDP) solution, which could be exploited to upload malicious files to the underlying Windows system.

---

DarkGate Campaign Leverages Windows SmartScreen Bypass Flaw

The DarkGate malware operation launched a new wave of attacks exploiting a recently patched Windows Defender SmartScreen vulnerability (CVE-2024-21412). Trend Micro analysts have reported that DarkGate operators are leveraging this vulnerability to enhance their malware distribution efforts, targeting traders' systems with the DarkMe malware. Users are urged to apply the required security patches to stay safe from such attacks.