Latest Cybersecurity News and Articles

---

New Variant of AMOS Stealer Targets Safari Cookies and Crypto Wallets

The new Atomic variant of the AMOS Stealer targets macOS users, combining multiple malware functionalities to steal sensitive data and has an unusual technique of combining Python with Apple Scripting.

---

Airbnb Scammers Pose as Hosts, Redirect Users to Fake Tripadvisor Site

The scammers use emails and fake websites to trick users into making off-platform bookings and sharing their payment card details. Airbnb warns against off-platform activity and urges users to be cautious of emails and websites impersonating it.

---

Okta Reports ‘Minimal’ Financial Impact Following Support Portal Attack

Despite the attack, the company is focusing on enhancing security and regaining customer trust. Okta plans to prioritize security in the upcoming fiscal year, with a $50 million investment in cybersecurity initiatives.

---

JPCERT/CC Warns of Malicious PyPI Packages Created by North Korean Hackers

The malicious packages were disguised as legitimate Python packages, and although they have been removed from PyPI, they were downloaded over 3,000 times, compromising thousands of systems.

---

Kali Linux 2024.1 Released with New Tools, New Look, New Kali NetHunter Kernels

The latest release of Kali Linux, version 2024.1, includes new tools, an updated kernel, and improvements to the desktop environments. The release also features updates to the Kali NetHunter mobile platform.

---

Savvy Seahorse Gang Uses DNS CNAME Records to Power Investor Scams

Personal data of victims is collected through registration forms on fake investment platforms, and the actor tracks user information while preventing revisits from crawlers and security vendors.

---

Lazarus Hackers Exploited Windows Zero-Day to Gain Kernel Privileges

The exploit allowed Lazarus to enhance its FudModule rootkit, enabling it to evade detection and disable security protections. Additionally, a previously undocumented remote access trojan (RAT) used by Lazarus was discovered.

---

Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

The Five Eyes (FVEY) intelligence alliance has issued a new cybersecurity advisory warning of cyber threat actors exploiting known security flaws in Ivanti Connect Secure and Ivanti Policy Secure gateways, noting that the Integrity Checker Tool (ICT) can be deceived to provide a false sense of security. "Ivanti ICT is not sufficient to detect compromise and that a cyber threat actor may be able

---

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

GitHub on Thursday announced that it’s enabling secret scanning push protection by default for all pushes to public repositories. “This means that when a supported secret is detected in any push to a public repository, you will have the option to remove the secret from your commits or, if you deem the secret safe, bypass the block,” Eric Tooley and Courtney Claessens said. Push protection&

---

92% of companies experienced an application-related breach last year

A study reveals that 92% of companies surveyed had experienced a breach in the prior year due to vulnerabilities of applications developed in-house.

---

Fulton County, Security Experts Call LockBit’s Bluff

The ransomware group LockBit told officials with Fulton County, Ga. they could expect to see their internal documents published online this morning unless the county paid a ransom demand. Instead, LockBit removed Fulton County's listing from its victim shaming website this morning, claiming county officials had paid. But county officials said they did not pay, nor did anyone make payment on their behalf. Security experts say LockBit was likely bluffing and probably lost most of the data when the gang's servers were seized this month by U.S. and U.K. law enforcement.

---

Update: BlackCat Ransomware Gang Claims They Stole 6TB of Change Healthcare Data

The BlackCat/ALPHV ransomware gang claimed responsibility for a cyberattack on Optum, affecting the Change Healthcare platform and potentially compromising sensitive data of millions of individuals and organizations.

---

European Diplomats Targeted by SPIKEDWINE Actors with WINELOADER Backdoor

The adversary used a PDF file posing as an invitation from the Ambassador of India to a wine-tasting event, which contained a malicious link leading to the WINELOADER malware.

---

LockBit Ransomware Returns to Attacks With New Encryptors, Servers

LockBit has set up new data leak and negotiation sites, and is actively recruiting experienced pentesters to join their operation, indicating a potential increase in future attacks.

---

Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor

The model’s payload grants the attacker a shell on the compromised machine, enabling them to gain full control over victims’ machines through what is commonly referred to as a “backdoor”.

---

More than 60% of consumers would avoid a retailer post-breach

A recent report studies consumer trends after an organization experiences a data breach, highlighting a breach's impact on reputation and customer base. 

---

GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

GTPDOOR is a new Linux malware designed for telecom networks that leverages the GPRS Tunnelling Protocol (GTP) for command-and-control communications, posing a threat to subscriber information and call metadata.

---

Senator Asks FTC to Investigate Automakers’ Data Privacy Practices

Senator Edward Markey has called for an investigation into the data privacy practices of the automotive industry, urging Federal Trade Commission (FTC) Chair Lina Khan to take action.

---

GitHub Besieged by Millions of Malicious Repositories in Ongoing Attack

The attack involves the automated forking of legitimate repositories, resulting in millions of malicious forks with names identical to the original ones, making detection and removal challenging for GitHub.

---

DoE Invests $45 Million to Prevent Cyberattacks on US Energy Systems

The Department of Energy's Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has allocated $45 million for 16 projects aimed at developing new technologies to prevent cyberattacks and reduce energy disruptions.