Latest Cybersecurity News and Articles

---

48% of executives focus AI strategy on SaaS applications

According to the report, more than 90% of enterprises are currently experiencing limitations integrating AI into their technology stack.

---

The UK has seen an increase in cyberattacks against higher education

A recent report discusses the rise in attacks on higher education institutions in the UK, highlighting the need for cybersecurity strategies. 

---

Russia-based LockBit ransomware hackers attempt comeback

Gang sets up new site on dark web and releases rambling statement explaining how it was infiltrated by law enforcement agenciesThe LockBit ransomware gang is attempting a comeback days after its operations were severely disrupted by a coordinated international crackdown.The Russia-based group has set up a new site on the dark web to advertise a small number of alleged victims and leak stolen data, as well as releasing a rambling statement explaining how it had been hobbled by the UK’s National Crime Agency, the FBI, Europol and other police agencies in an operation last week. Continue reading...

---

HHS OCR Tells Congress it Needs More Funding for HIPAA Work

The number of reported health data breaches and HIPAA complaints has been increasing, posing a significant challenge for the Department of Health and Human Services' Office for Civil Rights to keep up with their workload.

---

Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI

The tool can be used to assess the robustness of large language model (LLM) endpoints against various harm categories, such as fabrication, misuse, prohibited content, security harms, and privacy harms.

---

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Ukrainian entities based in Finland have been targeted as part of a malicious campaign distributing a commercial remote access trojan known as Remcos RAT using a malware loader called IDAT Loader. The attack has been attributed to a threat actor tracked by the Computer Emergency Response Team of Ukraine (CERT-UA) under the moniker UAC-0184. "The attack, as part of the IDAT Loader, used

---

California AG Settles with DoorDash Over Selling Consumer Data Without Notice

The settlement includes a $375,000 civil penalty, a review of vendor agreements, and the requirement to provide annual reports on potential sale or sharing of consumer information.

---

8,000+ Subdomains of Trusted Brands Hijacked for Massive Spam Operation

More than 8,000 subdomains belonging to legitimate brands and institutions have been hijacked as part of a sophisticated distribution architecture for spam proliferation and click monetization. Guardio Labs is tracking the coordinated malicious activity, which has been ongoing since at least September 2022, under the name SubdoMailing. The emails range from "counterfeit package delivery alerts

---

CISA, EPA, FBI Publish Top Cyber Steps for Water System Operators

Water and wastewater systems need to enhance their cybersecurity measures to protect against potential cyberattacks due to vulnerabilities in their operational technology (OT) and information technology (IT) systems.

---

Change Healthcare provides update on cyberattack

Change Healthcare, a technology company primarily used for pharmaceutical communication, has notified users and patients of a cyberattack.

---

North Korean Hackers Targeting Developers with Malicious npm Packages

The malicious packages contained scripts capable of stealing credentials from web browsers, downloading additional harmful scripts, and establishing connections to known North Korean threat actors.

---

Update: Authorities Uncover 30,000 Bitcoin Wallet Addresses Linked to LockBit

Law enforcement's takedown of LockBit's infrastructure revealed 2,200 unspent bitcoins worth over $110 million, highlighting the extensive scale of the group's operations.

---

Canada: RCMP Investigating Cyberattack as its Website Remains Down

The RCMP website was down due to the cyber incident, with pages being redirected to an install.php page that does not exist, indicating potential issues with website configuration.

---

New research finds gaps in secure access to OT environments

Though historically isolated, OT systems are now experiencing increased connectivity that introduces new risks. 

---

LockBit Ransomware Operation Relaunches Dark Web Leak Site

The Russian-speaking ransomware group LockBit has announced its return to hacking after a law enforcement operation, Operation Cronos, targeted the group. The group's leader, LockBitSupp, has vowed to continue hacking despite the takedown.

---

North Korean Hackers Targeting Developers with Malicious npm Packages

A set of fake npm packages discovered on the Node.js repository has been found to share ties with North Korean state-sponsored actors, new findings from Phylum show. The packages are named execution-time-async, data-time-utils, login-time-utils, mongodb-connection-utils, and mongodb-execution-utils. One of the packages in question, execution-time-async, masquerades as its legitimate

---

SVR cyber actors adapt tactics for initial cloud access

How SVR-attributed actors are adapting to the move of government and corporations to cloud infrastructure.

---

SVR cyber actors adapt tactics for initial cloud access

How SVR-attributed actors are adapting to the move of government and corporations to cloud infrastructure.

---

Hackers Leak 2.5 Million Private Plane Owners’ Data Linked to LA International Airport Breach

IntelBroker successfully breached the Los Angeles International Airport's CRM system, obtaining 2.5 million sensitive records, highlighting the critical need for organizations to strengthen cybersecurity measures against skilled hackers.

---

FTC to Ban Avast From Selling Browsing Data for Advertising Purposes

The U.S. Federal Trade Commission (FTC) has ordered Avast to pay $16.5 million and banned the company from selling users' web browsing data or licensing it for advertising purposes.