Latest Cybersecurity News and Articles

---

Us Military Notifies 20,000 of Data Breach After Cloud Email Leak

The U.S. Department of Defense has notified around 20,600 individuals that their personal information was exposed in an email data spill due to a misconfigured cloud email server hosted on Microsoft's platform.

---

Encryption Vital For Right to Privacy, European Court Rules

The European Court of Human Rights ruled in favor of a Russian petitioner who challenged a Kremlin rule requiring telecom firms to provide backdoor access to servers for law enforcement data collection.

---

North Korea Turns to Designing Malware-Infected Gambling Websites for Cash

The operation is carried out by an IT organization called "Gyeongheung," affiliated with North Korea's secretive Office 39. These websites are sold for $5,000 a month, with additional tech support for $3,000.

---

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

The Russia-linked threat actor known as Turla has been observed using a new backdoor called TinyTurla-NG as part of a three-month-long campaign targeting Polish non-governmental organizations in December 2023. "TinyTurla-NG, just like TinyTurla, is a small 'last chance' backdoor that is left behind to be used when all other unauthorized access/backdoor mechanisms have failed or been

---

New Jersey Law Enforcement Officers Sue 118 Data Brokers for Not Removing Personal Information

The lawsuits filed against data brokers in New Jersey highlight the need for stronger regulation of data brokers to protect the privacy of law enforcement personnel and all Americans.

---

Corporate Users Getting Tricked into Downloading AnyDesk

Hackers are tricking victims into downloading an outdated but legitimate AnyDesk executable by directing them to fake websites posing as financial institutions. Once the program is run, attackers can gain control of the victim's machine.

---

Hackers got nearly 7 million people’s data from 23andMe. The firm blamed users in ‘very dumb’ move

The company pointed at people who ‘failed to update their passwords’ as sensitive data was offered for sale on forumsThree years ago, a man in Florida named JL decided, on a whim, to send a tube of his spit to the genetic testing site 23andMe in exchange for an ancestry report. JL, like millions of other 23andMe participants before him, says he was often asked about his ethnicity and craved a deeper insight into his identity. He said he was surprised by the diversity of his test results, which showed he had some Ashkenazi Jewish heritage.JL said he didn’t think much about the results until he learned of a huge breach at the company that exposed the data of nearly 7 million people, about half of the company’s customers. Worse, he later learned of a hacker going by the pseudonym “Golem” who had offered to sell the names, addresses and genetic heritage reportedly belonging to 1 million 23andMe customers with similar Ashkenazi Jewish heritage on a shadowy dark web forum. Suddenly, JL worried his own flippant decision to catalog his genes could put him and his family at risk. Continue reading...

---

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

A reverse engineering of the firmware running on Ivanti Pulse Secure appliances has revealed numerous weaknesses, once again underscoring the challenge of securing software supply chains. Eclypsiusm, which acquired firmware version 9.1.18.2-24467.1 as part of the process, said the base operating system used by the Utah-based software company for the device is CentOS 6.4. "Pulse Secure runs an

---

CISA Reveals JCDC’s 2024 Cybersecurity Priorities

The priorities focus on defending against Advanced Persistent Threat (APT) operations, raising cybersecurity standards for critical infrastructure, and anticipating emerging technology risks.

---

German Battery Maker Varta Halts Production After Cyberattack

The company has not yet determined the extent of the damage caused by the attack. VARTA is currently focused on ensuring data integrity and has formed a task force to aid in system restoration.

---

Report: Threat Actors Intensify Focus on NATO Member States

A report from Flare indicates that Initial Access Brokers (IABs) are increasingly targeting entities within NATO member states through various techniques such as spear-phishing and exploiting vulnerabilities.

---

GoldPickaxe Trojan Uses Biometric Data and Deepfake Tech to Scam Banks

The trojan captures facial biometric data to create deepfake videos for bypassing banking logins, demonstrating a high level of sophistication and operational maturity by the cybercriminal group GoldFactory.

---

Asset Management Firm Armis Acquires Honeypot Maker CTCI

Armis acquired CTCI, a cybersecurity startup, in a deal worth nearly $20 million. The acquisition aims to integrate CTCI's technology into Armis' Centrix platform to enhance early warning cyber intelligence capabilities.

---

Cybercriminals found innovative ways to infect endpoints in 2023

Attack methods used by cybercriminals in Q4 of 2023 reveal evolving trends. 

---

ALPHV Ransomware Claims Hit on Canada’s Trans-Northern Pipelines

TNPI's internal network was breached by the ALPHV/BlackCat ransomware gang, leading to the potential theft of 183GB of company documents and contact information for TNPI employees.

---

Two Queens Men Sentenced for Hacking Into JFK Airport Taxi Dispatch System

Two men, Daniel Abayev and Peter Leyman, were sentenced to prison for hacking into the taxi dispatch system at JFK Airport in New York City. They exploited the system to allow certain drivers to skip ahead in the pickup line in exchange for payment.

---

How Nation-State Actors Target Your Business: New Research Exposes Major SaaS Vulnerabilities

With many of the highly publicized 2023 cyber attacks revolving around one or more SaaS applications, SaaS has become a cause for genuine concern in many boardroom discussions. More so than ever, considering that GenAI applications are, in fact, SaaS applications. Wing Security (Wing), a SaaS security company, conducted an analysis of 493 SaaS-using companies in Q4 of 2023. Their study

---

Romantic AI Chatbots Fail the Security and Privacy Test

Most relationship chatbots lack transparency on security management, encryption use, and data privacy, raising concerns about the potential for data misuse and manipulation of users.

---

Update: LockBit Claims Ransomware Attack on Fulton County, Georgia

The county's website still shows the initial alert about the system outage, and some services, like property tax and water billing, remain offline. The hackers claim to have stolen sensitive data and threaten to release it if a ransom is not paid.

---

Cybercriminals Get Productivity Boost With AI

Cybercriminals are using generative AI tools to create convincing face swaps and exploit loopholes in biometric systems, posing a significant threat to identity verification.