Latest Cybersecurity News and Articles

---

New Critical Microsoft Exchange Bug Exploited as Zero-Day

Discovered internally and tracked as CVE-2024-21410, this security flaw can let remote unauthenticated threat actors escalate privileges in NTLM relay attacks targeting vulnerable Microsoft Exchange Server versions.

---

Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

A Chinese-speaking threat actor codenamed GoldFactory has been attributed to the development of highly sophisticated banking trojans, including a previously undocumented iOS malware called GoldPickaxe that's capable of harvesting identity documents, facial recognition data, and intercepting SMS. "The GoldPickaxe family is available for both iOS and Android platforms,"

---

OpenAI Shuts Down Accounts Linked to Five Nation-State Hacking Groups

State-linked hacking groups from China, Russia, Iran, and North Korea were observed using AI technologies to improve reconnaissance, command techniques, and social engineering efforts, posing a potential cybersecurity threat.

---

France Uncovers Russian Disinformation Campaign

The network of disinformation websites, dubbed "Portal Kombat," reproduces content from pro-Russian social media accounts and news agencies, using automation and machine translation to disseminate the content.

---

Water Hydra’s Zero-Day Attack Chain Targets Financial Traders

The Water Hydra APT group utilized CVE-2024-21412 to bypass Microsoft Defender SmartScreen and implant victims with the DarkMe malware, targeting financial market traders.

---

Zoom Patches Critical Privilege Elevation Flaw in Windows Apps

The Zoom desktop and VDI clients, as well as the Meeting SDK for Windows, are vulnerable to an improper input validation flaw, which could allow an unauthenticated attacker to conduct privilege escalation on the target system over the network.

---

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates. Tracked as CVE-2024-21410 (CVSS score: 9.8), the issue has been described as a case of privilege escalation impacting the Exchange Server. "An attacker

---

Power grab: the hidden costs of Ireland’s datacentre boom

Datacentres are part of Ireland’s vision of itself as a tech hub. There are now more than 80, using vast amounts of electricity. Have we entrusted our memories to a system that might destroy them?In the doldrum days between Christmas and New Year, we take a family trip to see a datacentre. Over the past two decades, datacentres have become a common sight on the outskirts of Dublin and many other Irish cities and towns. Situated in industrial business parks, they are easy to miss. But these buildings are critical to the maintenance of contemporary life: inside their walls stand rows and rows of networked servers; inside the servers, terabytes of data flow.It’s a seven-minute drive from where we live now in Artane, Dublin, to the Clonshaugh datacentre, situated in a business park behind Northside shopping centre. Although we live close by, we haven’t driven this way before, and our route takes us through a number of the local authority estates that my husband lived in as a boy. These estates are set on either side of a long, straight road pocked with chicanes to deter joyriders. Even though the housing development sprawls for miles on either side – with large wind-blasted green spaces in between – the houses huddle, squashed together. It looks as if someone has transplanted a warren of inner-city Victorian terraces to this desolate terrain. Continue reading...

---

Report reveals the 5 fraud threats to watch out for in 2024

The report discusses the five fraud threats that are predicted to emerge in 2024. 

---

Phishing attacks increased 106% year over year

According to a recent threat report, detections of phishing attempts increased by 106% year-over-year, while malware detections were up 40%.

---

The FBI warns of the prevalence of romance scams this Valentine's Day

This Valentine's Day, the FBI warns online users about romance scams and the associated losses. 

---

Kent Goodrow appointed Chief Information Security Officer at Systems Engineering

Kent Goodrow has been appointed Chief Information Security Officer at Systems Engineering. Goodrow is pursuing a Master's in Cybersecurity Management.

---

U.S. Internet Leaked Years of Internal, Customer Emails

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishing more than a decade's worth of its internal email -- and that of thousands of Securence clients -- in plain text out on the Internet and just a click away for anyone with a Web browser.

---

Prudential Financial Breached in Data Theft Cyberattack

The company has reported the security breach to law enforcement and regulatory authorities and is conducting an ongoing investigation to assess the full impact of the incident.

---

Atlassian Vulnerability at Fault in GAO Breach

The Government Accountability Office (GAO) suffered a data breach affecting thousands of current and former employees, which was carried out through a vulnerability in the Atlassian Confluence workforce collaboration tool.

---

More Signs of a Qakbot Resurgence

Security researchers have lately observed new builds and incremental changes to the malware, indicating that someone with access to its source code is experimenting with it.

---

Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyberattacks

Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence (AI) and large language models (LLMs) to complement their ongoing cyber attack operations. The findings come from a report published by Microsoft in collaboration with OpenAI, both of which said they disrupted efforts made by five state-affiliated actors that used its

---

55% of generative AI inputs comprised personally identifiable data

A recent report analyzes the trends regarding generative AI usage and how it may influence organizational security. 

---

Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

Cybersecurity researchers have found that it's possible for threat actors to exploit a well-known utility called command-not-found to recommend their own rogue packages and compromise systems running Ubuntu operating system. "While 'command-not-found' serves as a convenient tool for suggesting installations for uninstalled commands, it can be inadvertently manipulated by attackers through the

---

Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs

One of the zero-days, CVE-2024-21412, allows attackers to bypass security features and deploy malware. The other zero-day, CVE-2024-21351, enables attackers to bypass SmartScreen protections and potentially gain remote code execution capabilities.