Latest Cybersecurity News and Articles

---

Update: VMware Confirms Critical vCenter Flaw Now Exploited in Attacks

A critical vCenter Server vulnerability (CVE-2023-34048) is actively being exploited, allowing attackers to execute remote code with high impact and without requiring authentication.

---

FTC bans Texas media company from sharing location data

The Federal Trade Commission (FTC) has banned Texas company InMarket Media from selling precise location data for advertising purposes.

---

Update: LoanDepot Outage Drags Into Second Week After Ransomware Attack

The mortgage and loan company LoanDepot experienced a suspected ransomware attack, leading to difficulties for customers in making mortgage payments and accessing their online accounts.

---

PolyCrypt Runtime Crypter Being Sold on Cybercrime Forums

The underground market for crypters, exemplified by PolyCrypt, facilitates the sale and use of these tools for malicious purposes, highlighting the ongoing challenge of cybercrime.

---

Canadian Man Stuck in Triangle of E-Commerce Fraud

A Canadian man who says he's been falsely charged with orchestrating a complex e-commerce scam is seeking to clear his name. His case appears to involve "triangulation fraud," which occurs when a consumer purchases something online -- from a seller on Amazon or eBay, for example -- but the seller doesn't actually own the item for sale. Instead, the seller purchases the item from an online retailer using stolen payment card data. In this scam, the unwitting buyer pays the scammer and receives what they ordered, and very often the only party left to dispute the transaction is the owner of the stolen payment card.

---

Update: Vans, Supreme Owner VF Corp Says Hackers Stole 35 Million Customers’ Personal Data

The clothing company has not specified the type of data stolen but assured that Social Security numbers, bank account information, and payment card details were not retained.

---

Report: Illicit Cryptocurrency Flows Drop 39% in 2023

In 2023, the flow of cryptocurrency into illicit addresses decreased by nearly 39% compared to the previous year, with sanctioned entities accounting for the majority of activity, according to Chainalysis.

---

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

These applications are found on Chinese pirating websites and contain modified disk image files that download and execute multiple payloads to compromise the victim's machine.

---

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Pirated applications targeting Apple macOS users have been observed containing a backdoor capable of granting attackers remote control to infected machines. "These applications are being hosted on Chinese pirating websites in order to gain victims," Jamf Threat Labs researchers Ferdous Saljooki and Jaron Bradley said. "Once detonated, the malware will download and execute multiple payloads

---

Adversaries Exploit Trends, Target Popular GenAI Apps

Enterprise employees are increasingly accessing generative AI applications, posing a risk of exposing sensitive data, making it crucial for organizations to implement advanced data security measures.

---

Cybercriminals Leverage TeamViewer to Breach Networks in New Ransomware Attacks

Ransomware actors are exploiting TeamViewer to gain access to organization endpoints and attempt to deploy ransomware, highlighting the importance of maintaining strong security practices and using the latest software versions.

---

AHA Warns of Rise in Scams Targeting IT Help Desks for Payment Fraud

The AHA recommends strict IT help desk security protocols and immediate notification to financial institutions and the FBI to mitigate the risk of falling victim to these schemes.

---

NPM Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

In a recent incident, a malicious package called "oscompatible" was uploaded to the npm registry. The package was found to contain a sophisticated remote access trojan for Windows machines.

---

CISA Warns Against New Androxgh0st Malware Attacks

The CISA and the FBI issued a joint warning about the Androxgh0st malware botnet, indicating that threat actors are building a botnet network to extract cloud credentials. Threat actors were also observed using stolen AWS credentials to create new users and user policies on a vulnerable website. The agencies have released IOCs associated with the Androxgh0st malware operation and recommended mitigations.

---

Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

In the current digital landscape, data has emerged as a crucial asset for organizations, akin to currency. It’s the lifeblood of any organization in today's interconnected and digital world. Thus, safeguarding the data is of paramount importance. Its importance is magnified in on-premises Exchange Server environments where vital business communication and emails are stored and managed.  In

---

Kansas State University Cyberattack Disrupts IT Network and Services

Kansas State University is managing a cybersecurity incident that has disrupted various network systems, including VPN, email services, and video platforms, impacting the educational continuity for its 20,000 students and 1,400 academic personnel.

---

Ransomware Attacks Leave Small Business Owners Feeling Suicidal, Report Says

The stress caused by ransomware attacks can lead to burnout and sickness among IT teams, potentially resulting in personnel leaving their jobs or being absent on sick leave.

---

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in Ivanti Endpoint Manager Mobile and MobileIron Core to its list of actively exploited vulnerabilities.

---

Remcos Rat Propagates via Webhards

The Remcos RAT is being distributed in South Korea through webhards, leveraging adult-themed games as a disguise. In this tactic, users are deceived into opening files posing as adult games. This campaign emphasizes the need for heightened vigilance when downloading files from the internet.

---

JPMorgan Ups Cyber Defenses as Scam Attacks Rise

Mary Callahan Erdoes, head of the bank’s asset and wealth management division, highlighted a significant rise in cybercrime, with a 65% increase in fraud losses for U.S. financial institutions from 2022 to 2023.