Latest Cybersecurity News and Articles

---

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

A new Mirai-based botnet called NoaBot is being used by threat actors as part of a crypto mining campaign since the beginning of 2023. “The capabilities of the new botnet, NoaBot, include a wormable self-spreader and an SSH key backdoor to download and execute additional binaries or spread itself to new victims,” Akamai security researcher Stiv Kupchik said in a report shared with The

---

The security year ahead: What will 2024 have in store?

In episode 19 of The Cybersecurity and Geopolitical Discussion, our trio of hosts examine how compelling world events could impact global security.

---

Hacker Claims to Breach Indian ISP Hathway and Leaks Four Million Users' KYC Data

The leaked data includes the personal information of over 41 million Hathway customers, but analysis suggests that the actual number of impacted accounts is around 4 million.

---

anecdotes Raises $25M in Series B Funding

The round was led by Glilot Capital Partners, with participation from existing investors. The company plans to use the funds to introduce new data-driven innovations in the GRC landscape and expand into markets across the US, EMEA, and APAC regions.

---

Entire Population of Brazil Possibly Exposed in Massive Data Leak

The private data of hundreds of millions of Brazilian individuals, including full names, dates of birth, and CPF numbers, were publicly accessible, putting them at risk of identity theft and cybercrimes.

---

Myanmar Rebels Take Control of ‘Pig Butchering’ Scam City Amid Chinese Pressure on Junta

The rebel groups' focus on tackling the scam industry is likely an attempt to gain favor with China, as many of its citizens have been targeted by these scams run from Mynamar.

---

Here’s Some Bitcoin: Oh, and You’ve Been Served!

A California man who lost $100,000 in a 2021 SIM-swapping attack is suing the unknown holder of a cryptocurrency wallet that harbors his stolen funds. The case is thought to be first in which a federal court has recognized the… Read More »

---

Pro-Ukraine Hackers Claim Breach of Russian Internet Provider

This incident highlights the ongoing cyberwar between Ukraine and Russia, with Ukrainian hackers allegedly cooperating with security services to target Russian organizations.

---

If You Prepare, a Data Security Incident Will Not Cause an Existential Crisis

Effective data security incident response requires building trust and clear role definition within the company and with external partners. Practicing decision-making with limited information is key to maintaining calm during cybersecurity crises.

---

Black Basta-Affiliated Threat Actor Water Curupira Spreads Pikabot via Spam Campaign

Pikabot, a loader malware similar to Qakbot, has been actively used in phishing campaigns by the Water Curupira threat actor, possibly as a replacement for Qakbot after its takedown.

---

PAM Provider Delinea Acquires Israeli Startup Authomize

The integration of Authomize's cross-cloud identity capabilities into Delinea's platform will enable customers to detect and mitigate active identity threats across various applications and infrastructure.

---

Threat Actor Poses as Security Researcher Offering to Delete Data Stolen by Ransomware Attackers

Organizations hit by ransomware face uncertainty regarding the deletion of stolen data, leading to a new form of extortion where a fake security researcher offers to hack into the ransomware group's server infrastructure for a fee.

---

Getting off the Attack Surface Hamster Wheel: Identity Can Help

IT professionals have developed a sophisticated understanding of the enterprise attack surface – what it is, how to quantify it and how to manage it.  The process is simple: begin by thoroughly assessing the attack surface, encompassing the entire IT environment. Identify all potential entry and exit points where unauthorized access could occur. Strengthen these vulnerable points using

---

SEC Twitter Hacked to Push Fake News of Bitcoin ETF Approval

The incident highlights concerns over the security of the SEC's social media accounts and the need for better protections against market manipulation through false tweets.

---

British Library: Finances are Healthy Amid Cyber Rebuild

The British Library has refuted reports that the recovery costs for its recent ransomware attack will reach nearly $9 million. The library said that the final costs are still unconfirmed and no additional funding bids have been made.

---

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest the threat actor behind the operations. The encryption key has also been shared with Avast,

---

CISA Flags Six Vulnerabilities - Apple, Apache, Adobe, D-Link, Joomla Under Attack

One of the vulnerabilities affects Apache Superset, a data visualization software, and allows remote code execution. The other vulnerabilities impact Adobe ColdFusion, Apple products, D-Link DSL-2750B devices, and Joomla.

---

Microsoft January 2024 Patch Tuesday Fixes 49 Flaws, 12 RCE Bugs

Microsoft's January 2024 Patch Tuesday includes security updates for 49 flaws and 12 remote code execution vulnerabilities. Two critical vulnerabilities were fixed, including a Windows Kerberos Security Feature Bypass and a Hyper-V RCE.

---

Twilio Will Discontinue its Authy Desktop 2FA App in August, Goes Mobile Only

Users are recommended to switch to the mobile versions available on iOS and Google Play. The decision to sunset the desktop app is part of Twilio's effort to focus on areas with higher demand.

---

SQLi Vulnerability in Cacti Could Lead to Remote Code Execution

The vulnerability, CVE-2023-51448, requires an authenticated attacker with specific permissions or the exploitation of another vulnerability to access and exploit the Cacti database.