Latest Cybersecurity News and Articles

---

Experts Released PoC Exploit for Critical Progress Software OpenEdge Bug

Researchers from Horizon3.ai have disclosed technical details and a proof-of-concept exploit for a critical security flaw (CVE-2024-1403) in Progress Software OpenEdge Authentication Gateway and AdminServer.

---

CISA undertakes new efforts to fortify open source ecosystem

The CISA announces new plans to secure the open source ecosystem. 

---

Report: Victims Lose $47 Million to Crypto Phishing Scams in February

Impersonated accounts on X, formerly known as Twitter, have been responsible for a majority of crypto phishing attacks in the previous month. Per Scam Sniffer, victims lost almost $47 million to cybercriminals who stole from over 57,000 individuals.

---

Muddled Libra Threat Group Abuses Pentesting Tools to Infiltrate Networks

Muddled Libra threat actors leverage pentesting tools to identify vulnerabilities in target systems and networks, enabling them to exploit security gaps and gain unauthorized access.

---

Tax-Related Scams Escalate as Filing Deadline Approaches

Scammers are taking advantage of the rush to file personal federal income tax returns, using tactics such as impersonation, phone calls, tax identity theft, phishing scams, and unethical tax return preparers.

---

Incognito Darknet Market Mass-Extorts Buyers, Sellers

The darknet narcotics market Incognito Market is extorting its vendors and buyers by threatening to publish their cryptocurrency transaction and chat records if they refuse to pay a fee.

---

Report: Three-Quarters of Cyber Incident Victims are Small Businesses

Over 90% of cyber-attacks on small and medium businesses involve data or credential theft, with a notable increase in information-stealing malware targeting macOS, according to Sophos.

---

Malicious PyPI Packages Target Crypto Wallet Recovery Passwords in BIPClip Campaign

The malicious packages used name squatting, disguised dependencies, and legitimate-looking code to steal mnemonic phrases, evading detection and targeting crypto assets without broader system compromise.

---

ODNI Releases New Open-Source Intelligence Strategy With Limited Details

Intelligence agencies are developing new strategies to collect and process open-source intelligence (OSINT) through 2026, in response to the explosion of publicly and commercially available information.

---

Researchers Expose Microsoft SCCM Misconfigurations Usable in Cyberattacks

The Misconfiguration Manager repository provides a comprehensive resource for both offensive professionals and defenders to understand and manage the attack path related to Microsoft Configuration Manager (MCM), formerly known as SCCM.

---

CloudGrappler: Open-Source Tool Detects Activity in Cloud Environments

The open-source tool offers enhanced detection capabilities based on the tactics, techniques, and procedures (TTPs) of modern cloud threat actors like LUCR-3 (Scattered Spider).

---

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

Threat hunters have discovered a set of seven packages on the Python Package Index (PyPI) repository that are designed to steal BIP39 mnemonic phrases used for recovering private keys of a cryptocurrency wallet. The software supply chain attack campaign has been codenamed BIPClip by ReversingLabs. The packages were collectively downloaded 7,451 times prior to them being removed from

---

Security leaders discuss Microsoft's stolen source code

Following a cyberattack from Midnight Blizzard, Security leaders share their thoughts. 

---

EquiLend Warns Employees Their Data Was Stolen by Ransomware Gang

The company initially took some systems offline to contain the breach. Although the nature of the incident was not immediately disclosed, LockBit ransomware claimed responsibility for the attack.

---

CISA Lacks Staff with Skills Needed to Safeguard OT

The U.S. Government Accountability Office (GAO) recently released a report critiquing the information-sharing practices of the CISA with critical infrastructure stakeholders, warning about staffing shortages for handling OT incidents.

---

CTEM 101 - Go Beyond Vulnerability Management with Continuous Threat Exposure Management

In a world of ever-expanding jargon, adding another FLA (Four-Letter Acronym) to your glossary might seem like the last thing you’d want to do. But if you are looking for ways to continuously reduce risk across your environment while making significant and consistent improvements to security posture, in our opinion, you probably want to consider establishing a Continuous Threat Exposure

---

French Government Agencies Hit by Cyberattacks of ‘Unprecedented Intensity’

In response to the cyberattacks, a crisis cell has been activated to deploy countermeasures, reducing the impact on most public services and restoring access to state websites.

---

Tuta Mail Adds New Quantum-Resistant Encryption to Protect Email

Tuta Mail has introduced TutaCrypt, a new post-quantum encryption protocol to safeguard communications from anticipated decryption attacks, offering strong protection against future threats.

---

US Federal Budget Proposes $27.5B for Cybersecurity

The Biden administration has unveiled a $1.67 trillion discretionary spending proposal, which includes a modest increase in federal cybersecurity spending. The budget allocates $13 billion for federal civilian cybersecurity.

---

Broadcom Axes Carbon Black Sale, to Merge Unit with Symantec

This decision came after offers to purchase Carbon Black fell short of expectations, resulting in Broadcom's strategic shift to retain the company and merge it with Symantec.