Latest Cybersecurity News and Articles

---

78% of MSPs state cybersecurity is a prominent IT challenge

A recent report surveyed 1,000 MSPs, revealing attitudes about the value of cybersecurity. 

---

Bills Targeting Data Brokers and TikTok Approved in House Committee

The House Energy and Commerce Committee approved two significant data privacy bills, including one targeting TikTok's Chinese ownership and another blocking data brokers from selling Americans' data to foreign adversaries.

---

Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities

Magnet Goblin is a financially motivated threat actor that rapidly exploits 1-day vulnerabilities in public-facing services to initiate attacks. This actor has targeted Ivanti, Magento, Qlink Sense, and possibly Apache ActiveMQ.

---

Paysign Investigating Reports of Stolen Database Being Sold by Hackers

Hackers attempted to sell a database allegedly belonging to the company, which is said to contain millions of records. Despite this, Paysign assured that there has been no disruption to their services, and customers can continue using their accounts.

---

Dropbox Used to Steal Credentials and Bypass MFA in Phishing Campaign

The use of legitimate Dropbox infrastructure in the phishing campaign allowed the attackers to effectively evade detection by email security tools and bypass MFA protocols.

---

Data Leakage Prevention in the Age of Cloud Computing: A New Approach

As the shift of IT infrastructure to cloud-based solutions celebrates its 10-year anniversary, it becomes clear that traditional on-premises approaches to data security are becoming obsolete. Rather than protecting the endpoint, DLP solutions need to refocus their efforts to where corporate data resides - in the browser. A new guide by LayerX titled "On-Prem is Dead. Have You Adjusted Your Web

---

Immediate AI Risks and Tomorrow's Dangers

AI has given malicious attackers superpowers, making fishing, smishing, vishing, and other attacks more accessible and impactful. Immediate threats include sensitive data leakage from AI-powered systems.

---

New Golang-based Planet Stealer Emerges in Underground Forums

Planet Stealer is a Go-based information-stealing trojan that targets sensitive information from victim hosts. The trojan's capabilities include browser information theft, cryptocurrency wallet theft, and sandbox evasion.

---

UK Government’s Ransomware Failings Leave Country ‘Exposed and Unprepared’

The UK government has been criticized for a lack of preparedness and strategic response to the growing threat of ransomware attacks, with a parliamentary committee accusing it of an "ostrich strategy" of burying its head in the sand.

---

Cisco Addressed Severe Flaws in Its Secure Client

Cisco Secure Client is affected by two high-severity vulnerabilities, CVE-2024-20337 and CVE-2024-20338, which could lead to code execution and unauthorized remote access VPN sessions.

---

Zama’s Homomorphic Encryption Tech Lands it $73M on a Valuation of Nearly $400M

Zama, a Paris-based startup, has raised $73 million in a Series A funding round to develop and commercialize homomorphic encryption technology for blockchain transactions and AI data exchange.

---

BianLian Threat Actors Exploiting JetBrains TeamCity Flaws in Ransomware Attacks

The threat actors behind the BianLian ransomware have been observed exploiting security flaws in JetBrains TeamCity software to conduct their extortion-only attacks. According to a new report from GuidePoint Security, which responded to a recent intrusion, the incident "began with the exploitation of a TeamCity server which resulted in the deployment of a PowerShell implementation of

---

QNAP Warns of Critical Auth Bypass Flaw in its NAS Devices

Three vulnerabilities have been disclosed, including an authentication bypass, command injection, and SQL injection, with one allowing remote execution without authentication.

---

Defense Unicorns Raises $35 Million to Enhance National Security Through Open-Source Software

The company has developed open source projects like Zarf, LeapfrogAI, Pepr, and Lula to overcome technical hurdles and offers core capabilities such as Your App Your Environment, Software Factory, and AI for National Security.

---

Critical Fortinet Flaw May Impact 150,000 Exposed Devices

Approximately 150,000 Fortinet FortiOS and FortiProxy secure web gateway systems are vulnerable to CVE-2024-21762, a critical security issue that allows code execution without authentication.

---

Update: Change Healthcare Systems Expected to Come back Online in Mid-March

UnitedHealth Group is providing additional financial relief to healthcare providers affected by the cyberattack, including advancing funds and expanding temporary financing programs.

---

Microsoft Says Russian Hackers Stole Source Code After Spying on Its Executives

Microsoft is facing an ongoing attack from a Russia state-sponsored threat actor that stole data from senior-level executives and is attempting to gain unauthorized access to the company's systems.

---

Lithuania Warns China Has Ramped up Espionage Campaigns

The opening of Taiwan's Representative Office in Lithuania has prompted China to increase its focus on gathering information about the country's internal affairs and political landscape.

---

UK: Jersey Regulator’s Data Breach Leaks Names and Addresses

The leak did not connect individuals to registered entities or roles, and the organization is working with the Jersey Office of the Information Commissioner to investigate further.

---

Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability

Technical specifics and a proof-of-concept (PoC) exploit have been made available for a recently disclosed critical security flaw in Progress Software OpenEdge Authentication Gateway and AdminServer, which could be potentially exploited to bypass authentication protections. Tracked as CVE-2024-1403, the vulnerability has a maximum severity rating of 10.0 on the CVSS scoring system. It