Latest Cybersecurity News and Articles

---

Saudi Cyber Students Team with Bahrain to Assess AI Security & Risk

Saudi Arabian students specializing in AI and cybersecurity are participating in workshops to enhance their capabilities in identifying and assessing potential risks of large language models (LLMs) across different platforms.

---

116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems

Cybersecurity researchers have identified a set of 116 malicious packages on the Python Package Index (PyPI) repository that are designed to infect Windows and Linux systems with a custom backdoor. "In some cases, the final payload is a variant of the infamous W4SP Stealer, or a simple clipboard monitor to steal cryptocurrency, or both," ESET researchers Marc-Etienne M.Léveillé and Rene

---

Microsoft Seizes Domains Used to Sell Fraudulent Outlook Accounts

The cybercrime group, Storm-1152, provided accounts to other cybercriminals involved in ransomware attacks and data theft, highlighting the interconnectedness of various criminal networks.

---

Sony Investigating Potential Ransomware Attack on Insomniac Games Unit

Sony's subsidiary, Insomniac Games, is currently investigating a reported ransomware attack by the Rhysida gang, which has targeted various government institutions and healthcare organizations in the past.

---

Climate change leads to an increase in health alerts

The global risk map by International SOS shows how climate change has changed risk levels and risk management, including medical emergencies.

---

ThreatNG Open-Source Datasets Aim to Improve Cybersecurity Practices

The ThreatNG Governance and Compliance Dataset is an open-source initiative that aims to provide access to critical cybersecurity data, promoting transparency and collaboration.

---

Report: 29 malware families targeted 1800 banking apps in 61 countries

Threat landscape shows continued investment by threat actors financially motivated to “follow the money” as banking via a mobile app becomes increasingly ubiquitous.

---

New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities

A pro-Hamas threat actor known as Gaza Cyber Gang is targeting Palestinian entities using an updated version of a backdoor dubbed Pierogi. The findings come from SentinelOne, which has given the malware the name Pierogi++ owing to the fact that it's implemented in the C++ programming language unlike its Delphi- and Pascal-based predecessor. "Recent Gaza Cybergang activities show

---

District Court in Switzerland ‘Victim of a Cyber Attack’

This incident follows a similar ransomware attack on the municipal administration of Zollikofen in November, highlighting the growing threat of ransomware attacks targeting Swiss organizations.

---

Check Point Software in SEC Settlement Talks in Connection With SolarWinds Probe

Check Point Software Technologies has cooperated with the SEC inquiry into the SolarWinds Orion cyber vulnerability, voluntarily providing documents and information about its limited testing environment access.

---

China-Linked APT Volt Typhoon Linked to KV-Botnet Attacks

Volt Typhoon utilizes living-off-the-land techniques and hands-on-keyboard activity to evade detection, routing malicious traffic through compromised SOHO network devices and relying on customized versions of open-source tools for communication.

---

French Police Arrests Russian Suspect Linked to Hive Ransomware

French police have arrested a Russian national in Paris for allegedly helping the Hive ransomware gang with money laundering. The suspect was apprehended after being linked to digital wallets that received millions of dollars from suspicious sources.

---

Security leaders discuss new SEC disclosure rule as deadline nears

With the Securities and Exchange Commission (SEC) cybersecurity disclosure rule deadlines fast approaching, security leaders are sharing thoughts on the ruling and its effect on the industry.

---

Red Roof Hotels Claims Cybersecurity Incident Did Not Involve Guest Data

Hotel company Red Roof experienced a ransomware attack in September, but fortunately, no guest data was compromised. The attack was detected when suspicious activity was noticed, leading to the discovery of ransomware.

---

Scammers Weaponize Google Forms in New BazarCall Attack Campaign

A new variant of the BazarCall attack that incorporates Google Forms to deceive victims. In this phishing campaign, scammers send emails pretending to be payment notifications or subscription confirmations from well-known brands.

---

Iranian State-Sponsored OilRig Group Deploys 3 New Malware Downloaders

The Iranian state-sponsored threat actor known as OilRig deployed three different downloader malware throughout 2022 to maintain persistent access to victim organizations located in Israel. The three new downloaders have been named ODAgent, OilCheck, and OilBooster by Slovak cybersecurity company ESET. The attacks also involved the use of an updated version of a known OilRig downloader

---

Industry Regulations and Standards are Driving OT Security Priorities

Governments are driving OT security priorities and investments through regulations and standards. The TSA Security Directives have had the most significant impact on organizations' security priorities, followed by CDM DEFEND and ISA/IEC-62443.

---

Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally

The Russian SVR cyber actors are exploiting a vulnerability in JetBrains TeamCity software to gain access to software developers' networks and potentially conduct supply chain operations.

---

Reimagining Network Pentesting With Automation

Network penetration testing plays a crucial role in protecting businesses in the ever-evolving world of cybersecurity. Yet, business leaders and IT pros have misconceptions about this process, which impacts their security posture and decision-making.  This blog acts as a quick guide on network penetration testing, explaining what it is, debunking common myths and reimagining its role in

---

Reimagining Network Pentesting With Automation

Network penetration testing plays a crucial role in protecting businesses in the ever-evolving world of cybersecurity. Yet, business leaders and IT pros have misconceptions about this process, which impacts their security posture and decision-making.  This blog acts as a quick guide on network penetration testing, explaining what it is, debunking common myths and reimagining its role in