Latest Cybersecurity News and Articles

---

90% of global energy companies experienced a third-party data breach

Third-party data breaches against energy organizations were analyzed in a recent report, finding that 90% of global organizations have had a breach.

---

69% of organizations facing ransomware attacks paid the ransom

According to a recent Claroty report, 75% of respondents reported being targeted by ransomware in the past year and 69% paid the ransom.

---

Jennifer Williams named Vice President, Information Security at HOOPP

Healthcare of Ontario Pension Plan (HOOPP) has announced Jennifer Williams will be the new Vice President, Information Security.

---

ICANN Launches Service to Help With WHOIS Lookups

More than five years after domain name registrars started redacting personal data from all public domain registration records, the non-profit organization overseeing the domain industry has introduced a centralized online service designed to make it easier for researchers, law enforcement and others to request the information directly from registrars.

---

Cryptocurrency: The geopolitical and economic impacts

In Episode 18 of The Cybersecurity & Geopolitical Discussion, Lisa Forte, Phil Ingram and Ian Thornton-Trump discuss the impact of cryptocurrency on geopolitical and economic conflict.

---

40% of Google Drive files contain sensitive information

According to a new report, documents that had been shared externally often contained confidential information, with 18,000 files flagged as having “highly sensitive” data, like PII.

---

42% of flagged messages are impersonation warnings

According to a report, 42% of organizations say employees with BYOD policies that use tools like WhatsApp have led to new security incidents.

---

North Korean Andariel Hackers Steal South Korean Anti-Aircraft Data

Seoul police have seized the servers and virtual asset exchanges used by Andariel, arrested the person involved in transferring ransomware funds, and advised organizations to strengthen their cybersecurity measures to prevent future attacks.

---

Mine Digs up $30M for Its No-Code Approach to Vetting Data Privacy

Battery Ventures and PayPal Ventures are co-leading this round, with participation also from Nationwide Ventures and all its previous backers, including Saban Ventures, Gradient Ventures, MassMutual Ventures, and Headline Ventures.

---

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts

Threat actors can take advantage of Amazon Web Services Security Token Service (AWS STS) as a way to infiltrate cloud accounts and conduct follow-on attacks. The service enables threat actors to impersonate user identities and roles in cloud environments, Red Canary researchers Thomas Gardner and Cody Betsworth said in a Tuesday analysis. AWS STS is a web service that enables

---

'Sierra:21' Vulnerabilities Impact Critical Infrastructure Routers

Admins are advised to upgrade to the latest ALEOS version, change default SSL certificates, disable non-essential services, implement web application firewalls, and install an OT/IoT-aware IDS for enhanced protection against these vulnerabilities.

---

Post-Exploitation Tampering Technique can be Used to Simulate Fake Lockdown Mode on iPhones

Hackers can manipulate Lockdown Mode to provide visual cues of activation without actually implementing any protections. Lockdown Mode should not be relied upon as a comprehensive security measure and users should be aware of its limitations.

---

SpyLoan Android Malware Targets Users in Southeast Asia, Africa, and Latin America

These apps trick users into providing sensitive personal and financial information, which is then used to blackmail them. The apps focus on users in Southeast Asia, Africa, and Latin America.

---

New Report: Unveiling the Threat of Malicious Browser Extensions

Compromising the browser is a high-return target for adversaries. Browser extensions, which are small software modules that are added to the browser and can enhance browsing experiences, have become a popular browser attack vector. This is because they are widely adopted among users and can easily turn malicious through developer actions or attacks on legitimate extensions. Recent incidents like

---

Sierra:21 - Flaws in Sierra Wireless Routers Expose Critical Sectors to Cyber Attacks

A collection of 21 security flaws have been discovered in Sierra Wireless AirLink cellular routers and open-source software components like TinyXML and OpenNDS. Collectively tracked as Sierra:21, the issues expose over 86,000 devices across critical sectors like energy, healthcare, waste management, retail, emergency services, and vehicle tracking to cyber threats, according

---

Kali Linux 2023.4 Released With GNOME 45 and 15 New Tools

Kali Linux 2023.4, the latest version of the Linux distribution for ethical hackers and cybersecurity professionals, has been released. It includes fifteen new tools and the GNOME 45 desktop environment.

---

HTC Global Services Confirms Cyberattack After Data Leaked Online

IT services company HTC Global Services has confirmed that it has suffered a cyberattack. The ALPHV ransomware gang has leaked screenshots of stolen data, including passports, contact lists, emails, and confidential documents.

---

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Chipmaker Qualcomm has released more information about three high-severity security flaws that were exploited in targeted attacks in October 2023. The vulnerabilities involve memory corruption in DSP Services and Graphics.

---

Scaling Security Operations with Automation

In an increasingly complex and fast-paced digital landscape, organizations strive to protect themselves from various security threats. However, limited resources often hinder security teams when combatting these threats, making it difficult to keep up with the growing number of security incidents and alerts. Implementing automation throughout security operations helps security teams alleviate

---

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers. "The vulnerability in ColdFusion (CVE-2023-26360) presents as an improper access control issue and exploitation of this CVE can result in arbitrary code execution,"