Latest Cybersecurity News and Articles
29 November 2023
When KrebsOnSecurity broke the news on Oct. 20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support department, Okta said the intrusion allowed hackers to steal sensitive data from fewer than one percent of its 18,000+ customers. But today, Okta revised that impact statement, saying the attackers also stole the name and email address for nearly all of its customer support users.
29 November 2023
Arcserve UDP is a popular enterprise data protection, backup and disaster recovery solution. The flaws were unearthed by Tenable researchers and privately disclosed to Arcserve in late August 2023.
29 November 2023
Fawry remains confident that this data will not impact financial transactions on its platform, but the company believes it may have included the personal details of some customers whose information had been on the testing platform.
29 November 2023
Sinbad has processed millions of dollars' worth of virtual currency from Lazarus Group heists, including the Horizon Bridge and Axie Infinity heists," reads a Department of Treasury press statement.
29 November 2023
The threat actors published multiple samples to prove their alleged access to Yanfeng systems and files, including financial documents, non-disclosure agreements, quotation files, technical data sheets, and internal reports.
29 November 2023
Virtual conference will explore cybersecurity use-cases for AI technology and the race to protect LLM algorithms from adversarial use.
The post SecurityWeek to Host Cyber AI & Automation Summit on December 6th appeared first on SecurityWeek.
29 November 2023
British startup building biometric authentication technology has snagged $6 million in a new round of funding led by Rialto Ventures.
The post Keyless Goes Independent, Raises $6M for Biometric Authentication appeared first on SecurityWeek.
29 November 2023
Okta expands scope of October breach, saying hackers stole names and email addresses of all its customer support system users.
The post Okta Broadens Scope of Data Breach: All Customer Support Users Affected appeared first on SecurityWeek.
29 November 2023
JAXA got to know about the attack after an external organization conducted an internal audit. A detailed investigation is going on into the hacking attempt and it was not revealed who could be orchestrating this.
29 November 2023
The primary goal of the bogus apps is to trick victims into granting them extensive permissions as well as harvest banking login credentials and credit card details by abusing Android's accessibility services.
29 November 2023
SMBs are an increasingly popular target as their bank accounts hold more money than the average consumer, but have few measures in place to prevent fraud, such as rigorous business processes and employee training.
29 November 2023
An academic researcher demonstrates BLUFFS, six novel attacks targeting Bluetooth sessions’ forward and future secrecy.
The post New BLUFFS Bluetooth Attack Methods Can Have Large-Scale Impact: Researcher appeared first on SecurityWeek.
29 November 2023
Experts in security believe the Play ransomware group has ties to Russia. PlayCrypt is another name for the group. It was created by a team known as Balloonfly, which Symantec monitors.
29 November 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that it's responding to a cyber attack that involved the active exploitation of Unitronics programmable logic controllers (PLCs) to target the Municipal Water Authority of Aliquippa in western Pennsylvania.
The attack has been attributed to an Iranian-backed hacktivist collective known as Cyber Av3ngers.
"Cyber threat
29 November 2023
After hackers compromised ICS at a US water utility, CISA issued a warning over the exploitation of the targeted Unitronics PLC.
The post CISA Warns of Unitronics PLC Exploitation Following Water Utility Hack appeared first on SecurityWeek.
29 November 2023
The company also told the publication that while it does not have any evidence of the stolen information being actively misused, it has taken the step of notifying all customers of potential phishing and social engineering risks.
29 November 2023
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023.
The post Google Patches Seventh Chrome Zero-Day of 2023 appeared first on SecurityWeek.
29 November 2023
Cybersecurity predictions for 2024 to help security professionals in prioritizing efforts to navigate the ever-changing threat landscape.
The post Five Cybersecurity Predictions for 2024 appeared first on SecurityWeek.
29 November 2023
DJVU, in itself a variant of the STOP ransomware, typically arrives on the scene masquerading as legitimate services or applications. It's also delivered as a payload of SmokeLoader.
29 November 2023
Considering the widespread use of the well-established wireless communication standard and the versions impacted by the exploits, BLUFFS could work against billions of devices, including laptops, smartphones, and other mobile devices.