Latest Cybersecurity News and Articles
27 November 2023
Hacktivism is evolving. It is important for both the law and cyber defenders to understand the current and potential activity of hacktivism to better understand how it should be treated.
The post Hacktivism: What’s in a Name… It May be More Than You Expect appeared first on SecurityWeek.
27 November 2023
Fidelity National Financial is experiencing service disruptions after systems were taken down to contain a cyberattack.
The post Fidelity National Financial Takes Down Systems Following Cyberattack appeared first on SecurityWeek.
27 November 2023
UK and Korea say DPRK state-sponsored hackers targeted governments, defense organizations via supply chain attacks.
The post UK, Korea Warn of DPRK Supply Chain Attacks Involving Zero-Day Flaws appeared first on SecurityWeek.
27 November 2023
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or water supply.
The post Hackers Hijack Industrial Control System at US Water Utility appeared first on SecurityWeek.
27 November 2023
As proof of the breach, the threat actor shared screenshots of what they claim is stolen GE data, including a database from GE Aviations that appears to contain information on military projects. GE confirmed that they are investigating the claim.
27 November 2023
The East Texas healthcare system is just the latest hospital group that has been forced to turn ambulances away because of an apparent cybersecurity incident. The cyber incident at UT Health East Texas began on Thursday.
27 November 2023
The agency quoted the company as saying that "as a result of this illegal breach some information from the company's email system and customers' database could be compromised."
27 November 2023
The U.K. and U.S., along with international partners from 16 other countries, have released new guidelines for the development of secure artificial intelligence (AI) systems.
"The approach prioritizes ownership of security outcomes for customers, embraces radical transparency and accountability, and establishes organizational structures where secure design is a top priority," the U.S.
26 November 2023
The U.S. military is increasing use of AI technology that will fundamentally alter the nature of war.
The post Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons appeared first on SecurityWeek.
26 November 2023
New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.
26 November 2023
New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.
25 November 2023
The three critical vulnerabilities include disclosure of sensitive credentials and configuration, authentication bypass using pre-signed URLs, and subdomain validation bypass.
25 November 2023
The recently identified scam involved the creation of counterfeit tokens and manipulated trading activities to attract investors before swiftly withdrawing liquidity and causing substantial losses.
25 November 2023
The leaked data poses a significant threat to children, as it can be exploited by malicious actors for extortion, impersonation, identity theft, fraud, and even potential child abuse.
25 November 2023
The hospital system was added to the leak site of the Meow ransomware gang. VUMC has confirmed the incident but has not provided details on when it occurred or the effects of the attack.
25 November 2023
An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what’s suspected to be an advanced persistent threat (APT) attack.
The web shell, a dynamic-link library (DLL) named “hrserv.dll,” exhibits “sophisticated features such as custom encoding methods for client communication and in-memory execution,” Kaspersky security researcher Mert
24 November 2023
The maintainers of the open-source file-sharing software ownCloud have warned of three critical security flaws that could be exploited to disclose sensitive information and modify files.
A brief description of the vulnerabilities is as follows -
Disclosure of sensitive credentials and configuration in containerized deployments impacting graphapi versions from 0.2.0 to 0.3.0. (CVSS score: 10.0)
24 November 2023
The United Kingdom and South Korea have issued a joint advisory warning about software supply chain attacks carried out by North Korean state-linked hackers, highlighting the increasing volume and sophistication of such attacks.
24 November 2023
The Al-Toufan hacker group targeted the Foreign Ministry and the Information Affairs Ministry's websites and also released scans of passports allegedly obtained from the hack.
24 November 2023
The hacker group, known as N4ughtySecTU, demanded a ransom of $30 million from both the credit reporting agencies and claims to have direct access to their data and infrastructure.