Latest Cybersecurity News and Articles
20 November 2023
Yamaha Motor discloses ransomware attack impacting the personal information of its Philippines subsidiary’s employees.
The post Yamaha Motor Confirms Data Breach Following Ransomware Attack appeared first on SecurityWeek.
20 November 2023
The vulnerability allows attackers to access files, execute code, and obtain passwords. The exploit takes advantage of an unauthenticated mass-assignment vulnerability and AS2 header parsing.
20 November 2023
Gamaredon’s self-propagating LitterDrifter USB worm spreads from Ukraine to the US and other countries.
The post Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine appeared first on SecurityWeek.
20 November 2023
The new rules put forth by the FCC require wireless providers to adopt secure authentication methods and notify customers immediately of any SIM change or port-out request.
20 November 2023
Today’s security leaders must manage a constantly evolving attack surface and a dynamic threat environment due to interconnected devices, cloud services, IoT technologies, and hybrid work environments. Adversaries are constantly introducing new attack techniques, and not all companies have internal Red Teams or unlimited security resources to stay on top of the latest threats. On top of that,
20 November 2023
The LitterDrifter worm spreads malware via USB drives and communicates with the threat actor's command-and-control servers. It is suspected to be an evolution of a previously disclosed USB worm.
20 November 2023
Over 250 organizations take part in GridEx VII, the largest North American exercise focusing on the security of the electrical grid.
The post 250 Organizations Take Part in Electrical Grid Security Exercise appeared first on SecurityWeek.
20 November 2023
The stealer malware known as LummaC2 (aka Lumma Stealer) now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to evade detection and exfiltrate valuable information from infected hosts.
The method is designed to "delay detonation of the sample until human mouse activity is detected," Outpost24 security researcher Alberto Marín said in a technical
20 November 2023
The US Department of Energy is offering $70 million in funding to improve the cybersecurity of rural and municipal utilities.
The post US Announces $70 Million Cybersecurity Boost for Rural, Municipal Utilities appeared first on SecurityWeek.
20 November 2023
The 8Base ransomware group is using a variant of the Phobos ransomware to carry out financially motivated attacks, with the ransomware component embedded in the SmokeLoader process memory.
20 November 2023
The hackers disguised phishing letters as official requests from Ukraine's security service, urging victims to provide information crucial for "national security," but the attached PDF file actually installed the Remcos software.
20 November 2023
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable to ransomware gangs that can steal confidential data and disrupt operations.
The post K-12 Schools Improve Protection Against Online Attacks, but Many Are Vulnerable to Ransomware Gangs appeared first on SecurityWeek.
20 November 2023
The Indian hack-for-hire group known as Appin, which operated from 2009 and is now defunct, was involved in numerous incidents of cyber espionage and surveillance targeting individuals and entities worldwide.
20 November 2023
Bitcoin wallets created between 2011 and 2015 are susceptible to a new kind of exploit called Randstorm that makes it possible to recover passwords and gain unauthorized access to a multitude of wallets spanning several blockchain platforms.
"Randstorm() is a term we coined to describe a collection of bugs, design decisions, and API changes that, when brought in contact with each other, combine
20 November 2023
The majority of state-sponsored cyberattacks against Russia are believed to originate from North Korea and China, according to a report by Russian cybersecurity firm Solar. This comes as a surprise given the political partnerships between them.
20 November 2023
The ICO believes Clearview's mass scraping of personal information infringes on the data rights of U.K. residents and seeks to overturn the court's decision to protect their privacy.
20 November 2023
The FCC's proposal comes in response to demands from lawmakers, E-Rate applicants, and school connectivity advocates to address the urgent need for cybersecurity protections in schools and libraries.
20 November 2023
The ultimate goal of the attack is to deceive users into downloading a fake WinSCP installer that contains malware, while also establishing persistence and contact with a remote server.
20 November 2023
An Indian hack-for-hire group targeted the U.S., China, Myanmar, Pakistan, Kuwait, and other countries as part of a wide-ranging espionage, surveillance, and disruptive operation for over a decade.
The Appin Software Security (aka Appin Security Group), according to an in-depth analysis from SentinelOne, began as an educational startup offering offensive security training programs, while
18 November 2023
The threat actors behind the 8Base ransomware are leveraging a variant of the Phobos ransomware to conduct their financially motivated attacks.
The findings come from Cisco Talos, which has recorded an increase in activity carried out by cybercriminals.
“Most of the group’s Phobos variants are distributed by SmokeLoader, a backdoor trojan," security researcher Guilherme Venere said in an