Latest Cybersecurity News and Articles
16 November 2023
Russian-speaking affiliates of the ALPHV/BlackCat ransomware gang are using malvertising for popular software to distribute the Nitrogen malware and infect organizations with ransomware.
16 November 2023
The top five categories of Bad Bot attacks are fake account creation, account takeovers, scraping, account management, and in-product abuse.
The post Bad Bots Account for 73% of Internet Traffic: Analysis appeared first on SecurityWeek.
16 November 2023
According to a recent cybersecurity report by Cisco, 14% of global organizations are ‘fully prepared’ to deploy artificial intelligence (AI).
16 November 2023
The Rhysida attackers exploit vulnerabilities like the lack of Multi-Factor Authentication (MFA) and the Zerologon vulnerability to gain initial access and maintain a presence within victims' networks.
16 November 2023
Hackers claiming responsibility for the breach have announced it on the Breach Forums. They allege to have stolen over 20GB of Plume's Wi-Fi database, containing 15 million lines of information.
16 November 2023
According to a recent cybersecurity report, businesses lost 9% of their revenue over the last 12 months as a direct result of cyberattacks.
16 November 2023
A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as an entirely new advanced persistent threat (APT).
Cybersecurity company NSFOCUS has described DarkCasino as an "economically motivated" actor that first came to light in 2021.
"DarkCasino is an APT threat actor with strong technical and learning ability, who is good
16 November 2023
Thomas McCormick, aka fubar, an administrator of the Darkode hacking forum, has been sentenced to 18 months in prison.
The post Administrator of Darkode Hacking Forum Sentenced to Prison appeared first on SecurityWeek.
16 November 2023
Critical infrastructure, including water supplies and electricity grids, are likely targets for cyberattacks, along with the theft of military secrets and intellectual property.
16 November 2023
According to a ransomware report, almost half of small and medium businesses (SMBs) and enterprises (46% each) have experienced a ransomware attack.
16 November 2023
The breach was caused by a hacker exploiting a vulnerability in a third-party application. Customer information such as names, phone numbers, postal and email addresses may have been exposed, but financial and password information remains unaffected.
16 November 2023
CISA's roadmap outlines five key areas of focus, including responsible use of AI, secure adoption of AI-based software, protection against malicious use of AI, collaboration with partners, and workforce education on AI systems and techniques.
16 November 2023
PJ&A's breach highlights the ongoing risk posed by third-party vendors in the healthcare industry, as they were responsible for 40% of major health data breaches reported to HHS OCR in 2023.
16 November 2023
To share or not to share threat intelligence isn’t the question. It’s how to share, what to share, where and with whom.
The post Threat Intel: To Share or Not to Share is Not the Question appeared first on SecurityWeek.
16 November 2023
Rwanda and Qatar have formed a partnership to collaborate on cybersecurity strategies, with a focus on improving public key infrastructure and supporting AI research and development.
16 November 2023
The threat actors behind the Rhysida ransomware engage in opportunistic attacks targeting organizations spanning various industry sectors.
The advisory comes courtesy of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC).
"Observed as a ransomware-as-a-service (RaaS)
16 November 2023
Enhanced coordination between the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and private sector partners has helped the US government in preventing and responding to the recent increase in ransomware attacks.
16 November 2023
MeridianLink, a publicly traded software company, is facing pressure from the ransomware group after allegedly not responding to their ransom demands and failing to disclose the breach.
16 November 2023
Alphv/BlackCat ransomware group files SEC complaint against MeridianLink over its failure to disclose an alleged data breach caused by the hackers.
The post Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach appeared first on SecurityWeek.
16 November 2023
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks.
"Starting from a single compromised machine, threat actors could progress in several ways: they could move to other cloned machines with GCPW installed, gain access