Latest Cybersecurity News and Articles


BlackCat Ransomware Gang is Attacking Organizations Using Google Ads Laced with Malware

16 November 2023
Russian-speaking affiliates of the ALPHV/BlackCat ransomware gang are using malvertising for popular software to distribute the Nitrogen malware and infect organizations with ransomware.

Bad Bots Account for 73% of Internet Traffic: Analysis

16 November 2023
The top five categories of Bad Bot attacks are fake account creation, account takeovers, scraping, account management, and in-product abuse. The post Bad Bots Account for 73% of Internet Traffic: Analysis appeared first on SecurityWeek.

23% of organizations report little to no AI scalability

16 November 2023
According to a recent cybersecurity report by Cisco, 14% of global organizations are ‘fully prepared’ to deploy artificial intelligence (AI).

US Agencies Warn of Opportunistic Rhysida Ransomware Attacks

16 November 2023
The Rhysida attackers exploit vulnerabilities like the lack of Multi-Factor Authentication (MFA) and the Zerologon vulnerability to gain initial access and maintain a presence within victims' networks.

Hackers Claim Major Data Breach at Smart WiFi Provider Plume

16 November 2023
Hackers claiming responsibility for the breach have announced it on the Breach Forums. They allege to have stolen over 20GB of Plume's Wi-Fi database, containing 15 million lines of information.

29% of organizations cite data loss as top security breach result

16 November 2023
According to a recent cybersecurity report, businesses lost 9% of their revenue over the last 12 months as a direct result of cyberattacks.

Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw

16 November 2023
A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as an entirely new advanced persistent threat (APT). Cybersecurity company NSFOCUS has described DarkCasino as an "economically motivated" actor that first came to light in 2021. "DarkCasino is an APT threat actor with strong technical and learning ability, who is good

Administrator of Darkode Hacking Forum Sentenced to Prison

16 November 2023
Thomas McCormick, aka fubar, an administrator of the Darkode hacking forum, has been sentenced to 18 months in prison. The post Administrator of Darkode Hacking Forum Sentenced to Prison appeared first on SecurityWeek.

State-Backed Hackers a Threat to Australia, Agency Warns

16 November 2023
Critical infrastructure, including water supplies and electricity grids, are likely targets for cyberattacks, along with the theft of military secrets and intellectual property.

46% of SMBs and enterprises have experienced a ransomware attack

16 November 2023
According to a ransomware report, almost half of small and medium businesses (SMBs) and enterprises (46% each) have experienced a ransomware attack.

Samsung Hit by New Data Breach Impacting UK Online Store Customers

16 November 2023
The breach was caused by a hacker exploiting a vulnerability in a third-party application. Customer information such as names, phone numbers, postal and email addresses may have been exposed, but financial and password information remains unaffected.

CISA Outlines AI-Related Cybersecurity Efforts

16 November 2023
CISA's roadmap outlines five key areas of focus, including responsible use of AI, secure adoption of AI-based software, protection against malicious use of AI, collaboration with partners, and workforce education on AI systems and techniques.

Medical Transcription Vendor PJ&A's Breach Affects at Least Nine Million

16 November 2023
PJ&A's breach highlights the ongoing risk posed by third-party vendors in the healthcare industry, as they were responsible for 40% of major health data breaches reported to HHS OCR in 2023.

Threat Intel: To Share or Not to Share is Not the Question

16 November 2023
To share or not to share threat intelligence isn’t the question. It’s how to share, what to share, where and with whom. The post Threat Intel: To Share or Not to Share is Not the Question appeared first on SecurityWeek.

Qatar & Rwanda Partner to Boost Cybersecurity in Africa

16 November 2023
Rwanda and Qatar have formed a partnership to collaborate on cybersecurity strategies, with a focus on improving public key infrastructure and supporting AI research and development.

CISA and FBI Issue Warning About Rhysida Ransomware Double Extortion Attacks

16 November 2023
The threat actors behind the Rhysida ransomware engage in opportunistic attacks targeting organizations spanning various industry sectors. The advisory comes courtesy of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC). "Observed as a ransomware-as-a-service (RaaS)

FBI Says Enhanced Partnerships Help Combat Ransomware Surge

16 November 2023
Enhanced coordination between the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and private sector partners has helped the US government in preventing and responding to the recent increase in ransomware attacks.

BlackCat Ransomware Gang Files SEC Complaint Over Victim’s Undisclosed Breach

16 November 2023
MeridianLink, a publicly traded software company, is facing pressure from the ransomware group after allegedly not responding to their ransom demands and failing to disclose the breach.

Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach

16 November 2023
Alphv/BlackCat ransomware group files SEC complaint against MeridianLink over its failure to disclose an alleged data breach caused by the hackers. The post Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach appeared first on SecurityWeek.

Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

16 November 2023
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks. "Starting from a single compromised machine, threat actors could progress in several ways: they could move to other cloned machines with GCPW installed, gain access