Latest Cybersecurity News and Articles
10 November 2023
According to a report, 74% of IT and security decision makers said their organization’s IT or security budget increased compared to the year prior.
10 November 2023
A recent BrandShield survey of chief information security officers (CISOs) found that CISOs reported an average loss of $2.1M USD per cyberattack.
10 November 2023
ICBC informed clients that a cybersecurity issue would require them to reroute trades and temporarily stop accepting orders. The attack highlights the vulnerability of critical infrastructure providers, such as the financial sector.
10 November 2023
The attackers gained access to sensitive company and customer data, including high-level account logins, credit card information, customer addresses, and more, posing a significant risk to Dolly.com and its users.
10 November 2023
Diana Lovati was hired as the first CISO at True Anomaly. Lovati has experience with risk management, compliance, IT and data protection.
10 November 2023
Hunters International focuses on data exfiltration rather than encryption and primarily targets victims in the United States, the UK, Germany, and Namibia, including hospitals.
10 November 2023
Cavelo has raised CA$5 million (~US$3.6 million USD) to help organizations comply with data protection regulations.
The post Cavelo Raises CA$5 Million for Attack Surface Management Platform appeared first on SecurityWeek.
10 November 2023
Noteworthy stories that might have slipped under the radar: EU regulation enables government surveillance, US offering rewards for Iranian hackers, evolution of Chinese spying.
The post In Other News: EU Government Surveillance, Rewards for Iranian Hackers, Evolution of Chinese Spying appeared first on SecurityWeek.
10 November 2023
The government of Maine has confirmed that over a million state residents had their personal information stolen in a data breach by a Russia-linked ransomware gang that exploited a vulnerability in the MOVEit file transfer system.
10 November 2023
The leaked data includes critical details such as email addresses, names, usernames, and geographic locations, posing a considerable threat as it is now accessible on the dark web.
10 November 2023
A class action lawsuit has been filed against Intel over its handling of CPU speculative execution vulnerabilities, with a focus on Downfall.
The post Intel Sued Over ‘Downfall’ CPU Vulnerability appeared first on SecurityWeek.
10 November 2023
France and the UK are calling for greater regulation of commercial surveillance software in the wake of recent Pegasus and Predator spyware scandals.
The post France, UK Seek Greater Regulation of Commercial Spyware appeared first on SecurityWeek.
10 November 2023
When users click on the ad, they are redirected to a fake Windows news site, where they are prompted to download a digitally signed CPU-Z installer. This installer contains a malicious PowerShell script known as the 'FakeBat' malware loader.
10 November 2023
A new report highlights downtime due to a successful application DDoS attack costs organizations an average of $6,130 per minute.
10 November 2023
Open AI announced that periodic outages across its popular AI chatbot ChatGPT were due to an abnormal traffic pattern reflective of a DDoS attack.
10 November 2023
The notorious Russian hackers known as Sandworm targeted an electrical substation in Ukraine last year, causing a brief power outage in October 2022.
The findings come from Google's Mandiant, which described the hack as a "multi-event cyber attack" leveraging a novel technique for impacting industrial control systems (ICS).
"The actor first used OT-level living-off-the-land (LotL) techniques to
10 November 2023
An Iranian hacking group known as Charming Kitten targeted organizations in Israel's transportation, logistics, and technology sectors last month. This increase in Iranian cyber activity coincided with the start of Israel's war with Hamas.
10 November 2023
Signal is testing a new feature that allows users to conceal their phone numbers by using public usernames. The feature is currently being tested in a separate staging environment and users can access it by installing pre-beta builds.
10 November 2023
CISA, NSA, and ODNI issue new guidance on managing open source software and SBOMs to maintain awareness on software security.
The post US Government Issues Guidance on SBOM Consumption appeared first on SecurityWeek.
10 November 2023
Concerns have been raised about the provision in the act that requires software developers to report vulnerabilities within 24 hours, as it may overwhelm cyber agencies and pose security risks.