Latest Cybersecurity News and Articles

---

ALPHV Second Most Prominent Ransomware Strain Before Reported Downtime

ALPHV was the second-most leveraged ransomware strain in North America and Europe between January 2022 and October 2023, just before the reported takedown of the group’s website, according to ZeroFox research.

---

65% of organizations say ransomware concerns impact risk management

Enterprise risk management in the financial sector was analyzed in a report where 65% of organizations say ransomware concerns impact risk management.

---

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds

Storm-0539 not only targets gift card-related services for fraud but also collects sensitive information, such as emails and network configurations, for follow-on attacks against the same organizations.

---

Beware: Experts Reveal New Details on Zero-Click Outlook RCE Exploits

Technical details have emerged about two now-patched security flaws in Microsoft Windows that could be chained by threat actors to achieve remote code execution on the Outlook email service sans any user interaction. "An attacker on the internet can chain the vulnerabilities together to create a full, zero-click remote code execution (RCE) exploit against Outlook clients," Akamai security

---

UK National Grid Pulls Chinese Equipment Over Cybersecurity Concerns

The contract with NR Electric UK, a subsidiary of China's Nari Technology, was terminated without reason given in April, highlighting growing concerns over Chinese involvement in critical infrastructure.

---

Ubiquiti Fixes Glitch That Exposed Private Video Streams to Other Customers

The bug was caused by a misconfiguration during an upgrade to Ubiquiti's cloud infrastructure, resulting in 1,216 accounts being improperly associated with another group of 1,177 accounts.

---

Top 7 Trends Shaping SaaS Security in 2024

Over the past few years, SaaS has developed into the backbone of corporate IT. Service businesses, such as medical practices, law firms, and financial services firms, are almost entirely SaaS based. Non-service businesses, including manufacturers and retailers, have about 70% of their software in the cloud.  These applications contain a wealth of data, from minimally sensitive general

---

Rhadamanthys Malware: Swiss Army Knife of Information Stealers Emerges

The developers of the information stealer malware known as Rhadamanthys are actively iterating on its features, broadening its information-gathering capabilities and also incorporating a plugin system to make it more customizable. This approach not only transforms it into a threat capable of delivering "specific distributor needs," but also makes it more potent, Check Point said&

---

MongoDB Investigates Data Breach Impacting Customer Account Information

The breach was detected on December 13, and the company is currently investigating the incident. MongoDB believes that customer data stored in their Atlas platform was not accessed, but customer account metadata and contact information were exposed.

---

InfectedSlurs Botnet Targets QNAP VioStor NVR Vulnerability

Default admin credentials and outdated, unsupported networked systems are being exploited as routes for botnet infections, highlighting the importance of updating and securing legacy systems.

---

NY Engineer Pleads Guilty to Stealing Millions From Two Crypto Exchanges

A former security engineer has pleaded guilty to hacking two decentralized cryptocurrency exchanges, resulting in the theft of over $12 million. The hacker exploited vulnerabilities in the smart contracts of the exchanges.

---

Four U.S. Nationals Charged in $80 Million Pig Butchering Crypto Scam

Four U.S. nationals have been charged for participating in an illicit scheme that earned them more than $80 million via cryptocurrency investment scams. The defendants – Lu Zhang, 36, of Alhambra, California; Justin Walker, 31, of Cypress, California; Joseph Wong, 32, Rosemead, California; and Hailong Zhu, 40, Naperville, Illinois – have been charged with conspiracy to commit money laundering,

---

Qbot Malware Returns in Campaign Targeting Hospitality Industry

The malware is being distributed through emails pretending to be from an IRS employee, with recipients unknowingly downloading the QakBot DLL when attempting to view a PDF attachment.

---

Fortifying Cyber Defenses: A Proactive Approach to Ransomware Resilience

Investing in cutting-edge cybersecurity tools not only enhances defensive capabilities but also stimulates innovation and fosters public-private partnerships to strengthen the nation's cyber defenses.

---

Hunters International Ransomware Gang Claims to Have Hacked the Fred Hutch Cancer Center

Patients have received email threats, stating that their personal information has been compromised. The center has taken impacted systems offline, notified law enforcement, and launched an investigation.

---

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

The new rules require affected companies to assess the severity of the incident and report it immediately to the local industry supervision department without omitting or concealing any facts.

---

Unmasking the Dark Side of Low-Code/No-Code Applications

Low-code/no-code (LCNC) and robotic process automation (RPA) have gained immense popularity, but how secure are they? Is your security team paying enough attention in an era of rapid digital transformation, where business users are empowered to create applications swiftly using platforms like Microsoft PowerApps, UiPath, ServiceNow, Mendix, and OutSystems? The simple truth is often swept under

---

WordPress Hosting Service Kinsta Targeted by Google Phishing Ads

Users are advised to be vigilant and only access the official kinsta.com or my.kinsta.com websites, enable two-factor authentication, and disregard any suspicious emails or messages claiming to be from Kinsta.

---

UK's cultural institutions gather for summit on the cyber threat

Organisations across the UK’s culture sectors have been coached on how to reduce the risk of falling victim to cyber criminals.

---

Rhadamanthys Stealer Malware Evolves With More Powerful Features

The malware targets email, FTP, and online banking credentials. The latest version includes a new plugin system for customization, a "Data Spy" plugin for capturing RDP login credentials, and improvements in stealing data from browsers.