Latest Cybersecurity News and Articles
20 October 2023
The BlackCat ransomware operators have introduced a new tool called Munchkin, which allows them to spread their malware to remote machines and shares on a victim organization's network.
20 October 2023
Implementing automated workflows, bi-directional ticketing system integration, and tracking performance metrics enables efficient and scalable risk reduction across the organization.
20 October 2023
Threat actors are using sophisticated techniques like Punycode and brand impersonation to deceive users and distribute malicious software. Users need to be cautious when downloading programs and should verify the authenticity of websites and ads.
20 October 2023
Members of a House panel expressed concerns about China setting global expectations for data collection and use, and emphasized the need for the U.S. to lead in AI development and deployment.
20 October 2023
A majority of businesses are actively planning to move towards passwordless technology, with the expectation that passwords will represent less than a quarter of logins within five years or less.
20 October 2023
The tribunal's decision highlights a specific exemption for foreign law enforcement, but does not prevent the ICO from taking action against international companies that process data of individuals in the UK.
20 October 2023
A new information stealer named ExelaStealer has become the latest entrant to an already crowded landscape filled with various off-the-shelf malware designed to capture sensitive data from compromised Windows systems.
"ExelaStealer is a largely open-source infostealer with paid customizations available from the threat actor," Fortinet FortiGuard Labs researcher James Slaughter said in a
20 October 2023
Knight has given a deadline of 308 hours and 2 minutes for the ransom payment, threatening to sell or publicly release the stolen data if the management of US Claims Solutions does not respond within 48 hours.
20 October 2023
The exposed data includes customer names, email addresses, service usage details, and purchase information, but credit card information was not stored in the compromised database.
20 October 2023
The U.S. government has announced the seizure of 17 website domains used by North Korean information technology (IT) workers as part of an illicit scheme to defraud businesses across the world, evade sanctions, and fund the country's ballistic missile program.
The Department of Justice (DoJ) said the U.S. confiscated approximately $1.5 million of the revenue that these IT workers collected from
19 October 2023
The BlackCat ransomware group has introduced a new evasion tool called Munchkin, distributed as an ISO file, allowing them to run ransomware on remote machines. The controller malware is written in Rust and resembles the BlackCat malware family. Organizations are recommended to leverage the updated IOCs associated with the malware to stay safe.
19 October 2023
According to a recent Yubico survey, 80% of respondents are concerned about the security of their online accounts and 39% admit to reusing passwords.
19 October 2023
British startup is working on software to mitigate against the ‘wild west’ of unregulated AI apps harvesting company data at scale.
The post Harmonic Lands $7M Funding to Secure Generative AI Deployments appeared first on SecurityWeek.
19 October 2023
According to a recent phishing report, nearly one in three users are likely to click on a suspicious link or comply with a fraudulent request.
19 October 2023
Thousands of IT workers contracting with U.S. firms have secretly sent millions of dollars to North Korea to fund its missile program.
The post FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program appeared first on SecurityWeek.
19 October 2023
A recent Q3 ransomware report found a nearly 15% increase in ransomware activity since Q2 due to an increased number of ransomware groups.
19 October 2023
An updated version of a sophisticated backdoor framework called MATA has been used in attacks aimed at over a dozen Eastern European companies in the oil and gas sector and defense industry as part of a cyber espionage operation that took place between August 2022 and May 2023.
"The actors behind the attack used spear-phishing mails to target several victims, some were infected with Windows
19 October 2023
The IT manager and his wife stole the personally identifiable information of over 9,000 individuals and sold it for $160,000 in Bitcoin, which was later used for criminal activities.
19 October 2023
A new report reveals cyberattacks are the leading cause of IT downtime and data loss in 2023.
19 October 2023
The leaked data poses serious risks, as threat actors could potentially disrupt services, launch phishing campaigns, and engage in "doxxing" and "swatting" activities, putting customers at risk.