Latest Cybersecurity News and Articles
19 October 2023
EDF, the company operating nuclear power plants in the UK, is facing increased regulatory attention after an inspection of its cybersecurity practices. The company failed to provide a comprehensive cybersecurity improvement plan.
19 October 2023
The attackers made use of legitimate tools like Plink to configure port-forwarding rules, enabling remote access via the Remote Desktop Protocol (RDP), and modified Windows firewall rules to facilitate their activities.
19 October 2023
Australian startup ChipherStash raises $3 million in seed funding for technology that keeps data encrypted in use.
The post CipherStash Raises $3 Million for Encryption-in-Use Technology appeared first on SecurityWeek.
19 October 2023
To mitigate the risk, organizations should implement strategies such as employee training, geolocation and geofencing, endpoint data encryption, and secure storage solutions.
19 October 2023
CISA, NSA, FBI, and MS-ISAC have released guidance and prevention recommendations on common phishing techniques.
The post US Government Releases Anti-Phishing Guidance appeared first on SecurityWeek.
19 October 2023
The time between a vulnerability being discovered and hackers exploiting it is narrower than ever – just 12 days. So it makes sense that organizations are starting to recognize the importance of not leaving long gaps between their scans, and the term "continuous vulnerability scanning" is becoming more popular.
Hackers won’t wait for your next scan
One-off scans can be a simple ‘one-and-done'
19 October 2023
A hacker has leaked 4.1 million stolen genetic data profiles from 23andMe, a DNA testing company, on a hacking forum. This follows a recent leak of 1 million profiles of Ashkenazi Jews.
19 October 2023
Google improves Android devices’ proactive protections against malware with real-time scanning at code level.
The post Google Play Protect Gets Real-Time Code Scanning appeared first on SecurityWeek.
19 October 2023
Google has announced an update to its Play Protect with support for real-time scanning at the code level to tackle novel malicious apps prior to downloading and installing them on Android devices.
"Google Play Protect will now recommend a real-time app scan when installing apps that have never been scanned before to help detect emerging threats," the tech giant said.
Google Play Protect is a
19 October 2023
A hypothetical cyberattack on a major financial services payment system could result in global economic losses of up to $3.5 trillion over a five-year period. The United States, China, and Japan are the countries most at risk.
19 October 2023
The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.
The post Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 appeared first on SecurityWeek.
19 October 2023
The attackers employed sophisticated techniques, including exploiting a vulnerability in Internet Explorer and using specialized malware modules for data exfiltration, highlighting the increasing complexity of targeted attacks.
19 October 2023
The marketplace, which used an online payment system called Perfect Money, offered illicit cryptocurrency exchange services and listed credentials belonging to 350,000 devices for sale globally.
19 October 2023
Healthcare solutions giant Henry Schein has disclosed a cybersecurity incident that disrupted operations and possibly led to a data breach.
The post Operations of Healthcare Solutions Giant Henry Schein Disrupted by Cyberattack appeared first on SecurityWeek.
19 October 2023
Henry Schein, Inc. experienced a cybersecurity incident that temporarily disrupted some of its business operations but did not impact its clients' practice management software.
19 October 2023
The Iran-linked OilRig threat actor targeted an unnamed Middle East government between February and September 2023 as part of an eight-month-long campaign.
The attack led to the theft of files and passwords and, in one instance, resulted in the deployment of a PowerShell backdoor called PowerExchange, the Symantec Threat Hunter Team, part of Broadcom, said in a report shared with The Hacker News
19 October 2023
A hacker in Finland has been charged with over 21,000 counts of extortion for stealing psychotherapy patient records and attempting to extort money from a therapy center.
19 October 2023
Multiple North Korean hacking groups have exploited a recent TeamCity vulnerability and Microsoft warns of potential supply chain attacks.
The post North Korean Hackers Exploiting Recent TeamCity Vulnerability appeared first on SecurityWeek.
19 October 2023
Google has announced a significant update to its Google Play Protect feature in response to the increasing threats targeting mobile devices. It includes real-time code-level scanning during the installation process to counter evasion techniques.
19 October 2023
Pro-Ukrainian hackers known as the Ukrainian Cyber Alliance claim to have wiped out the servers of the Trigona ransomware gang, a group linked to the Russian cybercriminal underground.