Latest Cybersecurity News and Articles

---

Report: LockBit Remains Top Global Ransomware Threat

Researchers at ZeroFox found that LockBit was leveraged in more than a quarter of global ransomware and digital extortion (R&DE) attacks in the seven quarters analyzed from January 2022 to September 2023.

---

Schools in Maine, Indiana and Georgia Contend Ransomware Attacks

The Henry County Schools district in Georgia and the Hermon School Department in Maine are among the latest victims, with the former experiencing a ransomware attack and the latter having outdated software vulnerabilities exploited.

---

Microsoft Will Offer Extended Security Updates for Windows 10

Microsoft will offer Extended Security Updates (ESU) for Windows 10 users after the end of support, but they will have to pay for them. ESUs will provide critical security updates but not new features or design changes.

---

Nissan Investigates Cyberattack Involving its Systems in Australia and New Zealand

Nissan's warning to customers to remain vigilant suggests a potential data breach may have occurred, highlighting the ongoing threat to personal information in the automotive industry.

---

Report shows rise in threat actors exploiting remote access software

A new report shows increasing instances of remote access software abuse and the rise of cyber adversaries using password-stealers.

---

CISA Performance Goals Program Trims Exploited CVEs

Since the release of the CPG program, organizations enrolled in CISA's vulnerability scanning service have reduced their average number of known exploited vulnerabilities by about 20%.

---

Threat Actors can Leverage AWS STS to Infiltrate Cloud Accounts

According to the experts, to mitigate AWS token abuse, organizations should log CloudTrail event data, detect role-chaining events and MFA abuse, and rotate long-term IAM user access keys.

---

Deutsche Wohnen Ruling Set to Drive Up GDPR Fines

The ruling establishes that a lack of knowledge by management is not a defense, and organizations can be fined based on their own turnover and the turnover of their parent company.

---

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

A critical Bluetooth security flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS devices. Tracked as CVE-2023-45866, the issue relates to a case of authentication bypass that enables attackers to connect to susceptible devices and inject keystrokes to achieve code execution as the victim. "Multiple Bluetooth stacks have authentication bypass

---

New Stealthy 'Krasue' Linux Trojan Targeting Telecom Firms in Thailand

The deployment vector of Krasue is still unknown, but it is suspected to exploit vulnerabilities, use credential brute-force attacks, or be downloaded as part of a fake software package.

---

Hacking the Human Mind: Exploiting Vulnerabilities in the 'First Line of Cyber Defense'

Humans are complex beings with consciousness, emotions, and the capacity to act based on thoughts. In the ever-evolving realm of cybersecurity, humans consistently remain primary targets for attackers. Over the years, these attackers have developed their expertise in exploiting various human qualities, sharpening their skills to manipulate biases and emotional triggers with the objective of

---

UK and allies expose Russian intelligence services for cyber campaign of attempted political interference

The UK and allies call out the Russian Intelligence Services for a campaign of malicious cyber activity attempting to interfere in UK politics and democratic processes

---

UK and allies expose Russian intelligence services for cyber campaign of attempted political interference

The UK and allies call out the Russian Intelligence Services for a campaign of malicious cyber activity attempting to interfere in UK politics and democratic processes

---

Russian FSB cyber actor Star Blizzard continues worldwide spear-phishing campaigns

The Russia-based actor is targeting organisations and individuals in the UK and other geographical areas of interest.

---

Third-Party Breaches Shake the Foundations of the Energy Sector

The energy industry's significance and interconnectedness make it a prime target for cyber threats, impacting not only financial losses but also manufacturing, healthcare, and transportation.

---

US Navy Contractor Austal USA Confirms Cyberattack After Data Leak

The Hunters International ransomware group claimed responsibility for the breach and threatened to leak more stolen data, including compliance documents and engineering data.

---

Building a Robust Threat Intelligence with Wazuh

Threat intelligence refers to gathering, processing, and analyzing cyber threats, along with proactive defensive measures aimed at strengthening security. It enables organizations to gain a comprehensive insight into historical, present, and anticipated threats, providing context about the constantly evolving threat landscape. Importance of threat intelligence in the cybersecurity ecosystem

---

GST Invoice Billing Inventory App Exposes Sensitive Data to Threat Actors

The app, used by businesses for invoicing and financial management, had an open Firebase database containing user data such as phone numbers, emails, and addresses, as well as corporate data like names, invoice counts, and bank balances.

---

Governments May Spy on You by Requesting Push Notifications from Apple and Google

Unspecified governments have demanded mobile push notification records from Apple and Google users to pursue people of interest, according to U.S. Senator Ron Wyden. "Push notifications are alerts sent by phone apps to users' smartphones," Wyden said. "These alerts pass through a digital post office run by the phone operating system provider -- overwhelmingly Apple or Google. Because of

---

Report: Challenging the ‘Good Enough’ Cybersecurity Mindset

A recent survey by CompTIA found that many businesses believe their cybersecurity measures are "good enough," posing a challenge to their cybersecurity initiatives. Nearly 2 in 5 respondents cited this as a challenge.