Latest Cybersecurity News and Articles

---

New Threat Actor 'AeroBlade' Emerges in Espionage Attack on U.S. Aerospace

A previously undocumented threat actor has been linked to a cyber attack targeting an aerospace organization in the U.S. as part of what's suspected to be a cyber espionage mission. The BlackBerry Threat Research and Intelligence team is tracking the activity cluster as AeroBlade. Its origin is currently unknown and it's not clear if the attack was successful. "The actor used spear-phishing

---

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a critical security flaw in its Outlook email service to gain unauthorized access to victims' accounts within Exchange servers. The tech giant attributed the intrusions to a threat actor it called Forest Blizzard (formerly Strontium), which is also widely tracked under the monikers APT28,

---

Suspected digital shopping fraud up 12% during Cyber Five holiday

A new report highlights global e-commerce fraud that occurred during the start of the 2023 holiday shopping season.

---

Mobile payment fraud increased in 2023

According to a recent report from BioCatch, mobile banking rates increased to 73% in 2023. This rise has also led to a surge in mobile fraud.

---

Australia news live: Reserve Bank to deliver year’s last interest rates decision as economists tip no change

Poll finds 28 of 30 economists expect central bank to keep cash rate steady at 4.35%. Follow the day’s news liveGet our morning and afternoon news emails, free app or daily news podcastIn case you missed it: early this morning, Westpac services came back online following an outage overnight where customers were unable to access their online accounts or use their cards.You can read all the details on this below:Our mobile and online banking services are now restored and running as usual.We want to apologise to all our customers who were impacted by the issue overnight. We recognise this took too long to resolve and we thank customers for their patience. Continue reading...

---

Establishing New Rules for Cyber Warfare

The International Committee of the Red Cross (ICRC) has released a set of rules for civilian hackers involved in cyber conflicts. The rules aim to clarify the line between civilians and combatants in cyberspace during times of war.

---

New AeroBlade Hackers Target Aerospace Sector in the U.S.

The attacks involve the use of weaponized documents with malicious macros that create a reverse shell, allowing the attackers to gain control over the compromised systems.

---

BlackCat Ransomware Strikes Ho Chi Minh City Power Corporation

The ongoing attack spree by the BlackCat ransomware group extends beyond Vietnam Electricity, with social media platforms like Roblox and Twitch potentially being targeted next.

---

Data breach affects Michigan healthcare companies

The Michigan Attorney General announced that Corewell Health suffered a data breach affecting Michigan residents, including Social Security numbers.

---

More Than 1,500 Hugging Face API Tokens Exposed, Major Projects Vulnerable

The exposed API tokens had write permissions, allowing attackers to modify files in account repositories and potentially manipulate existing models, posing a significant threat to organizations and their applications.

---

UK schoolgirls secure victory as champions of NCSC cyber skills contest

Teams of schoolgirls from across the UK have been crowned cyber security champions.

---

Depauw University Warns of Data Breach as Ransomware Attacks on Colleges Surge

The attack on DePauw University was conducted by the Black Suit ransomware gang, highlighting the increasing trend of ransomware attacks targeting educational institutions.

---

New Variant of P2Pinfect Targets MIPS Devices Including Routers and IoT Devices

The new variant includes updated evasion techniques, such as Virtual Machine detection, debugger detection, and anti-forensics measures on Linux hosts, making it more difficult for researchers to analyze.

---

New BLUFFS Bluetooth Attack Expose Devices to Adversary-in-the-Middle Attacks

New research has unearthed multiple novel attacks that break Bluetooth Classic's forward secrecy and future secrecy guarantees, resulting in adversary-in-the-middle (AitM) scenarios between two already connected peers. The issues, collectively named BLUFFS, impact Bluetooth Core Specification 4.2 through 5.4. They are tracked under the identifier CVE-2023-24023 (CVSS score: 6.8)

---

Astrology Website WeMystic Exposes Over 13 Million User Records

The astrology and spiritual content platform WeMystic exposed the sensitive data of its users, including names, email addresses, and dates of birth, due to an open and passwordless MongoDB database.

---

Make a Fresh Start for 2024: Clean Out Your User Inventory to Reduce SaaS Risk

As work ebbs with the typical end-of-year slowdown, now is a good time to review user roles and privileges and remove anyone who shouldn’t have access as well as trim unnecessary permissions. In addition to saving some unnecessary license fees, a clean user inventory significantly enhances the security of your SaaS applications. From reducing risk to protecting against data leakage, here is how

---

Bridging the Gap Between Cloud vs On-Premise Security

It is crucial to maintain unified visibility, control, and management across both cloud-based and on-premise security measures to bridge the gap and create a comprehensive and future-proof security stack.

---

New P2PInfect Botnet MIPS Variant Targeting Routers and IoT Devices

Cybersecurity researchers have discovered a new variant of an emerging botnet called P2PInfect that's capable of targeting routers and IoT devices. The latest version, per Cado Security Labs, is compiled for Microprocessor without Interlocked Pipelined Stages (MIPS) architecture, broadening its capabilities and reach. "It's highly likely that by targeting MIPS, the P2PInfect developers

---

New Proxy Malware Targets Mac Users Through Pirated Software

The proxy trojan connects to a command and control server via DNS-over-HTTPS and supports creating TCP or UDP connections, indicating a sophisticated and wide-ranging campaign targeting multiple systems.

---

Update: New Relic Admits Attack on Staging Systems, User Accounts

Web tracking and analytics company New Relic has disclosed a cyberattack on its staging systems, which were compromised in mid-November by an unauthorized actor using stolen credentials and social engineering.