Latest Cybersecurity News and Articles

---

Update: 23andMe Says Hackers Accessed ‘Significant Number’ of Files About Users’ Ancestry

Genetic testing company 23andMe experienced a data breach, with hackers accessing around 14,000 customer accounts and potentially compromising the personal information of other users connected to those accounts.

---

FTC creates compulsory process for legal issues involving AI

The Federal Trade Commission (FTC) approved a compulsory process regarding fraud investigations involving artificial intelligence (AI).

---

US Government Sanctions North Korea’s Kimsuky Hacking Group

Kimsuky is known for its aggressive social engineering tactics and targets governments, nuclear organizations, and foreign relations entities to gather intelligence for North Korea's interests.

---

XDSpy Hackers Attack Military-Industrial Companies in Russia

XDSpy has a history of targeting Russia's government, military, financial institutions, as well as energy, research, and mining companies, demonstrating a focus on strategic organizations in Eastern Europe.

---

Simple Hacking Technique can Extract ChatGPT Training Data

Researchers from Google DeepMind, Cornell University, and other institutions have discovered that the popular AI chatbot ChatGPT is susceptible to leaking data when prompted to repeat certain words.

---

Anna Mercardo Clark hired as Chief Information Security Officer at Phillips Lytle

Anna Mercado Clark has been hired as the first Phillips Lytle CISO. Clark has worked in data privacy and cybersecurity for the company for 12 years.

---

Anna Mercardo Clark hired as Chief Information Security Officer at Phyllis Lytle

Anna Mercado Clark has been hired as the first Phillips Lytle CISO. Clark has worked in data privacy and cybersecurity for the company for 12 years.

---

BlueVoyant Raises $140M, Buys Resilience Firm Conquest Cyber

The integration of BlueVoyant and Conquest Cyber will provide customers with more self-service capabilities and autonomous operations through the use of AI, machine learning, and virtual data lakes.

---

Hackers Use new Tool Set in Targeted Attacks Against Middle East, Africa and the US

A new set of tools, including a backdoor, a credential-stealing module, and a customized version of Mimikatz, has been used in targeted attacks against organizations in the Middle East, Africa, and the U.S.

---

Russian and Chinese Interference Networks are ‘Building Audiences’ Ahead of 2024, Warns Meta

Meta has disrupted influence operations from China and Russia, highlighting the challenges posed by generative artificial intelligence and the use of perception hacking to sow doubt in democratic processes.

---

Update: MGM CFO Expects Insurance to Cover Cyberattack Costs

The impact of the cyberattack on MGM Resorts was largely felt in September and has been mostly resolved by October, with the company reporting that business is back to normal.

---

Ukrainian Gets Eight-Year Sentence for Running Marketplace for Americans’ Data

Vitalii Chychasov, a Ukrainian citizen, has been sentenced to eight years in prison for running a marketplace that sold personal information of millions of Americans, impacting about 24 million people in total.

---

New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia

Cybersecurity researchers have disclosed a new sophisticated Android malware called FjordPhantom that has been observed targeting users in Southeast Asian countries like Indonesia, Thailand, and Vietnam since early September 2023. "Spreading primarily through messaging services, it combines app-based malware with social engineering to defraud banking customers," Oslo-based mobile app

---

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

Integration of RETVec in Gmail has significantly improved spam detection rates, reduced false positives, and decreased computational costs, making it ideal for large-scale applications and on-device models.

---

Five Resolutions to Prepare for SEC’s New Cyber Disclosure Rules

The new SEC rules on cybersecurity risk management and incident disclosure will require publicly traded companies to reevaluate their security strategies and provide investors with a greater understanding of the cyber threats they face.

---

LogoFAIL Bugs in UEFI Code Allow Planting Bootkits via Images

LogoFAIL is a set of security vulnerabilities that affect the image-parsing components in the UEFI code used by various vendors. These vulnerabilities can be exploited to hijack the booting process and deliver bootkits.

---

Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats

The U.S. Department of Justice (DOJ) and the FBI recently collaborated in a multinational operation to dismantle the notorious Qakbot malware and botnet. While the operation was successful in disrupting this long-running threat, concerns have arisen as it appears that Qakbot may still pose a danger in a reduced form. This article discusses the aftermath of the takedown, provides mitigation

---

Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

A suspected Chinese-speaking threat actor has been attributed to a malicious campaign that targets the Uzbekistan Ministry of Foreign Affairs and South Korean users with a remote access trojan called SugarGh0st RAT. The activity, which commenced no later than August 2023, leverages two different infection sequences to deliver the malware, which is a customized variant of Gh0st RAT 

---

WhatsApp’s New Secret Code Feature Hides Your Locked Chats

WhatsApp has introduced a new Secret Code feature that allows users to set a custom password to hide and protect their locked chats. The Chat Lock feature automatically conceals locked chat details from notifications.

---

Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks

The most recent Gcore Radar report and its aftermath have highlighted a dramatic increase in DDoS attacks across multiple industries. At the beginning of 2023, the average strength of attacks reached 800 Gbps, but now, even a peak as high as 1.5+ Tbps is unsurprising. To try and break through Gcore’s defenses, perpetrators made two attempts with two different strategies.