Latest Cybersecurity News and Articles
27 November 2023
The machine that was hacked uses a system called Unitronics, which contains software or has components that are Israeli-owned. The system has since been disabled. Authorities stressed that there is no known risk to the drinking water or water supply.
27 November 2023
The NCSC and South Korea’s NIS issued a joint warning against the Lazarus hacking group leveraging a zero-day flaw in the MagicLine4NX software. The zero-day exploit allowed Lazarus to conduct a series of supply-chain attacks, starting with a watering hole attack on a media outlet's website. Organizations using a vulnerable version of MagicLine4NX must update the software to the latest version to stay safe.
27 November 2023
CISA and the NCSC jointly released Guidelines for Secure AI System Development to help developers of any systems that use AI make informed cybersecurity decisions at every stage of the development process.
27 November 2023
According to a Kapersky report, there were over 30 million phishing attacks in 2023, increasing during holiday online shopping periods.
27 November 2023
The attack chain involves the PAExec remote administration tool, an alternative to PsExec that's used as a launchpad to create a scheduled task that masquerades as 'MicrosoftsUpdate' which subsequently is configured to execute a Windows batch script.
27 November 2023
A new study has demonstrated that it's possible for passive network attackers to obtain private RSA host keys from a vulnerable SSH server by observing when naturally occurring computational faults that occur while the connection is being established.
The Secure Shell (SSH) protocol is a method for securely transmitting commands and logging in to a computer over an unsecured network. Based on a
27 November 2023
New guidance from US and UK cybersecurity agencies provides recommendations for secure AI system development.
The post US, UK Cybersecurity Agencies Publish AI Development Guidance appeared first on SecurityWeek.
27 November 2023
The company is now trying to recover the funds but argued that the incident “stands out as one of the most sophisticated in the history of DeFi.” The company advised users to “promptly withdraw their funds.”
27 November 2023
Hacktivism is evolving. It is important for both the law and cyber defenders to understand the current and potential activity of hacktivism to better understand how it should be treated.
The post Hacktivism: What’s in a Name… It May be More Than You Expect appeared first on SecurityWeek.
27 November 2023
Fidelity National Financial is experiencing service disruptions after systems were taken down to contain a cyberattack.
The post Fidelity National Financial Takes Down Systems Following Cyberattack appeared first on SecurityWeek.
27 November 2023
UK and Korea say DPRK state-sponsored hackers targeted governments, defense organizations via supply chain attacks.
The post UK, Korea Warn of DPRK Supply Chain Attacks Involving Zero-Day Flaws appeared first on SecurityWeek.
27 November 2023
Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or water supply.
The post Hackers Hijack Industrial Control System at US Water Utility appeared first on SecurityWeek.
27 November 2023
As proof of the breach, the threat actor shared screenshots of what they claim is stolen GE data, including a database from GE Aviations that appears to contain information on military projects. GE confirmed that they are investigating the claim.
27 November 2023
The East Texas healthcare system is just the latest hospital group that has been forced to turn ambulances away because of an apparent cybersecurity incident. The cyber incident at UT Health East Texas began on Thursday.
27 November 2023
The agency quoted the company as saying that "as a result of this illegal breach some information from the company's email system and customers' database could be compromised."
27 November 2023
The U.K. and U.S., along with international partners from 16 other countries, have released new guidelines for the development of secure artificial intelligence (AI) systems.
"The approach prioritizes ownership of security outcomes for customers, embraces radical transparency and accountability, and establishes organizational structures where secure design is a top priority," the U.S.
26 November 2023
The U.S. military is increasing use of AI technology that will fundamentally alter the nature of war.
The post Pentagon’s AI Initiatives Accelerate Hard Decisions on Lethal Autonomous Weapons appeared first on SecurityWeek.
26 November 2023
New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.
26 November 2023
New guidelines for secure AI system development will help developers of any systems that use AI make informed cyber security decisions at every stage of the development process.
25 November 2023
The three critical vulnerabilities include disclosure of sensitive credentials and configuration, authentication bypass using pre-signed URLs, and subdomain validation bypass.