Latest Cybersecurity News and Articles
21 November 2023
According to a recent Lookout report, phishing attacks are expected to more than double the week of Thanksgiving as employees spend more time online.
21 November 2023
The hacking group SiegedSec claimed responsibility for the breach and stated that they obtained a significant amount of personal information, including social security numbers and banking details.
21 November 2023
Data breach at moving companies impacts Canadian government employees, and military and police personnel.
The post Canadian Military, Police Impacted by Data Breach at Moving Companies appeared first on SecurityWeek.
21 November 2023
The Tor network has removed many relays associated with a cryptocurrency scheme, citing risk to integrity and users.
The post Tor Network Removes Risky Relays Associated With Cryptocurrency Scheme appeared first on SecurityWeek.
21 November 2023
The company failed to properly erase personal data stored on decommissioned devices and did not monitor the actions of a third-party moving company, leading to the unauthorized sale of computer equipment containing sensitive information.
21 November 2023
The malware poses as legitimate organizations like banks and government services, urging users to install the malicious app to update their PAN card details, ultimately stealing banking information and personal data.
21 November 2023
A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email clients and nearly 40 web browsers.
"ZPAQ is a file compression format that offers a better compression ratio and journaling function compared to widely used formats like ZIP and RAR," G Data malware analyst Anna Lvova said in a Monday analysis.
21 November 2023
Business logic attacks, which exploit the intended functionality of applications and APIs, have increased in the past year, making up 42.6% of attacks on retail sites and highlighting the vulnerability of the e-commerce industry.
21 November 2023
Interview with Craig Martell, Chief Digital and AI Officer (CDAO) for the U.S. Department of Defense, about AI use in the military.
The post Insider Q&A: Pentagon AI Chief on Network-Centric Warfare, Generative AI Challenges appeared first on SecurityWeek.
21 November 2023
Over the past ten years, Microsoft has handed out $63 million in rewards as part of its bug bounty programs.
The post Microsoft Paid Out $63 Million Since Launch of First Bug Bounty Program 10 Years Ago appeared first on SecurityWeek.
21 November 2023
Sumo Logic has completed its investigation into the recent security breach and found no evidence of impact to customer data.
The post Sumo Logic Completes Investigation Into Recent Security Breach appeared first on SecurityWeek.
21 November 2023
Wireshark 4.2.0 introduces notable improvements, such as enhanced packet list sorting and smarter display filter autocomplete. It supports a wide range of new protocols, including HTTP/3, SAP protocols, Zigbee TLV, and VMware HeartBeat.
21 November 2023
Phishing attacks are steadily becoming more sophisticated, with cybercriminals investing in new ways of deceiving victims into revealing sensitive information or installing malicious software. One of the latest trends in phishing is the use of QR codes, CAPTCHAs, and steganography. See how they are carried out and learn to detect them.
Quishing
Quishing, a phishing technique resulting from the
21 November 2023
Threat actors are targeting the education, government, and business services sectors with a remote access trojan called NetSupport RAT. The malware is typically downloaded onto a victim's computer through deceptive websites and fake browser updates.
21 November 2023
The Kinsing threat actors are actively exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency miners and rootkits.
"Once Kinsing infects a system, it deploys a cryptocurrency mining script that exploits the host's resources to mine cryptocurrencies like Bitcoin, resulting in significant damage to the infrastructure and a negative
21 November 2023
The CISA is pushing for manufacturers and vendors to take responsibility for the security of their products. CISA wants detailed data and logs from technology companies to prove they are incorporating security measures.
21 November 2023
The use of the ZPAQ compression format by threat actors in this malware campaign highlights the need for improved security measures and awareness regarding lesser-known archive tools.
21 November 2023
Researchers from the Electronic Frontier Foundation have discovered that the Dragon Touch KidzPad Y88X 10 tablet, sold on Amazon, contains malware and preinstalled riskware. The tablet also comes with an outdated parental control app called KIDOZ.
21 November 2023
The Rhysida ransomware gang, responsible for the attack, has leaked data stolen from the library's internal HR files, prompting the library to advise users to change their passwords as a precautionary measure.
21 November 2023
Android smartphone users in India are the target of a new malware campaign that employs social engineering lures to install fraudulent apps that are capable of harvesting sensitive data.
“Using social media platforms like WhatsApp and Telegram, attackers are sending messages designed to lure users into installing a malicious app on their mobile device by impersonating legitimate organizations,