Latest Cybersecurity News and Articles
20 November 2023
Morgan Stanley agrees to pay $6.5 million for exposing personal information through negligent data-security practices.
The post Morgan Stanley Fined $6.5 Million for Exposing Customer Information appeared first on SecurityWeek.
20 November 2023
Microsoft hired Sam Altman and another architect of OpenAI for a new venture after their sudden departures shocked the artificial intelligence world.
The post Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing appeared first on SecurityWeek.
20 November 2023
The FTC announced that prison communications provider Global Tel*Link Corp will now be required to disclose any future data breaches within 30 days.
20 November 2023
Johnson Controls has patched a critical vulnerability that can be exploited to take complete control of Frick industrial refrigeration products.
The post Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products appeared first on SecurityWeek.
20 November 2023
The CISA and FBI have issued a joint advisory warning about the evolving tactics of the cybercriminal group Scattered Spider, which recently incorporated BlackCat ransomware into its extortion strategy. After encrypting the servers, attackers would communicate with victims via TOR, Tox, email, or encrypted applications. To reduce the likelihood and impact of cyberattacks by Scattered Spider, federal agencies have advised organizations to follow the best cybersecurity practices.
20 November 2023
The malware delays its activation until it detects human mouse activity, making it difficult for analysis systems to detect. It utilizes cursor positions to calculate angles and determine if human behavior is present.
20 November 2023
It's crucial to thoroughly assess the risk profiles of various SSE platforms and weigh their suitability against their organization's risk tolerance before adopting SSE.
The post 5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms appeared first on SecurityWeek.
20 November 2023
Yamaha Motor discloses ransomware attack impacting the personal information of its Philippines subsidiary’s employees.
The post Yamaha Motor Confirms Data Breach Following Ransomware Attack appeared first on SecurityWeek.
20 November 2023
The vulnerability allows attackers to access files, execute code, and obtain passwords. The exploit takes advantage of an unauthenticated mass-assignment vulnerability and AS2 header parsing.
20 November 2023
Gamaredon’s self-propagating LitterDrifter USB worm spreads from Ukraine to the US and other countries.
The post Russia’s LitterDrifter USB Worm Spreads Beyond Ukraine appeared first on SecurityWeek.
20 November 2023
The new rules put forth by the FCC require wireless providers to adopt secure authentication methods and notify customers immediately of any SIM change or port-out request.
20 November 2023
Today’s security leaders must manage a constantly evolving attack surface and a dynamic threat environment due to interconnected devices, cloud services, IoT technologies, and hybrid work environments. Adversaries are constantly introducing new attack techniques, and not all companies have internal Red Teams or unlimited security resources to stay on top of the latest threats. On top of that,
20 November 2023
The LitterDrifter worm spreads malware via USB drives and communicates with the threat actor's command-and-control servers. It is suspected to be an evolution of a previously disclosed USB worm.
20 November 2023
Over 250 organizations take part in GridEx VII, the largest North American exercise focusing on the security of the electrical grid.
The post 250 Organizations Take Part in Electrical Grid Security Exercise appeared first on SecurityWeek.
20 November 2023
The stealer malware known as LummaC2 (aka Lumma Stealer) now features a new anti-sandbox technique that leverages the mathematical principle of trigonometry to evade detection and exfiltrate valuable information from infected hosts.
The method is designed to "delay detonation of the sample until human mouse activity is detected," Outpost24 security researcher Alberto Marín said in a technical
20 November 2023
The US Department of Energy is offering $70 million in funding to improve the cybersecurity of rural and municipal utilities.
The post US Announces $70 Million Cybersecurity Boost for Rural, Municipal Utilities appeared first on SecurityWeek.
20 November 2023
The 8Base ransomware group is using a variant of the Phobos ransomware to carry out financially motivated attacks, with the ransomware component embedded in the SmokeLoader process memory.
20 November 2023
The hackers disguised phishing letters as official requests from Ukraine's security service, urging victims to provide information crucial for "national security," but the attached PDF file actually installed the Remcos software.
20 November 2023
Some K-12 public schools are racing to improve protection against the threat of online attacks, but lax cybersecurity means thousands of others are vulnerable to ransomware gangs that can steal confidential data and disrupt operations.
The post K-12 Schools Improve Protection Against Online Attacks, but Many Are Vulnerable to Ransomware Gangs appeared first on SecurityWeek.
20 November 2023
The Indian hack-for-hire group known as Appin, which operated from 2009 and is now defunct, was involved in numerous incidents of cyber espionage and surveillance targeting individuals and entities worldwide.