Latest Cybersecurity News and Articles

---

Cybercriminals Exploit Gaza Crisis With Fake Charity

The attackers posed as a group soliciting donations for children in Palestine, using emotionally charged language and news articles to manipulate recipients. They requested cryptocurrency donations and employed tactics to conceal their identity.

---

SEC Aims to Avoid Cyber Disclosure Rule 'Compliance Burdens'

The rule includes exceptions for cases where public disclosure of a cyber incident could pose significant risks to public safety or national security, allowing companies to work with law enforcement agencies to address secret cybersecurity events.

---

27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts

These malicious packages have been downloaded thousands of times, mainly from the U.S., China, France, and other countries. The attacker used steganography to hide a malicious payload within an innocent-looking image file

---

US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website

Wisconsin teenager Joseph Garrison has admitted in court to launching a credential stuffing attack on a betting website. The post US Teen Pleads Guilty to Credential Stuffing Attack on Fantasy Sports Website appeared first on SecurityWeek.

---

In Other News: Major Law Firm Hacked, Chinese Bank Pays Ransom, PyPI Security Audit

Noteworthy stories that might have slipped under the radar: top law firm hacked, Chinese bank pays ransom, and PyPI conducts first security audit. The post In Other News: Major Law Firm Hacked, Chinese Bank Pays Ransom, PyPI Security Audit appeared first on SecurityWeek.

---

FCC Tightens Telco Rules to Combat SIM-Swapping

Under the new rules, wireless carriers are required to notify customers of any SIM transfer requests, a measure designed to thwart fraudulent attempts by cybercriminals. The post FCC Tightens Telco Rules to Combat SIM-Swapping appeared first on SecurityWeek.

---

Threat Intel: To Share or Not to Share is Not the Question

Regulatory compliance and upcoming regulations, such as the Digital Operational Resilience Act, are driving the need for organizations to engage in threat intelligence sharing.

---

Toyota Recovering From Cyberattack on its Financial Services Division

The company has taken certain systems offline to investigate the unauthorized activity and reduce risk. Toyota is working with law enforcement and gradually bringing systems back online.

---

Over a Dozen Exploitable Vulnerabilities Found in AI/ML Tools

Bug hunters uncover over a dozen exploitable vulnerabilities in tools used to build chatbots and other types of AI/ML models. The post Over a Dozen Exploitable Vulnerabilities Found in AI/ML Tools appeared first on SecurityWeek.

---

40% of organizations have a clear understanding of their AI use

According to a recent cybersecurity predictions report, the top 2024 risk cited by internal audit leaders is cyber and data security (80%).

---

Half of Ransomware Groups Operating in 2023 Are New

Leaked source codes from established ransomware groups like Conti, Lockbit, and Babuk have been utilized by other cybercriminals, leading to the cross-pollination of tactics and tools.

---

Bots and fraud make up 73% of website and app traffic

A recent cyber threat report found that bots and human fraud farms were responsible for billions of attacks in the first half of 2023 and into Q3.

---

FBI and CISA Warn of Social Engineering Attacks From Scattered Spider Group

The Scattered Spider cybercriminal group targets commercial facilities sectors and subsectors, engaging in data theft for extortion using social engineering techniques and BlackCat/ALPHV ransomware.

---

Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware

Threat actors are leveraging manipulated search results and bogus Google ads that trick users who are looking to download legitimate software such as WinSCP into installing malware instead. Cybersecurity company Securonix is tracking the ongoing activity under the name SEO#LURKER. “The malicious advertisement directs the user to a compromised WordPress website gameeweb[.]com, which redirects the

---

Google to Distribute 100,000 Titan Security Keys to High-Risk Users

Google is distributing 100,000 free Titan Security Keys to high-risk individuals, including those involved in elections. Google plans to distribute these keys to governments worldwide by 2024.

---

Researchers Dive Into Activities of Indian Hack-for-Hire Firm Appin

Researchers uncover the activities of Appin, a hack-for-hire Indian firm involved in espionage, surveillance, and disruptive attacks. The post Researchers Dive Into Activities of Indian Hack-for-Hire Firm Appin appeared first on SecurityWeek.

---

Roshan Navagamuwa hired as EVP and Chief Information Officer at AIG

Roshan Navagamuwa has been hired as Executive Vice President (EVP) and Chief Information Officer (CIO) at American International Group (AIG). 

---

Long Beach is Latest California City Facing Cybersecurity Incident

While it is unclear if it is a ransomware attack, the city has taken its systems offline and plans to keep them offline for several days while working on identifying the source and implementing additional security measures.

---

Key GOP Lawmaker Calls for Renewal of Surveillance Tool as He Proposes Changes to Protect Privacy

The Republican chairman of the House Intelligence Committee has called for the renewal of a key US government surveillance tool as he proposed a series of changes aimed at safeguarding privacy. The post Key GOP Lawmaker Calls for Renewal of Surveillance Tool as He Proposes Changes to Protect Privacy appeared first on SecurityWeek.

---

Businesses that eliminate passwords report better security outcomes

New research shows organizations using passwordless technologies experience the fewest phishing attacks, are more productive and achieve greater levels of employee satisfaction.