Latest Cybersecurity News and Articles
17 November 2023
Solutions Granted will continue to support products from competing endpoint security vendors while working with SonicWall, emphasizing an open and inclusive approach in the industry.
17 November 2023
The U.S. Federal Communications Commission (FCC) is adopting new rules that aim to protect consumers from cell phone account scams that make it possible for malicious actors to orchestrate SIM-swapping attacks and port-out fraud.
“The rules will help protect consumers from scammers who target data and personal information by covertly swapping SIM cards to a new device or porting phone numbers to
17 November 2023
The exposed data included device usernames with employee names or emails, allowing potential attackers to identify employees and their activities, posing a significant threat to the organization's security.
17 November 2023
CISA adds Sophos, Oracle and Microsoft product security holes to its Known Exploited Vulnerabilities (KEV) catalog.
The post CISA Warns of Attacks Exploiting Sophos Web Appliance Vulnerability appeared first on SecurityWeek.
17 November 2023
Aviram Azari, an Israeli man who made nearly $5 million from a hacking scheme, has been sentenced to 80 months in prison in the US.
The post Israeli Man Who Made $5M From Hacking Scheme Sentenced to Prison in US appeared first on SecurityWeek.
17 November 2023
The ransomware gang behind the attack, AlphV/Black Cat, took extraordinary measures by pressuring MeridianLink to pay a ransom and even claimed to have reported the incident to the SEC.
17 November 2023
In 2023, the cloud isn't just a technology—it's a battleground. Zenbleed, Kubernetes attacks, and sophisticated APTs are just the tip of the iceberg in the cloud security warzone.
In collaboration with the esteemed experts from Lacework Labs, The Hacker News proudly presents an exclusive webinar: 'Navigating the Cloud Attack Landscape: 2023 Trends, Techniques, and Tactics.'
Join us for an
17 November 2023
Toyota Financial Services has been hit by a ransomware attack that may have involved exploitation of the CitrixBleed vulnerability.
The post CitrixBleed Vulnerability Exploitation Suspected in Toyota Ransomware Attack appeared first on SecurityWeek.
17 November 2023
These vulnerabilities include a Microsoft Windows security feature bypass, a command injection vulnerability in Sophos Web Appliance, and an unspecified vulnerability in Oracle Fusion Middleware.
17 November 2023
A new SpyAgent campaign targeting smartphone users in South Korea has infected over 200 devices since early October. The malware is distributed through phishing sites, utilizing malicious Android and iOS apps, with attackers initiating contact via SMS, persuading victims to switch to LINE messenger for further communication.
17 November 2023
An unknown threat actor has been observed publishing typosquat packages to the Python Package Index (PyPI) repository for nearly six months with an aim to deliver malware capable of gaining persistence, stealing sensitive data, and accessing cryptocurrency wallets for financial gain.
The 27 packages, which masqueraded as popular legitimate Python libraries, attracted thousands of downloads,
17 November 2023
The gang operated from call centers in Ukraine and targeted victims primarily in the Czech Republic. They employed a technique called "vishing" to deceive victims into revealing sensitive information.
17 November 2023
The vulnerability (CVE-2023-37580) allowed for the execution of malicious scripts by tricking users into clicking on specially crafted URLs, reflecting the attack back to the user.
17 November 2023
The command injection vulnerability, identified as CVE-2023-36553, is a variant of a previously fixed security issue and can lead to unauthorized data access, modification, or deletion.
17 November 2023
U.S. cybersecurity and intelligence agencies have released a joint advisory about a cybercriminal group known as Scattered Spider that's known to employ sophisticated phishing tactics to infiltrate targets.
"Scattered Spider threat actors typically engage in data theft for extortion using multiple social engineering techniques and have recently leveraged BlackCat/ALPHV ransomware alongside their
17 November 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation in the wild.
The vulnerabilities are as follows -
CVE-2023-36584 (CVSS score: 5.4) - Microsoft Windows Mark-of-the-Web (MotW) Security Feature Bypass Vulnerability
CVE-2023-1671 (CVSS score: 9.8) -
16 November 2023
Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.
16 November 2023
The motive behind these cloned sites is likely to generate traffic for gambling operators, as they can serve third-party ads that publishers may be reluctant to carry on their own sites.
16 November 2023
One of the vulnerabilities, known as "Reptar," affects Intel CPUs and could lead to system instability or privilege escalation. The other vulnerability, CVE-2023-46835, could allow malicious code in a guest VM to compromise an AMD-based host.
16 November 2023
Google launches new Titan security key with passkey support, allowing users to store up to 250 unique passkeys.
The post Google Adds Passkey Support to New Titan Security Key appeared first on SecurityWeek.