Latest Cybersecurity News and Articles
16 November 2023
These vulnerabilities, including critical and high-severity bugs, can enable attackers to compromise networks, deploy malware, and disrupt services, highlighting the need for improved security measures in OT and IoT devices.
16 November 2023
According to a new report, 46% of small-to-medium sized businesses have experienced a ransomware attack.
16 November 2023
The Biden for President campaign is looking for a cybersecurity chief to “define the organization's risk appetite” and manage its cybersecurity and IT initiatives.
The post Biden Campaign Looking for CISO appeared first on SecurityWeek.
16 November 2023
Scammers are exploiting the trust placed in reputable accounts by creating fake accounts with similar names and spreading fabricated security breach claims to deceive users into clicking on malicious links and revealing their wallet information.
16 November 2023
A zero-day flaw in the Zimbra Collaboration email software was exploited by four different groups in real-world attacks to pilfer email data, user credentials, and authentication tokens.
"Most of this activity occurred after the initial fix became public on GitHub," Google Threat Analysis Group (TAG) said in a report shared with The Hacker News.
The flaw, tracked as CVE-2023-37580 (CVSS score:
16 November 2023
Google says a Zimbra zero-day from earlier this year, CVE-2023-37580, was exploited in several campaigns to hack government emails.
The post Zimbra Zero-Day Exploited to Hack Government Emails appeared first on SecurityWeek.
16 November 2023
Australia’s cooperation with the U.S. and Britain to develop an Australian fleet of submarines powered by U.S. nuclear technology is a likely target of state-sponsored cyberespionage, the nation’s digital spy agency said.
The post State-Sponsored Online Spies Likely to Target Australian Submarine Program, Spy Agency Says appeared first on SecurityWeek.
16 November 2023
Russian-speaking affiliates of the ALPHV/BlackCat ransomware gang are using malvertising for popular software to distribute the Nitrogen malware and infect organizations with ransomware.
16 November 2023
The top five categories of Bad Bot attacks are fake account creation, account takeovers, scraping, account management, and in-product abuse.
The post Bad Bots Account for 73% of Internet Traffic: Analysis appeared first on SecurityWeek.
16 November 2023
According to a recent cybersecurity report by Cisco, 14% of global organizations are ‘fully prepared’ to deploy artificial intelligence (AI).
16 November 2023
The Rhysida attackers exploit vulnerabilities like the lack of Multi-Factor Authentication (MFA) and the Zerologon vulnerability to gain initial access and maintain a presence within victims' networks.
16 November 2023
Hackers claiming responsibility for the breach have announced it on the Breach Forums. They allege to have stolen over 20GB of Plume's Wi-Fi database, containing 15 million lines of information.
16 November 2023
According to a recent cybersecurity report, businesses lost 9% of their revenue over the last 12 months as a direct result of cyberattacks.
16 November 2023
A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as an entirely new advanced persistent threat (APT).
Cybersecurity company NSFOCUS has described DarkCasino as an "economically motivated" actor that first came to light in 2021.
"DarkCasino is an APT threat actor with strong technical and learning ability, who is good
16 November 2023
Thomas McCormick, aka fubar, an administrator of the Darkode hacking forum, has been sentenced to 18 months in prison.
The post Administrator of Darkode Hacking Forum Sentenced to Prison appeared first on SecurityWeek.
16 November 2023
Critical infrastructure, including water supplies and electricity grids, are likely targets for cyberattacks, along with the theft of military secrets and intellectual property.
16 November 2023
According to a ransomware report, almost half of small and medium businesses (SMBs) and enterprises (46% each) have experienced a ransomware attack.
16 November 2023
The breach was caused by a hacker exploiting a vulnerability in a third-party application. Customer information such as names, phone numbers, postal and email addresses may have been exposed, but financial and password information remains unaffected.
16 November 2023
CISA's roadmap outlines five key areas of focus, including responsible use of AI, secure adoption of AI-based software, protection against malicious use of AI, collaboration with partners, and workforce education on AI systems and techniques.
16 November 2023
PJ&A's breach highlights the ongoing risk posed by third-party vendors in the healthcare industry, as they were responsible for 40% of major health data breaches reported to HHS OCR in 2023.