Latest Cybersecurity News and Articles
16 November 2023
To share or not to share threat intelligence isn’t the question. It’s how to share, what to share, where and with whom.
The post Threat Intel: To Share or Not to Share is Not the Question appeared first on SecurityWeek.
16 November 2023
Rwanda and Qatar have formed a partnership to collaborate on cybersecurity strategies, with a focus on improving public key infrastructure and supporting AI research and development.
16 November 2023
The threat actors behind the Rhysida ransomware engage in opportunistic attacks targeting organizations spanning various industry sectors.
The advisory comes courtesy of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC).
"Observed as a ransomware-as-a-service (RaaS)
16 November 2023
Enhanced coordination between the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and private sector partners has helped the US government in preventing and responding to the recent increase in ransomware attacks.
16 November 2023
MeridianLink, a publicly traded software company, is facing pressure from the ransomware group after allegedly not responding to their ransom demands and failing to disclose the breach.
16 November 2023
Alphv/BlackCat ransomware group files SEC complaint against MeridianLink over its failure to disclose an alleged data breach caused by the hackers.
The post Ransomware Group Files SEC Complaint Over Victim’s Failure to Disclose Data Breach appeared first on SecurityWeek.
16 November 2023
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks.
"Starting from a single compromised machine, threat actors could progress in several ways: they could move to other cloned machines with GCPW installed, gain access
16 November 2023
According to recent research on employee offboarding, 70% of IT professionals say they’ve experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to an account that wasn't deprovisioned, a surprise bill for resources that aren’t in use anymore, or a missed handoff of a critical resource or account. This is despite an average of five hours
16 November 2023
The Mexican online casino Strendus exposed sensitive user data, including home addresses and gambling amounts, due to poor cybersecurity practices and unauthorized access.
16 November 2023
The St Helens Borough Council in northwest England has managed to restore most of its services after a ransomware attack, highlighting the increasing threat faced by local government authorities.
16 November 2023
The researchers have engineered a better exploit that allows the threat actors to remain memory resident and avoid dropping their tools to disk, highlighting the urgency of patching and removing ActiveMQ servers from the internet.
16 November 2023
The ransomware attack targeted a file server and resulted in the theft of personal information belonging to employees, customers, volunteers, and donors, dating back to 1998.
16 November 2023
The funding will be used to strengthen ALTR's market position in the cloud data access governance and security space, expand its reach across various data sources, and develop partner integrations and channel relations.
16 November 2023
SAP Business One installation version 10.0 has an improper access control vulnerability that allows malicious users to read, write, and execute files in the SMB shared folder, posing a significant risk to confidentiality, integrity, and availability.
16 November 2023
The funding round was led by Maor Investments and Ten Eleven Ventures. Vulcan Cyber aims to integrate third-party sensor data and build partnerships with technology vendors.
16 November 2023
Researchers discovered vulnerabilities in Google Workspace that could lead to ransomware attacks, data theft, and password decryption. They exploit Google Credential Provider for Windows, allowing attackers to steal refresh tokens and bypass MFA.
16 November 2023
Russian threat actors have been possibly linked to what's been described as the "largest cyber attack against Danish critical infrastructure," in which 22 companies associated with the operation of the country's energy sector were targeted in May 2023.
"22 simultaneous, successful cyberattacks against Danish critical infrastructure are not commonplace," Denmark's SektorCERT said [PDF]. "The
15 November 2023
Google is taking legal action against cybercriminals who used fake websites to deliver malware and gain control of social media accounts through a scam involving its chat-based AI tool, Bard.
15 November 2023
New York Governor Kathy Hochul has proposed new cybersecurity rules for hospitals in the state to establish robust cybersecurity programs, assess risks, and implement protective measures to combat the rising threat of cyberattacks.
15 November 2023
Security researchers have discovered a total of 3938 unique secrets on PyPI, the official third-party package management system for the Python community, across all projects, with 768 of them validated as authentic.