Latest Cybersecurity News and Articles

---

One in four Gen Z and Millennial consumers buy with bots

New research reveals around half of buyers suspected bots snap up in-demand goods before they can get them, forcing many to either pay inflated prices or use bots themselves.

---

Credit Card Skimming on the Rise for the Holiday Shopping Season

A credit card skimming campaign called Kritec has recently picked up in activity, compromising numerous online stores and stealing credit card information from unsuspecting shoppers.

---

Cyberattack on North Carolina County Allowed Hackers to Access Data

Although the nature of the attack was not specified, the county's IT staff discovered irregularities in their system and called in external cybersecurity experts to investigate and secure their servers.

---

File-Transfer Services, Rich With Sensitive Data, are Under Attack

Compliance requirements drive the use of these services, making them attractive targets for ransomware groups looking to exploit the systems used for sending sensitive data.

---

Aligning cybersecurity & business objectives leads to security success

A new benchmark study reveals that aligning cybersecurity organization models with business objectives enables talent retention and security program success.

---

The holiday season sees a rise in credit card skimming

Holiday shopping often brings increased risk, and organizations aren’t exempt. According to a recent report, credit card skimming is on the rise.

---

U.S. Takes Down IPStorm Botnet, Russian-Moldovan Mastermind Pleads Guilty

The U.S. government on Tuesday announced the takedown of the IPStorm botnet proxy network and its infrastructure, as the Russian and Moldovan national behind the operation pleaded guilty. "The botnet infrastructure had infected Windows systems then further expanded to infect Linux, Mac, and Android devices, victimizing computers and other electronic devices around the world, including in Asia,

---

New Russian Hacking Group Pretends to be a Pentesting Training Organization

AlphaLock's business model represents a new and sophisticated approach to cybercrime, creating a pipeline of trained hackers and monetizing their services through an affiliate program.

---

Q3 2023 sees a rise in botnet activity

According to a Nuspire threat report, there was a surge in botnet activity in Q3 2023, including an increase in activity of nearly 93% over Q2.

---

Cyble Raises $6.2M; Expands Series B to $30.2M

The round, which brought the total amount to $30.2M, was led by Summit Peak Ventures (US) and King River Capital (US), with participation from Care Super (Australia) and BlackBird Ventures (Australasia), along with other investors.

---

Data Security Firm ALTR Banks $25M Series C 

Florida late-state startup ALTR gets another cash infusion to expand markets for data security technologies. The post Data Security Firm ALTR Banks $25M Series C  appeared first on SecurityWeek.

---

Application Security Startup Aikido Security Raises €5 Million

Aikido Security has raised €5 million (~$5.4 million) in seed funding for an all-in-one application security platform. The post Application Security Startup Aikido Security Raises €5 Million appeared first on SecurityWeek.

---

Cyber Espionage Operation on Embassies Linked to Russia’s Cozy Bear Hackers

The Cozy Bear APT utilized a legitimate tool called Ngrok to obfuscate their activities and communicate with compromised systems, making detection and attribution more challenging.

---

Microsoft Patches Sensitive Information Disclosure Vulnerability in Azure CLI

Microsoft provided guidance on an Azure CLI bug leading to the exposure of sensitive information through GitHub Actions logs. The post Microsoft Patches Sensitive Information Disclosure Vulnerability in Azure CLI appeared first on SecurityWeek.

---

Rackspace Records $5M in Expenses Related to 2022 Ransomware Attack

The attack disrupted email access for customers, leading to the discontinuation of the Hosted Exchange product. Rackspace expects to receive $5.4 million in insurance reimbursement, but the timing may differ from expense recognition.

---

Security of AMD's Trusted Execution Environment Undone by Cache Meddling

Researchers have discovered a vulnerability named CacheWarp in AMD's SEV trusted execution environment, which can lead to arbitrary code execution, exposure of sensitive data, or privilege escalation within a guest VM.

---

6 steps for protecting small businesses from cyberattacks

The increased shopping during the holiday season often leads to increased cyberattacks affecting both the organization and their consumers. 

---

New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

Cybersecurity researchers have demonstrated a new technique that exploits a critical security flaw in Apache ActiveMQ to achieve arbitrary code execution in memory. Tracked as CVE-2023-46604 (CVSS score: 10.0), the vulnerability is a remote code execution bug that could permit a threat actor to run arbitrary shell commands. It was patched by Apache in ActiveMQ versions 5.15.16, 5.16.7, 5.17.6,

---

CISA Outlines AI-Related Cybersecurity Efforts

CISA details its efforts to promote the use of AI in cybersecurity and guide critical infrastructure in adopting AI. The post CISA Outlines AI-Related Cybersecurity Efforts appeared first on SecurityWeek.

---

Info Stealers Thrive in Hot Market for Stolen Data

Browser data, especially website credentials, remains the most frequently stolen information by info stealers, followed by cryptocurrency wallet credentials and chat app credentials.