Latest Cybersecurity News and Articles
14 November 2023
Government entities in the Middle East are the target of new phishing campaigns that are designed to deliver a new initial access downloader dubbed IronWind.
The activity, detected between July and October 2023, has been attributed by Proofpoint to a threat actor it tracks under the name TA402, which is also known as Molerats, Gaza Cyber Gang, and shares tactical overlaps with a pro-Hamas
14 November 2023
Certain devices' SSH connections can be snooped on, allowing attackers to impersonate the equipment and observe users' login details and activities. The vulnerability is caused by errors in signature generation.
14 November 2023
The complaint alleges that Intel knew about the faulty instructions that led to the recent "Downfall" bug years before it released a fix. The lawsuit raises questions about whether Intel's negligence could be considered a legal offense.
14 November 2023
The data wiping malware overwrites files, deletes system snapshots, and disables recovery options, making data recovery difficult and rendering affected systems unusable.
14 November 2023
This is not the first time false claims have been made against Dragos by ransomware groups. In May, Dragos confirmed a limited data breach, but the extortion scheme failed.
14 November 2023
A recent cryptocurrency scam used Google Forms quizzes to direct recipients to a fake website, where they were instructed to pay an "exchange fee" in Bitcoin to claim a large sum of money.
14 November 2023
The Vietnamese threat actors behind the Ducktail stealer malware have been linked to a new campaign that ran between March and early October 2023, targeting marketing professionals in India with an aim to hijack Facebook business accounts.
"An important feature that sets it apart is that, unlike previous campaigns, which relied on .NET applications, this one used Delphi as the programming
14 November 2023
Customer bank accounts and credit card numbers may have been affected, as well as the bank account information of some suppliers. The incident primarily affected the company's dental and medical distribution operations in North America and Europe.
14 November 2023
Juniper Networks confirmed that successful exploitation of the vulnerabilities can lead to pre-authenticated remote code execution, and recommends disabling J-Web or limiting access to trusted hosts as a workaround.
14 November 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given a November 17, 2023, deadline for federal agencies and organizations to apply mitigations to secure against a number of security flaws in Juniper Junos OS that came to light in August.
The agency on Monday added five vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active
13 November 2023
The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.
13 November 2023
The NCSC's seventh Annual Review raises awareness of the increasingly unpredictable threat landscape.
13 November 2023
The Lorenz extortion group has targeted and leaked data from the Texas-based Cogdell Memorial Hospital, adding to the rising number of ransomware attacks on healthcare organizations in the US.
13 November 2023
Dragos finds no evidence of a data breach after the BlackCat ransomware group claimed to have hacked the security firm via a third party.
The post Dragos Says No Evidence of Breach After Ransomware Gang Claims Hack via Third Party appeared first on SecurityWeek.
13 November 2023
The leaked data includes personal details such as full names, email addresses, usernames, and profile links, posing a significant threat to Chess.com users for potential identity theft and phishing attacks.
13 November 2023
The ransomware and data extortion group RansomedVC announced plans to shut down the project and sell parts of its infrastructure.
The post Ransomware Group RansomedVC Closes Shop appeared first on SecurityWeek.
13 November 2023
The leaked data includes backups of various systems, with the most recent files having an October 22 timestamp, raising concerns about potential vulnerabilities in Boeing's IT infrastructure.
13 November 2023
The platform confirmed the theft and plans to reimburse affected users. Poloniex offered a 5% bounty to the hacker for the return of the funds and urged a response within 7 days.
13 November 2023
New research recently released reveals an increase in malicious code disguised as Python obfuscation packages.
13 November 2023
McLaren Health Care is informing roughly 2.2 million individuals of a data breach impacting their personal information.
The post 2.2 Million Impacted by Data Breach at McLaren Health Care appeared first on SecurityWeek.