Latest Cybersecurity News and Articles

---

UK's NCSC Publishes Guidance to Help Firms Prepare for Post-Quantum Cryptography

Post-quantum cryptography (PQC) algorithms should be implemented to replace vulnerable traditional public key cryptography (PKC) algorithms to mitigate the threat of quantum computers.

---

Report: Over Half of Users Report Kubernetes or Container Security Incidents

Cloud-native development practices are creating dangerous new security blind spots for organizations in the US, UK, France, and Germany, according to a new study from Venafi.

---

New Android Dropper-as-a-Service Called SecuriDropper Bypasses Google's Defenses

Dropper malware allows cybercriminals to install payloads on compromised devices. SecuriDropper disguises itself as harmless apps and uses a different Android API to install the payload, mimicking the process used by app marketplaces.

---

American Airlines Pilot Union Recovering After Ransomware Attack

The Allied Pilots Association is restoring its systems after a file-encrypting ransomware attack. The post American Airlines Pilot Union Recovering After Ransomware Attack appeared first on SecurityWeek.

---

US, South Korea and Japan Launch Group to Tackle North Korean Hacking

The FBI has attributed recent cryptocurrency hacks to North Korean-sponsored threat actors, highlighting the need for increased cybersecurity cooperation among liberal democracies in the Pacific.

---

November is Critical Infrastructure Security and Resilience month

The Cybersecurity and Infrastructure Security Agency (CISA) has announced the kickoff of Critical Infrastructure Security and Resilience Month.

---

Iranian APT Targets Israeli Education, Tech Sectors With New Data Wipers

An Iranian APT group known as Agrius has been targeting higher education and technology organizations in Israel with destructive attacks and wipers, including MultiLayer, PartialWasher, and BFG Agonizer, since January 2023.

---

SecuriDropper: New Android Dropper-as-a-Service Bypasses Google's Defenses

Cybersecurity researchers have shed light on a new dropper-as-a-service (DaaS) for Android called SecuriDropper that bypasses new security restrictions imposed by Google and delivers the malware. Dropper malware on Android is designed to function as a conduit to install a payload on a compromised device, making it a lucrative business model for threat actors, who can advertise the capabilities

---

Healthcare’s Road to Redefining Cybersecurity With Modern Solutions

According to a report by Sophos, the rate of data encryption following a ransomware attack in the healthcare sector has reached its highest level in the last three years.

---

Who’s Behind the SWAT USA Reshipping Service?

Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. In today's Part II, we'll examine clues about the real-life identity left behind by "Fearless," the nickname chosen by the proprietor of the SWAT USA Drops service.

---

QNAP Warns of Critical Command Injection Flaws in QTS OS, Apps

The first vulnerability, tracked as CVE-2023-23368, allows remote attackers to execute commands via a network. The second vulnerability, identified as CVE-2023-23369, can also be exploited by remote attackers.

---

Hackers Could Abuse Google Calendar as a Covert C2 Channel

Google has warned about a new threat called Google Calendar RAT (GCR) that uses the Calendar service as command-and-control infrastructure. It creates a covert channel by exploiting event descriptions in Google Calendar, making detection difficult.

---

US Sanctions Russian National for Helping Ransomware Groups Launder Money

The US Treasury has sanctioned Ekaterina Zhdanova for laundering money on behalf of cybercriminals and Russian elites. The post US Sanctions Russian National for Helping Ransomware Groups Launder Money appeared first on SecurityWeek.

---

‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks 

Glibc vulnerability affecting major Linux distributions and tracked as Looney Tunables exploited in cloud attacks by Kinsing group.  The post ‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks  appeared first on SecurityWeek.

---

Socks5Systemz Proxy Botnet Infects 10,000 Systems Worldwide

The botnet uses a domain generation algorithm (DGA) to connect with its command and control server and can be instructed to establish backconnect server connections, allowing infected devices to be used as proxy servers.

---

Exploitation of Critical Confluence Vulnerability Begins

Threat actors have started exploiting a recent critical vulnerability in Confluence Data Center and Confluence Server. The post Exploitation of Critical Confluence Vulnerability Begins appeared first on SecurityWeek.

---

Iranian APT Targets Israeli Education, Tech Sectors With New Wipers

The Iran-linked APT Agrius has been targeting higher education and technology organizations in Israel with new wipers. The post Iranian APT Targets Israeli Education, Tech Sectors With New Wipers appeared first on SecurityWeek.

---

Apple ‘Find My’ Network can be Abused to Steal Keylogged Passwords

Researchers at Positive Security demonstrated that by integrating a keylogger with a Bluetooth transmitter into a USB keyboard, passwords and other sensitive data typed on the keyboard can be relayed through the Find My network via Bluetooth.

---

Google Play Store Highlights 'Independent Security Review' Badge for VPN Apps

The Mobile Application Security Assessment (MASA) allows developers to have their apps independently validated against a global security standard, such as the Mobile Application Security Verification Standard (MASVS).

---

Hackers Steal 400GB of Data From Russian Insurance Giant Rosgosstrakh

The data, which is being sold on Breach Forums for $50,000 in cryptocurrency, includes bank statements, personal information of 730,000 individuals, and sensitive details such as Russian Social Security Numbers and bank routing information.