Latest Cybersecurity News and Articles

---

I resist sharenting on social media. Does that mean my son and I are missing out, or is it just safer? | Rhiannon Lucy Cosslett

Posting can turn into a privacy risk – and in a changing online landscape, it’s become another parental identity markerAn old friend asked me recently why I never put my son’s face online. “Can you explain the not showing pics of babies thing to me?” she asked. “Everyone our age seems to obscure their baby’s face with emojis. I feel as if I’ve missed a key essay on the morality of baby pic social media publication.”I don’t do the emoji thing – in fact I’ve even stopped showing the back of his head, or any aspect of his home life, really – but I know what she means. A few years ago, sharenting, as it’s been called, felt like the norm among my social circle. These days I see far fewer babies’ faces on social media. Concerns about online privacy and safeguarding, as well as facial recognition and the commercial use of personal data, are far more prevalent than they were in the early days of Facebook. In fact, you could say that whether or not you share photos has become another parental identity marker, up there with breastfeeding, cloth nappies and baby-led weaning as evidence that you’re doing things “the right way”, not like “those other parents”. Continue reading...

---

American Airlines Pilot Union Hit With Ransomware

The American Airlines pilot union is actively working to restore their systems and prioritize the security of their operations while keeping their pilots informed about the progress.

---

Google Play Store Introduces 'Independent Security Review' Badge for Apps

Google is rolling out an "Independent security review" badge in the Play Store's Data safety section for Android apps that have undergone a Mobile Application Security Assessment (MASA) audit. "We've launched this banner beginning with VPN apps due to the sensitive and significant amount of user data these apps handle," Nataliya Stanetsky of the Android Security and Privacy Team said.

---

Four Zero-Day Flaws Disclosed in Microsoft Exchange

Researchers have disclosed four zero-day vulnerabilities in Microsoft Exchange that can be exploited remotely, potentially allowing attackers to execute arbitrary code or access sensitive information.

---

Researchers discover malicious WhatsApp modification

A malicious WhatsApp spy modification has been uncovered by Kaspersky researchers that clandestinely harvests personal information from its victims.

---

Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments

Attackers are also extracting credentials from cloud service providers, marking the first documented instance of Looney Tunables exploitation. The group has a history of quickly adapting its tactics to exploit newly disclosed vulnerabilities.

---

Almost 70% of children & adolescents have been exposed to cyber risks

According to a recent report by the DQ Institute, nearly 70% of children and adolescents worldwide have been exposed to cyber risks in 2023. 

---

Unmasking New AsyncRAT Infection Chain

AsyncRAT is being distributed through a malicious HTML file and uses various file types like PowerShell, WSF, and VBScript to bypass detection. The infection chain begins with a spam email containing a malicious URL to download the HTML file.

---

Okta Hack Blamed on Employee Using Personal Google Account on Company Laptop

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop. The post Okta Hack Blamed on Employee Using Personal Google Account on Company Laptop appeared first on SecurityWeek.

---

New DarkGate Variant Uses a New Loading Approach

DarkGate is a versatile malware that includes features such as keylogging, information stealing, and downloading and executing other payloads. The DarkGate malware has been involved in multiple campaigns and continues to evolve.

---

Mortgage Giant Mr. Cooper Shuts Down Systems Following Cyberattack

Mr. Cooper suspends operations, including payments, after a cyberattack forced it to take systems offline. The post Mortgage Giant Mr. Cooper Shuts Down Systems Following Cyberattack appeared first on SecurityWeek.

---

In Other News: Airport Taxi Hacking, Post-Quantum Crypto Guidance, Stanford Breach

Noteworthy stories that might have slipped under the radar: US airport taxi hacking by Russians, Stanford ransomware attack, and post-quantum crypto guidance.  The post In Other News: Airport Taxi Hacking, Post-Quantum Crypto Guidance, Stanford Breach appeared first on SecurityWeek.

---

Russian Reshipping Service ‘SWAT USA Drop’ Exposed

The Russia-based criminal reshipping service SWAT USA Drop was hacked, exposing its operations and revealing the involvement of over 1,200 people in reshipping stolen goods purchased with stolen credit cards.

---

FusionAuth Snags $65 Million Investment for Customer Identity Tech

The Denver-based customer authentication and authorization company FusionAuth has secured a $65 million investment in its first external funding round, led by Updata Partners.

---

North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks

Security researchers uncover new macOS and Windows malware associated with the North Korea-linked Lazarus Group. The post North Korean Hackers Use New ‘KandyKorn’ macOS Malware in Attacks appeared first on SecurityWeek.

---

Blackcat Ransomware Gang Claims Breach of Healthcare Giant Henry Schein

Healthcare giant Henry Schein has been targeted by the BlackCat ransomware gang, who claim to have breached the company's network and stolen 35 terabytes of data, including sensitive files such as payroll data and shareholder information.

---

AP News Site Hit by Apparent Denial-of-Service Attack

A hacker group called Anonymous Sudan, which is believed to be linked to Russia, claimed responsibility for the attack on the AP and other news sites, but the connection has not been verified.

---

Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments

The threat actors linked to Kinsing have been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as part of a "new experimental campaign" designed to breach cloud environments. "Intriguingly, the attacker is also broadening the horizons of their cloud-native attacks by extracting credentials from the Cloud Service Provider (CSP)," cloud

---

Xage Security Raises $20M More to Expand its Security Platform

Science Applications International Corporation (SAIC), along with existing investors Piva Capital, March Capital, SCF Partners, Overture Climate Fund, Valor Equity Partners, and Chevron Technology Ventures took part in the round.

---

Apache ActiveMQ Vulnerability Exploited as Zero-Day

The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10. The post Apache ActiveMQ Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.