Latest Cybersecurity News and Articles

---

Anna Brackin appointed to Chief Compliance Officer at Regions Bank

Anna Brackin has been appointed to Chief Compliance Officer at Regions Bank. Brackin will oversee the company’s compliance risk management program. 

---

BatLoader Unleashed in Ongoing Webex Malvertising Campaign

A new malvertising campaign has surfaced, targeting corporate users downloading popular web conferencing software Cisco Webex with BatLoader. Webex itself has not been compromised; rather, threat actors are exploiting brand impersonation to distribute the malware. The malicious ad impersonating it is displayed on top of Google search results. When victims click on the ad, they are redirected to a malicious website, with BatLoader ultimately delivering the DanaBot malware.

---

RedLine and Vidar Stealers Abuse EV Certificates, Shift to Ransomware Payloads

Threat actors are using EV code signing certificates to distribute both information-stealing malware and ransomware, indicating a streamlining of operations and the need for stronger security measures.

---

White House, Federal Cyber Leaders Pledge Renewed Support for Open-Source Security

Top cybersecurity officials from the Biden administration pledged additional support to the open source software community and private sector security executives during the Secure Open Source Software Summit in Washington D.C. on Tuesday.

---

SAP Patches Critical Vulnerability Impacting NetWeaver, S/4HANA

Five of the SAP security notes released this month are rated ‘hot news’, the German software company’s highest rating. Three of them, however, are updates for previously released security notes.

---

AuthMind Raises Seed Funding for its Identity SecOps Platform

The Maryland-based startup, which aims to help businesses protect themselves from identity-related cyberattacks, announced that it has raised an $8.5 million seed round led by Ballistic Ventures, with strategic participation from IBM Ventures.

---

Ongoing Cisco Webex Malvertising Campaign Drops BatLoader

A new malvertising campaign is targeting corporate users who download the Webex web conferencing software. The campaign impersonates Cisco's brand and displays a malicious ad when users search for Webex on Google.

---

Intel Capital Bets on Zenity for Low-Code/No-Code Security

Zenity said the Series A financing was led by Intel Capital and included new investors from Gefen Capital and B5. Existing backers Vertex Ventures and Upwest also expanded equity stakes.

---

New 3AM Ransomware Used as a Backup to LockBit Infection

Symantec researchers spotted a new ransomware family called 3AM that is written in Rust and attempts to stop services and delete Volume Shadow copies before encrypting files. The ransomware is currently being used in limited attacks. Its exact origins remain unknown. It is recommended that organizations work on improving their defenses by investigating IOCs associated with the ransomware strain.

---

Greater Manchester police officers’ data hacked in cyber-attack

Details of thousands of officers may have been taken in ransomware attack on third-party supplierThe details of thousands of Greater Manchester police officers have been hacked as part of a cyber-attack.The force said the digital security of one of its third-party suppliers had been breached in a ransomware attack that was being taken “extremely seriously”. Continue reading...

---

Kubernetes Admins Warned to Patch Clusters Against New RCE Vulns

Two new high-severity Kubernetes vulnerabilities flagged by Akamai leave all Windows endpoints on an unpatched cluster open to remote code execution (RCE) with system privileges.

---

Microsoft Uncovers Flaws in ncurses Library Affecting Linux and macOS Systems

A set of memory corruption flaws have been discovered in the ncurses (short for new curses) programming library that could be exploited by threat actors to run malicious code on vulnerable Linux and macOS systems. "Using environment variable poisoning, attackers could chain these vulnerabilities to elevate privileges and run code in the targeted program's context or perform other malicious

---

Royal Dutch Football Association Confirms It Paid Ransom for Hacked Employee Data

The governing body for soccer in the Netherlands said this week that it paid a ransom to hackers who breached its systems earlier this year and stole the sensitive data of more than 1.2 million employees and members.

---

Ransomware in top three threats for 65% of organizations

Ransomware and the threat landscape were analyzed in a report finding that nearly 60% of respondent organizations report an impact to regulated data.

---

Free Download Manager Site Compromised to Distribute Linux Malware to Users for 3+ Years

A download manager site served Linux users malware that stealthily stole passwords and other sensitive information for more than three years as part of a supply chain attack. The modus operandi entailed establishing a reverse shell to an actor-controlled server and installing a Bash stealer on the compromised system. The campaign, which took place between 2020 and 2022, is no longer active. "

---

Avoid These 5 IT Offboarding Pitfalls

Employee offboarding is no one’s favorite task, yet it is a critical IT process that needs to be executed diligently and efficiently. That’s easier said than done, especially considering that IT organizations have less visibility and control over employees’ IT use than ever. Today, employees can easily adopt new cloud and SaaS applications whenever and wherever they want, and the old IT

---

Class Action Lawsuit Against Capita Attracts 2,000 Claimants in Wake of Data Theft

The number of claimants in a class action lawsuit against Capita, a UK company, is increasing following a cybersecurity breach in March. Manchester-based law firm, Barings Law, sent a legal letter to Capita in June after receiving numerous enquiries.

---

Cyberattack Causes St. Louis County to Shut Down Some Public Safety Computer Servers

A cyberattack caused St. Louis County to shut down some computer systems used to look up court cases, issue charges and process people in custody at the jail, County Executive Sam Page said Tuesday.

---

New 3AM Ransomware Family Used As Fallback in Failed LockBit Attack

The attackers behind 3AM, which is written in the Rust programming language, engage in reconnaissance, privilege escalation, and exfiltration of sensitive data before deploying the ransomware.

---

Report: Compromised Credential Use Jumps 300% in Cloud Intrusions

Valid, compromised credentials are also a hot commodity in the cybercrime marketplace, accounting for the vast majority, almost 90%, of assets for sale on the dark web, an IBM Security X-Force report found.