Latest Cybersecurity News and Articles

---

NSA, Viasat Say 2022 Hack Was Two Incidents; Russian Sanctions Resulted From Investigation

Officials from the National Security Agency (NSA) and satellite internet provider Viasat provided new details on the headline-grabbing cyberattack on the company at the onset of Russia’s invasion of Ukraine.

---

Indian Government Alerts Mobile Users, Issues High Risk Warning for Android 13 and Other Versions

These vulnerabilities, which have been classified as "high severity," could be exploited by attackers to gain control of vulnerable devices, steal sensitive information, or disrupt operations.

---

North Korean Hackers Suspected in New Wave of Malicious npm Packages

The npm package registry has emerged as the target of yet another highly targeted attack campaign that aims to entice developers into downloading malevolent modules. Software supply chain security firm Phylum told The Hacker News the activity exhibits similar behaviors to that of a previous attack wave uncovered in June, which has since been linked to North Korean threat actors. As many as nine

---

NCSC Cyber Incident Response scheme now available to more organisations

Help investigating and recovering from cyber attack now available from a larger pool of assured providers.

---

Diligere, Equity-Invest Are New Firms of U.K. Con Man

John Clifton Davies, a convicted fraudster estimated to have bilked dozens of technology startups out of more than $30 million through phony investment schemes, has a brand new pair of scam companies that are busy dashing startup dreams: A fake investment firm called Equity-Invest[.]ch, and Diligere[.]co.uk, a scam due diligence company that Equity-Invest insists all investment partners use. A native of the United Kingdom, Mr. Davies absconded from justice before being convicted on multiple counts of fraud in 2015. Prior to his conviction, Davies served 16 months in jail before being cleared on suspicion of murdering his third wife on their honeymoon in India.

---

Ford Says Wi-Fi Vulnerability Not a Safety Risk to Vehicles

The issue is described as a buffer overflow that could lead to remote code execution. An attacker within the wireless range of an impacted device can trigger the flaw using a specially crafted frame.

---

Nine Flaws in CyberPower and Dataprobe Solutions Expose Data Centers to Hacking

Researchers from Trellix Advanced Research Center discovered multiple vulnerabilities impacting CyberPower’s PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe’s iBoot Power Distribution Unit (PDU).

---

QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

A new remote access trojan (RAT) called QwixxRAT is being advertised for sale by its threat actor through Telegram and Discord platforms. "Once installed on the victim's Windows platform machines, the RAT stealthily collects sensitive data, which is then sent to the attacker's Telegram bot, providing them with unauthorized access to the victim's sensitive information," Uptycs said in a new

---

Knight Ransomware Distributed in Fake TripAdvisor Complaint Emails

The Knight ransomware is being distributed in an ongoing spam campaign that pretends to be TripAdvisor complaints. Knight ransomware is a recent rebrand of the Cyclop Ransomware-as-a-Service, which switched its name at the end of July 2023.

---

The rise in e-commerce forces retailers to adjust IT procedures

The pandemic-induced rise in e-commerce has led retailers to adjust their IT departments, according to a recent report by Information Services Group.

---

Iagona ScrutisWeb Vulnerabilities Could Expose ATMs to Remote Hacking

Several vulnerabilities in the ScrutisWeb ATM could be exploited to remotely hack ATMs. The security holes were discovered by Synack Red Team members and they were patched by the vendor in July 2023 with the release of ScrutisWeb version 2.1.38.

---

Colorado Warns Four Million of Data Stolen in IBM Moveit Breach

The Colorado Department of Health Care Policy & Financing (HCPF) is alerting more than four million individuals of a data breach that impacted their personal and health information.

---

Document ‘from PSNI data leak’ posted on Belfast wall alongside threat

Document with names of police officers redacted placed beside a Sinn Féin office on Falls RoadA document purportedly from the Police Service of Northern Ireland (PSNI) data leak has appeared on a wall in Belfast alongside a threatening message.The document, which had the names of police officers redacted, was posted overnight beside a Sinn Féin office on Falls Road, suggesting dissident republicans had obtained material from last week’s data breach, Gerry Kelly, the party’s policing spokesperson, said on Monday. Continue reading...

---

Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

E-commerce sites using Adobe's Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023. The attacks, dubbed Xurum by Akamai, leverage a now-patched critical security flaw (CVE-2022-24086, CVSS score: 9.8) in Adobe Commerce and Magento Open Source that, if successfully exploited, could lead to arbitrary code execution. "The attacker seems to be

---

Hacktivists Claim Attacks Against 21 Organizations Over Fukushima Wastewater Release

Anonymous Italia, a group claiming to be affiliated with the hacktivist collective Anonymous, has launched cyber protests against the Japanese government over its decision to release wastewater from the Fukushima Daini Nuclear Power Plant.

---

29% of SMBs admit to tossing IT hardware into landfills

As growing businesses look to upgrade hardware, some are throwing computers, routers and other IT assets into the trash leading to security and environmental concerns.

---

How to Handle API Sprawl and the Security Threat it Poses

With recent reports indicating that API vulnerabilities are costing businesses billions of dollars annually, it’s no wonder they are at the top of mind of many cybersecurity professionals.

---

Monti Ransomware Unleashes New Encryptor for Linux

The Monti ransomware group has reemerged after a two-month break, targeting legal and government institutions with a new Linux-based variant that shows significant differences from its previous versions.

---

Identity Threat Detection and Response: Rips in Your Identity Fabric

Why SaaS Security Is a Challenge In today's digital landscape, organizations are increasingly relying on Software-as-a-Service (SaaS) applications to drive their operations. However, this widespread adoption has also opened the doors to new security risks and vulnerabilities. The SaaS security attack surface continues to widen. It started with managing misconfigurations and now requires a

---

Update: Lapsus$ Hackers Took SIM-Swapping Attacks to the Next Level

Reviewing the group’s operations started in December last year following a long trail of incidents attributed to or claimed by Lapsus$ after leaking proprietary data from alleged victims.