Latest Cybersecurity News and Articles

---

Canadian Healthcare Workers’ Private Information Subject to Data Breach

Hackers had access to the HEABC system from May 9 to June 10 and the breach wasn’t detected until July 13, according to the association, after staff “identified a potential anomaly” but did not provide further explanation.

---

Threat Intelligence Provider Cyble Raises $24 Million in Series B Funding

The new funding round was co-led by Blackbird Ventures and King River Capital, with participation from January Capital, Spider Capital, Summit Peak Ventures, and other investors.

---

Pennsylvania County Says Data Breach May Have Exposed 690,000 People's Personal Information

The county says it, along with 22 million people worldwide, has been targeted by a global cyber security breach. The breach gave a group of cybercriminals access to personal information like driver's license numbers and Social Security numbers.

---

The Emergence of Threat Intelligence-as-a-Service

Managed security services providers (MSSPs) are evolving to offer more advanced technologies and solutions to help organizations manage and make sense of threat intelligence.

---

71% of organizations are using a multi-cloud environment

Cloud use and migration was analyzed in a recent report showing that 59% of organizations moved workloads back on-premises from the cloud.

---

New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

Cybersecurity researchers have discovered a new version of malware called Rilide that targets Chromium-based web browsers to steal sensitive data and steal cryptocurrency. "It exhibits a higher level of sophistication through modular design, code obfuscation, adoption to the Chrome Extension Manifest V3, and additional features such as the ability to exfiltrate stolen data to a Telegram channel

---

Russian Hacker Group NoName057(16) Claim Attacks on Italian Banks, Government Agencies

A pro-Russian hacking group has claimed responsibility for cyberattacks on Italian banks, businesses, and government agencies which flooded networks and disrupted services.

---

Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation. The non-profit said the attacks take advantage of CVE-2023-3519, a critical code injection vulnerability that could lead to unauthenticated remote code execution. The flaw, patched by Citrix last month, carries a CVSS score of 9.8. The 

---

Report: One in 100 Emails is Malicious

With the ever-increasing reliance on workplace technologies, including web-based tools and SaaS applications, organizations face an unparalleled need to strengthen their cybersecurity measures.

---

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

The company said it has traced the targeting to “fewer than 40 unique global organizations,” suggesting a highly surgical cyberespionage operation against targets in the U.S. and Europe.

---

Businesses Improved Cyber Incident Response Times Following Log4j, Report Finds

Average security response times to cyberattacks improved from 29 days to 19 days between the 2021 and 2022, according to a study released Wednesday by security firm Immersive Labs.

---

Russian Cyber Adversary BlueCharlie Alters Infrastructure in Response to Disclosures

A Russia-nexus adversary has been linked to 94 new domains starting March 2023, suggesting that the group is actively modifying its infrastructure in response to public disclosures about its activities.

---

A Penetration Testing Buyer's Guide for IT Security Teams

The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, could result in severe financial and reputational damage. According to Cybersecurity Ventures, the cost of cybercrime is predicted to hit $8 trillion in 2023 and will grow to $10.5 trillion by 2025. There is also increasing public and

---

Open-Source Penetration Testing Tool BloodHound CE Released

SpecterOps released BloodHound Community Edition (CE) v5.0, a free and open-source penetration testing solution that maps attack paths in Active Directory (AD) and Azure (including Azure AD/Entra ID) environments. It is available for free on GitHub.

---

91% IT leaders are better protected with PAM, seek affordable solutions

A new report reveals 56% of IT leaders tried to deploy a PAM solution but did not fully implement it, and 92% cited overly-complex solutions as the main reason.

---

Hackers Exploited Salesforce Zero-Day in Facebook Phishing Attack

The attackers chained a flaw dubbed "PhishForce," to bypass Salesforce's sender verification safeguards and quirks in Facebook's web games platform to mass-send phishing emails.

---

How Malicious Android Apps Slip Into Disguise

Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into benign mobile apps and evade security scanning tools. Google says it has updated its app malware detection mechanisms in response to the new research.

---

SpyNote Spyware Now Targets Financial Institutions

Security experts have witnessed an increase in spyNote malware infections known for espionage campaigns and now, for bank fraud. The attack chain often starts with a fake SMS message, redirecting users to download a "certified banking app" that is actually SpyNote. Notably, TeamViewer has been exploited by threat actors in these fraud operations through social engineering attacks, where attackers impersonate bank operators to execute fraudulent transactions on victims' devices.

---

New hVNC macOS Malware Advertised on Cybercrime Forum

Commonly used for technical support, Virtual Network Computing (VNC) supports the remote control of computers over the network, with the knowledge of the device’s user, who can watch on the screen the performed actions.

---

Marine Industry Giant Brunswick Corporation Lost $85 Million in Cyberattack, CEO Confirms

A cybersecurity incident will cost the Brunswick Corporation as much as $85 million, the company’s CEO told investors last week. The boating manufacturing firm disclosed a cyberattack on June 13 that impacted their systems and some facilities.