Latest Cybersecurity News and Articles


Update: North Korean Cyber Group Suspected in JumpCloud Breach

25 July 2023
Mandiant’s investigation into the attack now revealed that the intrusions were attributed to UNC4899, a hacking group associated with the Democratic People’s Republic of Korea (DPRK).

Hacker Claims to Have Stolen Sensitive Medical Records from Egypt's Ministry of Health

25 July 2023
The allegation, made on the hacker forum Popürler, was observed by cyber threat intelligence provider SOCRadar and dark web monitoring firm Falcon Feeds on July 25, 2023.

Thales Acquiring Imperva From Thoma Bravo for $3.6 Billion

25 July 2023
Thales will buy Imperva for an enterprise value of $3.6 billion ($3.7 billion gross value minus $0.1 billion tax benefits). The transaction is expected to close by the beginning of 2024.

Chinese Cyberespionage Group APT31 Targets Eastern European Entities

25 July 2023
A China-linked group APT31 (aka Zirconium) has been linked to a cyberespionage campaign targeting industrial organizations in Eastern Europe. The attackers abused DLL hijacking vulnerabilities in cloud-based data storage systems such as Dropbox or Yandex, as well as a temporary file-sharing service, to deliver next-stage malware.

67% of organizations not confident in cyberattack recovery

25 July 2023
According to a survey by Cohesity, 45% of respondents confirmed their business had been the victim of a ransomware attack in the prior six months.

Five New 'TETRA:BURST' Vulnerabilities Exposed in Widely Used Radio Communication System

25 July 2023
The issues, discovered by Midnight Blue in 2021 and held back until now, have been collectively called TETRA:BURST. There is no conclusive evidence to determine that the vulnerabilities have been exploited in the wild to date.

North Korean Nation-State Actors Exposed in JumpCloud Hack After OPSEC Blunder

25 July 2023
North Korean nation-state actors affiliated with the Reconnaissance General Bureau (RGB) have been attributed to the JumpCloud hack following an operational security (OPSEC) blunder that exposed their actual IP address. Google-owned threat intelligence firm Mandiant attributed the activity to a threat actor it tracks under the name UNC4899, which likely shares overlaps with clusters already

RaaS proliferation: 14 new ransomware groups target organizations worldwide

25 July 2023
In the second quarter of 2023, GuidePoint Research and Intelligence Team (GRIT) tracked 1,177 total publicly posted ransomware victims claimed by 41 different threat groups.

Cyber threat report reveals misalignment between execs & security analysts

25 July 2023
A new global study finds 70% of cybersecurity executives think all alerts are being handled while front-line roles report only 36% are handled.

Lazarus APT Hackers Hijack Microsoft IIS Servers to Spread Malware

25 July 2023
In the recent attacks observed by ASEC's analysts, Lazarus compromised legitimate South Korean websites to perform 'Watering Hole' attacks on visitors using a vulnerable version of the INISAFE CrossWeb EX V6 software.

Google Messages Getting Cross-Platform End-to-End Encryption with MLS Protocol

25 July 2023
MLS, as the name implies, is a security layer for end-to-end encryption that facilitates interoperability across messaging services and platforms. It was approved for publication as a standard by IETF in March 2023.

Global Ransomware Onslaught: GRIT Discovers 14 Fresh Ransomware Groups

25 July 2023
GuidePoint Research and Intelligence Team (GRIT) published its ransomware report for Q2 2023, which noted some shocking statistics. The report also identified a surge in the activity of Ransomware-as-a-Service (RaaS) groups throughout the quarter, attributed to the emergence of 14 new groups.

New 'Zenbleed' Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at Risk

25 July 2023
Discovered by Google Project Zero researcher Tavis Ormandy, the flaw – codenamed Zenbleed and tracked as CVE-2023-20593 (CVSS score: 6.5) – allows data exfiltration at the rate of 30 kb per core, per second.

Data Breach Costs Hit Record High but Fall For Some

25 July 2023
The average global cost of a data breach now stands at a record $4.45m, up a little over 2% year on year (YoY), according to IBM's 18th annual Cost of a Data Breach Report, compiled by the Ponemon Institute.

Casbaneiro Banking Malware Goes Under the Radar with UAC Bypass Technique

25 July 2023
The financially motivated threat actors behind the Casbaneiro banking malware family have been observed making use of a User Account Control (UAC) bypass technique to gain full administrative privileges on a machine, a sign that the threat actor is evolving their tactics to avoid detection and execute malicious code on compromised assets. "They are still heavily focused on Latin American

Law Firm Hack Affects Victims of an Earlier Breach Again

25 July 2023
Orrick, Herrington & Sutcliffe on July 20 reported the data breach to several state regulators, including the attorneys general of Maine and California, as well as a HIPAA breach to the U.S. Department of Health and Human Services.

macOS Under Attack: Examining the Growing Threat and User Perspectives

25 July 2023
As the number of people using macOS keeps going up, so does the desire of hackers to take advantage of flaws in Apple's operating system.  What Are the Rising Threats to macOS? There is a common misconception among macOS fans that Apple devices are immune to hacking and malware infection. However, users have been facing more and more dangers recently. Inventive attackers are specifically

Los Angeles SIM Swapper Pleads Guilty to Cybercrime Charges

25 July 2023
Between April 2019 and February 2023, the man, Amir Hossein Golshan, 24, engaged in account takeovers, Zelle payment fraud, and Apple support impersonation, causing roughly $740,000 in losses to his victims.

Clop Could Make $100m from MOVEit Campaign

25 July 2023
The notorious Clop ransomware gang may earn as much as $100m from its recent data extortion campaign, after a small number of victims paid the group large sums of money, according to Coveware.

TETRA:BURST — 5 New Vulnerabilities Exposed in Widely Used Radio Communication System

25 July 2023
A set of five security vulnerabilities have been disclosed in the Terrestrial Trunked Radio (TETRA) standard for radio communication used widely by government entities and critical infrastructure sectors, including what's believed to be an intentional backdoor that could have potentially exposed sensitive information. The issues, discovered by Midnight Blue in 2021 and held back until now, have