Latest Cybersecurity News and Articles

---

Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks

A new information stealer malware called MetaStealer has set its sights on Apple macOS, making the latest in a growing list of stealer families focused on the operating system after Stealer, Pureland, Atomic Stealer, and Realst. "Threat actors are proactively targeting macOS businesses by posing as fake clients in order to socially engineer victims into launching malicious payloads," SentinelOne

---

Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now

Google on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the wild. Tracked as CVE-2023-4863, the issue has been described as a case of heap buffer overflow that resides in the WebP image format that could result in arbitrary code execution or a crash. Apple Security Engineering and Architecture (SEAR

---

Rising fraud is damaging consumer trust

Consumers reveal how rising fraud impacts their trust in organizations.

---

NCSC CEO and Information Commissioner sign Memorandum of Understanding

The joint MoU sets out how the organisations will cooperate to improve the UK's digital resilience.

---

CISA and FBI release joint cybersecurity advisory

CISA, the Federal Bureau of Investigation and U.S. Cyber Command’s Cyber National Mission Force (CNMF) released a joint Cybersecurity Advisory (CSA).

---

Some of the Top Universities Wouldn’t Pass Cybersecurity Exam: Left Websites Vulnerable

Many universities worldwide, including some of the most prestigious, leave their webpages unpatched, leaking sensitive information, and even open to full takeovers, a Cybernews Research team investigation reveals.

---

Vulnerabilities Allow Hackers to Hijack, Disrupt Socomec UPS Devices

Aaron Flecha Menendez, an ICS security consultant at Spain-based cybersecurity firm S21sec, discovered that some Socomec UPS devices, specifically MODULYS GP (MOD3GP-SY-120K), are affected by seven vulnerabilities.

---

Anjana Harve named EVP, Chief Information Officer at BJ's Wholesale Club

Anjana Harve has been named Executive VP, Chief Information Officer at BJ's Wholesale Club. Harve has worked as CIO in a variety of organizations.

---

IT Systems Encrypted After UK School Hit By Ransomware

A spate of cyberattacks against UK schools has claimed its latest victim after a Maidstone secondary school, Church of England St Augustine Academy, suffered a serious security breach late last week.

---

Report: 75% of Education Sector Attacks Linked to Compromised Accounts

According to a report by Netwrix, 69% of organizations in the education sector have experienced a cyberattack in the past year. Phishing and user account compromise were the most common attack methods in this sector.

---

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

A new phishing attack is leveraging Facebook Messenger to propagate messages with malicious attachments from a "swarm of fake and hijacked personal accounts" with the ultimate goal of taking over the targets' accounts. "Originating yet again from a Vietnamese-based group, this campaign uses a tiny compressed file attachment that packs a powerful Python-based stealer dropped in a multi-stage

---

New HijackLoader Malware Used to Distribute Various Malware Families

A new malware loader known as HijackLoader has gained popularity among cybercriminals for distributing various payloads, including DanaBot, SystemBC, and RedLine Stealer. HijackLoader uses a modular architecture that facilitates threat actors to perform code injection and execution. Organizations must stay updated about the tactics and techniques used by the malware loader and deploy multi-layered sandbox techniques to detect indicators

---

Rhysida Ransomware Gang Claims to Have Hacked Three More US Hospitals

The Singing River Health System, which operates three hospitals and 10 clinics, experienced a cyberattack that disrupted various services, including laboratory and radiology testing.

---

Generative AI, Contactless Tech Make Hotels Vulnerable to Cyberattacks

The transition to mobile and contactless services in the hospitality industry is making hotels more vulnerable to cyber threats, according to a report from Trustwave SpiderLabs.

---

Charming Kiten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.

The Iranian threat actor known as Charming Kiten has been linked to a new wave of attacks targeting different entities in Brazil, Israel, and the U.A.E. using a previously undocumented backdoor named Sponsor. Slovak cybersecurity firm is tracking the cluster under the name Ballistic Bobcat. Victimology patterns suggest that the group primarily singles out education, government, and healthcare

---

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

A new cyberattack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium.

---

CISA Director Says Critical Infrastructure Cyber Incident Reporting Rules Almost Ready

Final work is underway for the Cyber Incident Reporting for Critical Infrastructure Act, which CISA Director Jen Easterly expects to be done by the end of the year or early 2024 at the latest, she said at the Billington Cybersecurity Summit.

---

AP Stylebook Breach May Have Hit Hundreds of Journalists

The Associated Press (AP) has warned that users of a popular writing style guide have been hit by phishing attacks after their personal information was compromised in a data breach.

---

Baseline Standards for BYOD Access Requirements

According to a survey by Jamf, nearly half of European enterprises lack a formal BYOD policy, leaving them vulnerable to data security risks associated with employees connecting personal devices to corporate resources.

---

Microsoft Teams Phishing Attack Pushes DarkGate Malware

The campaign started in late August 2023, when Microsoft Teams phishing messages were seen being sent by two compromised external Office 365 accounts to other organizations.