Latest Cybersecurity News and Articles
12 May 2023
Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems.
Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing firms and healthcare clinics located in Germany.
"The attack campaign has been leveraging rather
12 May 2023
Andrew Rallis was hired as Executive VP & Chief Risk Officer for Lincoln Financial Group. Rallis has more than 40 years of risk management experience.
12 May 2023
On May 10, the firm filed a notice of data breach with the Maine Attorney General after learning that an unauthorized party had gained access to the company’s IT network and accessed sensitive information belonging to current and former employees.
12 May 2023
Rockwell Automation published six new security advisories this week and four of them have also been distributed by the US Cybersecurity and Infrastructure Security Agency (CISA). The advisories describe a total of more than a dozen vulnerabilities.
12 May 2023
Tennessee’s Chattanooga State Community College has been responding to a cyberattack since Saturday, forcing the school to cancel classes on Monday and modify schedules for staff members. The school serves more than 11,000 students.
12 May 2023
New legislation addresses the need for skilled cybersecurity professionals and digital security enhancement protocols in rural healthcare settings.
12 May 2023
A group of cybercriminals based in Israel has launched more than 350 business email compromise (BEC) campaigns over the past two years, targeting large multinational companies from around the world.
12 May 2023
The malware turns the devices into proxies which are used to steal and sell SMS messages, take over social media and online messaging accounts, and used as monetization opportunities via adverts and click fraud.
12 May 2023
BleepingComputer has learned from multiple employees that the ransomware attack has affected its Active Directory, affecting hundreds of devices. Consequently, ABB terminated VPN connections with its customers to prevent the spread of the ransomware.
12 May 2023
By incorporating the encryption within a static library, the malware developers achieve better stealth and obfuscation, as the reliance on external libraries like one featuring the RC4 cipher algorithm is removed.
12 May 2023
The company believes the threat actors have stolen customer account information, including names, email addresses, account passwords, phone numbers (where available), and school district names.
12 May 2023
As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.
"Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to malicious websites or inject malware into network traffic," Claroty security researcher Uri Katz said in a
12 May 2023
A new study shows 48% of companies still depend on spreadsheets, while 41% report experiencing an impactful third-party breach in the last year.
12 May 2023
A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week.
"BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this latest iteration," security researchers Shaul Vilkomir-Preisman and Eliran Nissan said.
BPFDoor (
12 May 2023
The attacks took place in early May 2023, the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) said in a joint cybersecurity advisory issued Thursday.
12 May 2023
The exploitation of a critical vulnerability in the Essential Addons for Elementor WordPress plugin began immediately after a patch was released, WordPress security firm Defiant warns.
12 May 2023
Recently, researchers have observed malicious advertisement campaigns in Google’s search engine with themes that are related to AI tools. For example, malicious ads are served when a user searches for the keyword "midjourney" in Google.
12 May 2023
In today's interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect their data.
Since collaborating is essential for
12 May 2023
The vulnerability, tracked as CVE-2023-27532, exposes encrypted credentials stored in Veeam Backup & Replication. It could lead to unauthorized access to backup infrastructure hosts, says the HHS' HC3 in an alert.
12 May 2023
In 76% of the ransomware attacks targeting surveyed organizations, the adversaries successfully encrypted the data. Those who paid a ransom for a decryption key ended up doubling their recovery costs. The highest payment rate was observed among organizations with revenue over $5 billion.