Latest Cybersecurity News and Articles
03 May 2023
South Korean education, diplomatic, political, and construction firms are being targeted by the China-aligned Tonto Team, which is using a file related to anti-malware products to execute its attacks. Tonto Team, active since 2009, is known for targeting different sectors across Asia and Eastern Europe.
03 May 2023
Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags.
"The first-of-its-kind specification will allow Bluetooth location-tracking devices to be compatible with unauthorized tracking detection and alerts across Android and
03 May 2023
The seized sites allowed users to anonymously convert cryptocurrency into harder-to-trace coins to obscure the money trace and help cybercriminals launder their pilfers without being traced by law enforcement.
03 May 2023
Advance fee fraud occurs when a scammer tricks a victim into paying for an item or service that never turns up. Unlike other types of fraud, banks will often not reimburse the victims.
03 May 2023
The discovery is the result of an analysis of seven different implementations of BGP carried out by Forescout Vedere Labs: FRRouting, BIRD, OpenBGPd, Mikrotik RouterOS, Juniper JunOS, Cisco IOS, and Arista EOS.
03 May 2023
Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by Fortinet FortiGuard Labs.
The vulnerability in question is CVE-2018-9995 (CVSS score: 9.8), a critical authentication bypass issue that could be exploited by remote actors to gain elevated permissions.
"The 5-year-old vulnerability (
03 May 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released an Industrial Control Systems (ICS) advisory about a critical flaw affecting ME RTU remote terminal units.
The security vulnerability, tracked as CVE-2023-2131, has received the highest severity rating of 10.0 on the CVSS scoring system for its low attack complexity.
"Successful exploitation of this
02 May 2023
By Sergey Shykevich, Threat Intelligence Group Manager, Check Point. Hacktivism has traditionally been associated with loosely managed underground cyber criminal entities. These decentralized and unstructured groups are typically composed of individuals cooperating in support of specific agendas. Over the course of the last year, and following developments in the Russian-Ukrainian conflict, the hacktivist ecosystem has […]
The post Hacktivism and the new age of cyber warfare appeared first on CyberTalk.
02 May 2023
A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. The leaked records indicate the network's chief technology officer in Pakistan has been hacked for the past year, and that the entire operation was created by the principals of a Tennessee-based telemarketing firm that has promoted USPS employment websites since 2016.
02 May 2023
A survey asked how organizations are responding to emerging threat vectors created by cloud-based communication and collaboration applications.
02 May 2023
EXECUTIVE SUMMARY: At this year’s RSA Conference, we witnessed some of the brightest minds in cyber security gathered to discuss the latest trends, innovations, challenges and solutions in the field of cyber security. The U.S. event was held in San Francisco, and attracted over 45,000 attendees, making it one of the largest cyber security conferences […]
The post The future is now! Mind-bending highlights from RSA 2023 appeared first on CyberTalk.
02 May 2023
More than 70% of companies confirm current application security solutions fail to protect from software supply chain security risks, according to a recent report.
02 May 2023
The campaign, which came after months of inactivity, was found to abuse a Windows Defender executable for DLL sideloading and exploit a vulnerable driver, zamguard.sys, to disable security products through a bring-your-own-vulnerable-driver attack.
02 May 2023
The quick rise in various artificial intelligence (AI) platforms have caused a number of security concerns, including online voice scams.
02 May 2023
The Royal ransomware is claiming to have infiltrated public school management and virtual learning provider Edison Learning, posting on its dark web data leak site on Wednesday, April 26, that it had stolen 20GB of the company’s data.
02 May 2023
A report found that open source maintainers are being asked to take on additional work to meet government and industry standards despite little pay.
02 May 2023
“All our IT systems are fully operational, no funds have been lost and we will communicate fully to our members on the conclusion of the police investigation. We can confirm that this attack has not affected the membership portal...,” the NSRA said.
02 May 2023
According to BakerHostetler, the average ransom paid hit $600,688, up from $511,957 the year before, though still below the peak of $794,620 in pandemic-ravaged 2020. About 40 percent of victims paid a ransom.
02 May 2023
This week, thousands of students at several U.S. schools, such as Bluefield University, BridgeValley Community and Technical College, Penncrest School District, and Truman State University, are feeling the impact of ransomware and other cyberattacks.
02 May 2023
Cybersecurity researchers have uncovered weaknesses in a software implementation of the Border Gateway Protocol (BGP) that could be weaponized to achieve a denial-of-service (DoS) condition on vulnerable BGP peers.
The three vulnerabilities reside in version 8.4 of FRRouting, a popular open source internet routing protocol suite for Linux and Unix platforms. It's currently used by several