Latest Cybersecurity News and Articles

---

ALPHV Ransomware Affiliate Targets Veritas Backup Bugs

UNC4466, tracked as an affiliate of ALPHV/BlackCat ransomware, was observed abusing three security holes in the Veritas Backup Exec product. The high-severity flaws targeted by the group include CVE-2021-27876, CVE-2021-27877, and CVE-2021-27878. In spite of a fix released in 2021, several endpoints are vulnerable even today.

---

Two-Fifths of IT Pros Told to Keep Breaches Quiet

Over two-fifths (42%) of IT professionals have been told to keep a security breach under wraps, potentially inflaming regulatory compliance risk, according to a new study from Bitdefender.

---

Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands

Microsoft’s Digital Crimes Unit, cybersecurity firm Fortra, and the Health Information Sharing & Analysis Center announced legal action Thursday to seize domains related to criminal activity involving cracked copies of Cobalt Strike.

---

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged-on user.

---

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

Microsoft said it teamed up with Fortra and Health Information Sharing and Analysis Center (Health-ISAC) to tackle the abuse of Cobalt Strike by cybercriminals to distribute malware, including ransomware. To that end, the tech giant's Digital Crimes Unit (DCU) revealed that it secured a court order in the U.S. to "remove illegal, legacy copies of Cobalt Strike so they can no longer be used by

---

Are Source Code Leaks the New Threat Software vendors Should Care About?

Less than a month ago, Twitter indirectly acknowledged that some of its source code had been leaked on the code-sharing platform GitHub by sending a copyright infringement notice to take down the incriminated repository. The latter is now inaccessible, but according to the media, it was accessible to the public for several months. A user going by the name FreeSpeechEnthousiast committed

---

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published eight Industrial Control Systems (ICS) advisories warning of critical flaws affecting products from Hitachi Energy, mySCADA Technologies, Industrial Control Links, and Nexx. Topping the list is CVE-2022-3682 (CVSS score: 9.9), impacting Hitachi Energy's MicroSCADA System Data Manager SDM600 that could allow an

---

What is an ‘island hopping’ attack? (and how to stop one)

EXECUTIVE SUMMARY: At the mention of island hopping, you’re likely dreaming about adventures in Hawaii, the Caribbean, or similar destinations with majestic views and white-sand beaches. In the context of cyber security, island hopping refers to a sophisticated type of cyber attack. This technique is used by attackers as a means of circumventing advanced cyber […] The post What is an ‘island hopping’ attack? (and how to stop one) appeared first on CyberTalk.

---

How to delete yourself from internet search results and hide your identity online

Here is a step-by-step guide to reducing your digital footprint online, whether you want to lock down data or vanish entirely.

---

BatLoader Malware Dropper Continues to Pose a Threat to Organizations in 2023

BatLoader can modify Windows UAC prompt, disable Windows Defender notifications, disable Task Manager, prevent users from accessing Windows registry tools, disable the Run command, and modify the display timeout.

---

OCR Labs Exposes Sensitive Credentials Due to Misconfiguration of its Systems

The data leak affected QBANK, Defence Bank, Bloom Money, Admiral Money, MA Money, and Reed. Using leaked data, threat actors could potentially breach banks’ backend infrastructure and consequently the infrastructure of their clients.

---

Uber drivers’ info nabbed in cyberattack

A New Jersey law firm that represents Uber has released that an unknown number of drivers have had sensitive data stolen from cyber attackers in a recent incident.

---

Uber drivers’ info nabbed in cyber attack

A New Jersey law firm that represents Uber has released that an unknown number of drivers have had sensitive data stolen from cyber attackers in a recent incident.

---

Money Message Ransomware Gang Claims MSI Breach, Demands $4 Million

According to chats seen by BleepingComputer at the time, the threat actors claimed to have stolen 1.5TB of data from MSI's systems, including source code and databases, and demanded a ransom payment of $4,000,000.

---

Software vulnerabilities remain top threat conern

A report from Bitdefender revealed top security concerns, practices and key challenges businesses are facing across their environments.

---

FBI Says it Obtained Details on 59,000 Users of Hacking Site Genesis Market

A US official says the server copies include information about approximately 59,000 individual user accounts, such as usernames, passwords, email accounts, and secure messenger accounts, in addition to a history of user activity.

---

Beware of New YouTube Phishing Scam Using Authentic Email Address

The phishing email content is similar to those seen in previous phishing scams, containing a YouTube video and a message informing users about YouTube’s new monetization policy and new rules.

---

Florida moves to restrict TikTok across university campuses

The Florida Board of Governors has issued an emergency proposed regulation aiming to ban the use of TikTok on university campus networks.

---

Cyberattacks hit almost all companies last year, Sophos says

Cyberattacks aren’t a roll of the dice for organizations, but rather a near certainty. Almost all organizations, 94%, experienced a cyberattack of some form during the last year, according to research Sophos released Tuesday.

---

Researchers Uncover Method to Steal Cars Using Vehicle CAN Bus

Automotive security experts say they have uncovered a method of car theft relying on direct access to the vehicle's Controller Area Network (CAN) bus via a smart headlamp's wiring.