Latest Cybersecurity News and Articles

---

Microsoft Teams goes 3D: Meet your animated avatar

EXECUTIVE SUMMARY: Sometimes, there are valid reasons to turn your camera off during a Zoom or Teams meeting. For example, you might be in an environment that could prove distracting for other participants, you might have a small child who’s trying to climb on your chair or along your leg, or perhaps someone else who […] The post Microsoft Teams goes 3D: Meet your animated avatar appeared first on CyberTalk.

---

TeamTNT Allegedly Connected to SCARLETEEL Decoy Attack

The SCARLETEEL sophisticated hacking operation, which targets Kubernetes hosted on Amazon to steal confidential proprietary data, also suspect to have a TeamTNT touch. Despite all the similarities, researchers could not connect the two malware with full confidence. According to them, it is possible that another group is simply copying the tactics.

---

Killnet Aggressively Targets Healthcare Organizations

KillNet, a cybercriminal collective with ties to Russia, was spotted targeting Microsoft Azure-hosted healthcare apps for more than three months. The highest number of these attacks were launched in February, targeting hospitals, pharma, life science, healthcare insurance, and health services in more than 25 states.

---

TikTok banned from U.K. government devices

The U.K. bans TikTok on government devices in line with similar restrictions made in the U.S. and Canadian governments and the European Commission.

---

After Data Breaches, Lawsuits Hit Two Arkansas Hospitals

Since January, four lawsuits have been filed against both Howard Memorial Hospital of Nashville and against the Mena Hospital Commission, which operates as the Mena Regional Health System.

---

Google Pixel flaw allowed recovery of redacted, cropped images

An 'Acropalypse' flaw in Google Pixel's Markup tool made it possible to partially recover edited or redacted screenshots and images, including those that have been cropped or had their contents masked, for the past five years.

---

SEC issues new cybersecurity requirements for risk management

The SEC has issued new cybersecurity risk management requirements. The requirements will apply to sectors collectively labeled as "Market Entities".

---

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Google Ads

"DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families," Check Point said in a report published last week.

---

Why You Should Opt Out of Sharing Data With Your Mobile Provider

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device -- unless and until you affirmatively opt out of this data collection. Here's a primer on why you might want to do that, and how. Certain questions might be coming to mind right now, like "What the heck is CPNI?" And, 'If it's so 'customer proprietary,' why is AT&T sharing it with marketers?" Also maybe, "What can I do about it?" Read on for answers to all three questions.

---

Is your organization among the 1 in 10 with malware traffic? DNS data reveals scary truth

EXECUTIVE SUMMARY: In a new report, cyber security researchers have highlighted just how widespread malware threats really are, illuminating the dangers of threats specific to DNS infrastructure. Last year, between 10% and 16% of organizations saw DNS traffic originating on their networks towards command-and-control (C2) servers associated with botnets and other malicious threats. Over 25% […] The post Is your organization among the 1 in 10 with malware traffic? DNS data reveals scary truth appeared first on CyberTalk.

---

Mispadu Banking Trojan Targets Latin America to Steal Credentials and Deliver Other Payloads

Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads.

---

CISA starts ransomware vulnerability pilot program

CISA announces the Ransomware Vulnerability Warning Pilot to help determine vulnerabilities commonly associated with known ransomware exploitation.

---

Bitcoin ATM Maker General Bytes Shuts Cloud Service After Security Breach

In a patch release bulletin, General Bytes warned that a hacker has been able to remotely upload and run a Java application via the master service interface into its terminals aimed at stealing user information and sending funds from hot wallets.

---

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads

A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidar. "DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families," Check

---

Orlando Family Physicians data breach class action settlement

The settlement benefits consumers who received a data breach notification from Orlando Family Physicians informing them their personal information or protected health information may have been compromised in a data breach on April 15, 2021.

---

Researchers Shed Light on CatB Ransomware's Evasion Techniques

CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an "evolution or direct rebrand" of another ransomware strain known as Pandora based on code-level similarities.

---

IT security spending to reach nearly $300 billion by 2026

Investments in cybersecurity are expected to reach nearly $300 billion in 2026, driven by the ongoing threat of cyberattacks, the demands of providing a secure hybrid work environment, and the need to meet data privacy and governance requirements.

---

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen

A banking trojan dubbed Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads. The activity, which commenced in August 2022, is currently ongoing, Ocelot Team from Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News. Mispadu (

---

Play Ransomware Gang Hit Dutch Shipping Firm Royal Dirkzwager

The ransomware group added the company to its Tor data leak site and announced the theft of stolen private and personal confidential data, employee IDs, passports, contracts, etc.

---

Most mid-sized businesses lack cybersecurity experts, incident response plans

According to a Huntress report, 49% of mid-sized businesses plan to budget more for cybersecurity in 2023. 61% of mid-sized businesses do not have dedicated cybersecurity experts in their organization.