Latest Cybersecurity News and Articles

---

UK bans TikTok from government mobile phones

Move brings Britain in line with US and Europe and reflects worsening relations with ChinaBritain is to ban the Chinese-owned video-sharing app TikTok from ministers’ and civil servants’ mobile phones, bringing the UK in line with the US and the European Commission and reflecting deteriorating relations with Beijing.The decision marks a sharp U-turn from the UK’s previous position and came a few hours after TikTok said its owner, ByteDance, had been told by Washington to sell the app or face a possible ban in the country. Continue reading...

---

Update: Hacker selling data allegedly stolen in US Marshals Service hack

The announcement, titled "350 GB from US Marshal Service (USMS) law enforcement confidential information," was added on March 15, using an account registered just a day earlier on a Russian-speaking hacking forum.

---

Supercharge your productivity, 5 ingenious ChatGPT integrations

EXECUTIVE SUMMARY: The powerful next-generation artificial intelligence-based tool known as ChatGPT has not only captured the public’s imagination; it’s shaking up the business world. For companies that figure out how to leverage the technology strategically, it’s altering the ways in which companies do business, opening doors for greater innovation, and shifting expectations around business growth. […] The post Supercharge your productivity, 5 ingenious ChatGPT integrations appeared first on CyberTalk.

---

Feds fine Florida children's health insurance site for massive 2020 hack

Jelly Bean Communications Design reached a $293,771 settlement to resolve False Claims Act allegations that it knowingly provided deficient security controls to Florida Healthy Kids Corp., which caused the second-largest healthcare breach of 2021.

---

Portable health device company suffers data breach

ZOLL Medical has notified its customers of a data breach affecting customers' protected health information (PHI) that occurred in late January.  

---

GoatRAT Android Banking Trojan Targets Mobile Automated Payment System

The new GoatRAT — like BraxDex, Senomorphy, and PixPirate before it — steals the Pix key of the mobile devices it targets to make instant payments from compromised accounts, researchers from Cyble revealed in a blog post.

---

Why Healthcare Boards Lag Other Industries in Preparing for Cyberattacks

A new report from Proofpoint and Cybersecurity at MIT Sloan says 61% of healthcare boards discuss cybersecurity at least monthly (versus 75% across all sectors), and only 64% believe they have invested adequately in it (versus 76% for all sectors).

---

Voice system used to verify identity by Centrelink can be fooled by AI

Exclusive: Voiceprint program used by millions of Australians to access data held by government agencies shown to have a serious security flaw Get our morning and afternoon news emails, free app or daily news podcastA voice identification system used by the Australian government for millions of people has a serious security flaw, a Guardian Australia investigation has found.Centrelink and the Australian Taxation Office (ATO) both give people the option of using a “voiceprint”, along with other information, to verify their identity over the phone, allowing them to then access sensitive information from their accounts.Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup Continue reading...

---

LockBit Ransomware Claims Attack on Essendant, Company Says Network Outage

As earlier reported by BleepingComputer, Essendant's widespread network outage has prevented the placement or fulfillment of online orders and impacted both the company's customers and suppliers.

---

Cryptojacking Group TeamTNT Suspected of Using Decoy Miner to Conceal Data Exfiltration

The cryptojacking group known as TeamTNT is suspected to be behind a previously undiscovered strain of malware used to mine Monero cryptocurrency on compromised systems. That's according to Cado Security, which found the sample after Sysdig detailed a sophisticated attack known as SCARLETEEL aimed at containerized environments to ultimately steal proprietary data and software. Specifically, the

---

The Role of Customer Service in Cybersecurity

Depending on the business, a customer service agent may have access to a trove of customer information and company systems. They may even have access to change customer account information or take payments over the phone.

---

GAO Offers Quantum Guidance to Federal Agencies

More federal guidance has emerged as the world continues its preparations for the advent of quantum computing with the Government Accountability Office disseminating fast facts on how to secure sensitive data in a post-quantum cryptographic world.

---

Department of State receives funding for semiconductor development

The Department of State implements new funding to address security objectives through new programs and initiatives for semiconductor development.

---

Latitude Financial Says Hacking Incident Led to Theft of 328,000 Customer IDs

Latitude said the details were stolen from service providers it uses. The company did not clarify further, but this is believed to refer to companies that provide corporate services to Latitude.

---

Rapid7 Buys Anti-Ransomware Firm Minerva Labs for $38 Million

Rapid7 says Minerva’s technology will be fitted into its Managed Detection and Response (MDR) services to beef up detection and response capabilities across cloud, on-premise, and extended attack surfaces.

---

Long-Term Managed Care Services Firm Says Breach Affects 4.2 Million

A vendor of clinical and third-party administrative services to managed care organizations serving elderly and disabled patients said a cybersecurity incident last summer affected more than 4.2 million individuals.

---

"FakeCalls" Android Malware Targets Financial Firms in South Korea

Dubbed “FakeCalls” by the Check Point Research (CPR) team, the malware baits victims with fake loans, requesting them to confirm their credit card numbers, which are then stolen.

---

Panic at the SVB! Collapse Leads to Phishing

Following the collapse of Silicon Valley Bank (SVB), security researchers from all around the world warned that threat actors are already registering suspicious domains, creating phishing pages, and planning for BEC attacks. Through bogus domains, actors request personal information of individuals, such as their name, mobile number, email, and balance amount to process a claim.

---

(Ab)using Adobe Acrobat Sign to distribute malware

Adobe Acrobat Sign allows registered users to send a document signature request to anyone. When doing so, an email will be generated and sent to the intended recipients from a legitimate email address.

---

ChatGPT and the Growing Threat of Bring Your Own AI to the SOC

Two new surveys examine what it takes to make a successful SOC. Both surveys stress the need for automation and artificial intelligence (AI) – but one survey raises the additional specter of the growing use of bring your own AI (BYO-AI).