Latest Cybersecurity News and Articles

---

Breaking barriers: Insight’s investment in women’s leadership and board readiness

Megan Amdahl is Senior Vice President of Partner Alliances & North America Transformation at Insight, a solutions integrator company that provides technical expertise and advisory services to help organizations accelerate their digital journeys and modernize their businesses. Megan is a finance leader with more than 10 years of diverse experience in financial planning and analysis, […] The post Breaking barriers: Insight’s investment in women’s leadership and board readiness appeared first on CyberTalk.

---

Sued by Meta, Freenom Halts Domain Registrations

The domain name registrar Freenom, whose free domain names have long been a draw for spammers and phishers, has stopped allowing new domain name registrations. The move comes just days after the Dutch registrar was sued by Meta, which alleges the company ignores abuse complaints about phishing websites while monetizing traffic to those abusive domains.

---

Fighting back against cyber attacks on water systems

EXECUTIVE SUMMARY: In the U.S., the government is requiring states to research and report on the cyber capabilities of drinking water utilities. This is part of the White House’s larger effort to protect the country’s critical infrastructure from nation-state cyber attacks and similarly dangerous threats. The new requirements were implemented by the Environmental Protection Agency […] The post Fighting back against cyber attacks on water systems appeared first on CyberTalk.

---

New SYS01stealer Threat Uses Facebook Ads to Target Critical Infrastructure Firms

Morphisec has tracked an advanced info-stealer called SYS01stealer since November 2022. It uses similar lures and loading techniques to another information stealer recently named S1deload by Bitdefender, but the actual payload is different.

---

Vice Society Ransomware Group Claims Hamburg University of Applied Sciences as Latest Victim

The university warned that “significant amounts of data from various areas” were copied, including usernames and “cryptographically secured” passwords, email addresses, and mobile phone numbers.

---

Transparent Tribe Lures Indian and Pakistani Officials With Romance Scam to Spread Malware

ESET researchers have identified an active Transparent Tribe campaign, targeting mostly Indian and Pakistani Android users – presumably with a military or political orientation.

---

FCC proposes new data breach notification rules

New data breach notification rules have been proposed by the FCC to strengthen the rules for notifying customers and law enforcement of breaches.

---

David Dunn named Chief Information Security Officer at Kroll

David Dunn has been appointed as Kroll’s Chief Information Security Officer (CISO). Dunn succeeds Wayne Peterson, who recently retired.

---

Android’s March 2023 Updates Patch Over 50 Vulnerabilities

The most severe of the patched vulnerabilities are two remote code execution (RCE) flaws in the System component, both of which were addressed as part of the 2023-03-01 security patch level.

---

Exploitation of Critical Vulnerability in End-of-Life VMware Product Ongoing

Tracked as CVE-2021-39144 (CVSS score of 9.8), the issue was disclosed in October 2022, when VMware announced patches for it, although the affected product had reached end-of-life (EOL) status in January 2022.

---

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies, and other sectors. "The threat actors behind the campaign are targeting Facebook business accounts by using Google ads and fake Facebook profiles that promote things like games, adult content, and cracked software, etc. to lure

---

Brazilian Conglomerate Andrade Gutierrez Suffers 3TB Data Breach

Hackers have stolen several terabytes of corporate and employee information from controversial Brazilian multi-national Andrade Gutierrez, in a raid the firm reportedly still hasn’t acknowledged.

---

Legislation introduced to protect personally identifiable health data

The UPHOLD Privacy Act was introduced to the Senate to prevent companies from profiting off of identifiable health data for advertising purposes. 

---

Hacker Claims to Sell 160GB Trove of Stolen Confidential Data From Acer

The list of stolen data included confidential slides and presentations, technical manuals, Windows Imaging Format files, binaries of various types, backend infrastructure data, product model documentation, and information about various devices.

---

Two-Thirds of European Firms Have Started Zero Trust

Over two-thirds of European organizations have begun developing a zero trust strategy, up from around a quarter in 2020, according to Forrester. The analyst house said a further 15% were planning to adopt zero trust tech.

---

Sandbox Blockchain Game Breached to Send Emails Linking to Malware

The Sandbox blockchain game is warnings its community that a security incident caused some users to receive fraudulent emails impersonating the game, trying to infect them with malware.

---

Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

A suspected Pakistan-aligned advanced persistent threat (APT) group known as Transparent Tribe has been linked to an ongoing cyber espionage campaign targeting Indian and Pakistani Android users with a backdoor called CapraRAT. "Transparent Tribe distributed the Android CapraRAT backdoor via trojanized secure messaging and calling apps branded as MeetsApp and MeetUp," ESET said in a report

---

RansomHouse Ransomware Attack Hit Hospital Clinic de Barcelona

“The hospital’s press department said that all written work was being done on paper and that the hospital was diverting new urgent cases to other hospitals in the city,” states the Associated Press.

---

Why Healthcare Can't Afford to Ignore Digital Identity

Investing in digital identity can improve security, increase clinical productivity, and boost healthcare's bottom line. — by Gus Malezis, CEO of Imprivata Digitalization has created immeasurable opportunities for businesses over the past two decades. But the growth of hybrid work and expansion of Internet of Things (IoT) has outpaced traditional 'castle and moat' cybersecurity, introducing

---

Ransomware Roundup – Sirattacker and ALC Ransomware

Sirattacker is one of the latest Chaos ransomware variants. It was first released in the middle of February 2023. ALC is a recently reported ransomware. It is known for a message aimed at “Russia and its counterpart” in its ransom note.