The stone age of AI Despite all the talk of generative AI disrupting the world, the technology has failed to significantly transform white-collar jobs. Workers are experimenting with chatbots for activities like email drafting, and businesses are doing numerous experiments,…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Tech Titans Adopt Post-Quantum Encryption to Safeguard User Data
As stated by experts, quantum computers could break cryptography by 50% by the year 2033. Many cryptographic methods that are being used today are believed to be the result of mathematical problems which are too difficult to solve by…
Santander Bank Faces Major Data Breach Affecting 30 Millions
In a significant cybersecurity incident, Spain’s largest bank, Santander, has confirmed a data breach involving unauthorized access to sensitive information. The breach, detected two weeks ago, was linked to a third-party provider’s database and impacted employees and customers in Chile,…
Insikt Group Tracks GRU’s BlueDelta Cyber-Espionage Campaigns Across Europe
The Insikt Group has identified evolving tactics used by the GRU’s BlueDelta, targeting European networks with Headlace malware and credential-harvesting web pages. BlueDelta’s operations spanned from April to December 2023, employing phishing, compromised internet services, and living off-the-land binaries…
Ransomware Attacks on the Rise! Nearly 2900 Assaults Reported in the First Quarter of 2024
The increasing frequency of ransomware attacks is a significant challenge, as seen by the recent rise in APT groups with ties to Pakistan before the Indian elections and the disruption of significant Ransomware-as-a-Service (RaaS) operations. The Seqrite report states…
Google Confirms Leak of 2,500 Internal Documents on Search Algorithm
In a significant incident, Google has confirmed the leak of 2,500 internal documents, exposing closely guarded information about its search ranking algorithm. This breach was first highlighted by SEO experts Rand Fishkin and Mike King of The Verge, who…
Meta to Train AI with Public Facebook and Instagram Posts
Meta, the company behind Facebook and Instagram, is set to begin using public posts from European users to train its artificial intelligence (AI) systems starting June 26. This decision has sparked discussions about privacy and GDPR compliance. Utilising…
Online Banking Frauds: The Silent Threat to India’s Financial Stability
Bank frauds in India: A soaring trend According to an analysis of frauds recorded across banks, the number of fraud cases filed in FY24 increased by approximately 300 percent from 9,046 in FY22. However, the sum involved has decreased from…
Task Force Triumphs in Shutting Down Six Notorious Malware Droppers
This is the biggest-ever international operation against ransomware, coordinated by the justice and police agencies of the European Union. Police have taken down computer networks that spread ransomware via infected emails in what is described as the largest international…
California Advances AI Regulation to Tackle Discrimination and Privacy Concerns
California lawmakers are making significant strides in regulating artificial intelligence (AI) technologies, with a series of proposals aimed at addressing discrimination, misinformation, privacy concerns and prohibiting deepfakes in the contexts of elections and pornography, advancing in the legislature last…
Ransomware Attacks in Healthcare: A Threat to Patient Safety
Ransomware attacks in Healthcare: A threat to patient safety A ransomware attack on a major U.S. hospital network has been endangering patients’ health. Nurses are forced to manually enter prescription information and work without electronic health records cyberattacks have become…
Shell Data Breach: Hacker Group 888 Claims Responsibility
A hacker group known as 888 has claimed responsibility for a data breach targeting Shell, the British multinational oil and gas company. The breach, allegedly impacting around 80,000 individuals across multiple countries, has raised significant concerns about data security…
Seattle Public Library Hit by Ransomware Attack, Online Services Disrupted
The Seattle Public Library (SPL) has faced a significant cybersecurity incident, with its online services being disrupted due to a ransomware attack. This attack, detected over the weekend, led to the library taking proactive measures by bringing its online…
RedTail Cryptomining Malware Exploits Zero-Day Vulnerability in PAN-OS
Cryptomining malware, potentially of North Korean origin, is targeting edge devices, including a zero-day vulnerability in Palo Alto Networks’ custom operating system that the company quickly patched in April. Researchers from Akamai identified the malware, dubbed RedTail due to…
Professional Sporting Events: The Next Frontier of Cybersecurity?
Professional sports has a cybersecurity issue. Last year, the National Cyber Security Centre discovered that 70% of sports organisations face at least one cyberattack each year. This indicates a significant increase from general companies, of which only 32% reported dealing…
Ticketmaster Data Breach Affects Over 500 Million Customers
We are all music fans at heart, and recently the most eye-catching tour is the three-hour Taylor Swift concert. The platform that sells tickets for these in-demand tours, Ticketmaster, has taken a hit. In a substantial blow to one…
Why CVEs Reflect an Incentives Problem
Two decades ago, economist Steven Levitt and New York Times reporter Stephen Dubner published “Freakonomics,” a book that applied economic principles to various social phenomena. They argued that understanding how people make decisions requires examining the incentives they respond…
Pirated Microsoft Office Distributes a Malware Cocktail to Infiltrates Systems
The hackers are distributing a malware cocktail via cracked versions of Microsoft Office marketed on torrent websites. Malware distributed to customers includes remote access trojans (RATs), cryptocurrency miners, malware downloaders, proxy tools, and anti-AV programs. The AhnLab Security Intelligence…
NIST Introduces ARIA Program to Enhance AI Safety and Reliability
The National Institute of Standards and Technology (NIST) has announced a new program called Assessing Risks and Impacts of AI (ARIA), aimed at better understanding the capabilities and impacts of artificial intelligence. ARIA is designed to help organizations and…
Enhancing Cybersecurity: Automated Vulnerability Detection and Red Team Exercises with Validation Scans
In today’s digital age, cybersecurity has become a top priority for organizations of all sizes. The ever-evolving landscape of cyber threats necessitates robust and comprehensive approaches to identifying and mitigating vulnerabilities. Two effective methods in this domain are automated vulnerability…