“Rather than scam or phish everyday people directly for gift card-based payments, Storm-0539 infiltrates large retailers and fraudulently issues gift card codes to themselves, virtually printing their own money,” Microsoft’s Vasu Jakkal explained. This article has been indexed from Cyware…
Category: Cyware News – Latest Cyber News
High-Severity GitLab Flaw Lets Attackers Take Over Accounts
The security flaw (tracked as CVE-2024-4835) is an XSS weakness in the VS code editor (Web IDE) that lets threat actors steal restricted information using maliciously crafted pages. This article has been indexed from Cyware News – Latest Cyber News…
Cyber Force Provision Gets House Committee’s Approval
A requirement for the Pentagon to commission an independent study on the creation of a U.S. Cyber Force was added late Wednesday to the House version of the defense policy bill. This article has been indexed from Cyware News –…
Machine Identities Lack Essential Security Controls, Pose Major Threat
Siloed approaches to securing human and machine identities are driving identity-based attacks across enterprises and their ecosystems, according to a new report by CyberArk. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Google Fixes Eighth Actively Exploited Chrome Zero-Day This Year
The security issue was discovered internally by Google’s Clément Lecigne and is tracked as CVE-2024-5274. It is a high-severity ‘type confusion’ in V8, Chrome’s JavaScript engine responsible for executing JS code. This article has been indexed from Cyware News –…
Courtroom Recording Software Compromised With Backdoor Installer
“Through ongoing monitoring and collaboration with cyber authorities, we identified attempts to replace our Viewer 8.3.7 software with a compromised file,” the company said in a statement on Thursday. This article has been indexed from Cyware News – Latest Cyber…
White House Seeks Critical Cyber Assistance for Water Utilities, Healthcare
National Cyber Director Harry Coker Jr. said the administration is taking actions to strengthen key critical infrastructure sectors, including healthcare and water utilities, and will pursue additional steps to fight ransomware and boost resilience. This article has been indexed from…
Ireland Police Facing Nearly a Million-Dollar Fine After Data Breach Exposes Officers’ Details
The Police Service of Northern Ireland (PSNI) is bracing for a hefty £750,000 (~$952k) fine following last year’s data breach. The PSNI data breach saw the exposure of the personal information of approximately 10,000 officers and staff. This article has…
Chinese Cyberespionage Campaign Targets Governmental Entities in the Middle East, Africa, and Asia
The threat actor searches for sensitive information related to diplomatic and economic missions, embassies, military operations, political meetings, ministries of targeted countries, and high-ranking officials. This article has been indexed from Cyware News – Latest Cyber News Read the original…
APT41 Deploys KeyPlug Backdoor Against Italian Industries
The KeyPlug backdoor has been developed to target both Windows and Linux operative systems and use different protocols to communicate which depend on the configuration of the malware sample itself. This article has been indexed from Cyware News – Latest…
Chinese State-Backed Hackers Turn to Massive ORB Proxy Networks to Evade Detection
One of them called ORB3/SPACEHOP is described as “a very active network leveraged by multiple China-nexus threat actors, including APT5 and APT15” for reconnaissance and vulnerability exploitationl This article has been indexed from Cyware News – Latest Cyber News Read…
Bolster Raises $14M Led by Microsoft’s M12
Bolster, an AI startup, has raised $14 million in funding led by Microsoft’s M12 to combat malicious phishing emails. Their flagship product, CheckPhish, offers brand and URL verification services to businesses. This article has been indexed from Cyware News –…
Cyberattacks are Good for Security Vendors, and Business is Booming
The cybersecurity business is booming, and cyberattacks are fueling its growth. Global spending on security and risk management is on pace to reach $215 billion this year, up 30% from almost $165 billion in 2022, according to Gartner. This article…
US Man Gets 10 Years for Laundering Cash From Online Fraud
Georgia resident Malachi Mullings received a decade-long sentence for laundering money scored in scams against healthcare providers, private companies, and individuals to the tune of $4.5 million. This article has been indexed from Cyware News – Latest Cyber News Read…
UK Government in $10.8m Bid to Tackle AI Cyber-Threats
The research program will be led by researcher Shahar Avin at the government’s AI Safety Institute and delivered in partnership with UK Research and Innovation and The Alan Turing Institute. This article has been indexed from Cyware News – Latest…
Why Shareable SBOMs are Essential for Software Security
Development teams need to plan ahead and create shareable SBOMs that are standardized in a format that’s readily consumable while also establishing scalable systems for attestation, access management, and data verification, among other factors. This article has been indexed from…
Pakistani-Aligned APT36 Targets Indian Defense Organizations
A politically motivated hacking group aligned with Pakistani interests is matching the Indian military’s shift away from the Windows operating system with a heavy focus on malware encoded for Linux. This article has been indexed from Cyware News – Latest…
Microsoft President Set to Testify Before Congress on ‘Security Shortcomings’
A top Microsoft executive will testify next month before the House Committee on Homeland Security on recent cyberattacks that impacted the company and its customers, and Microsoft’s revitalized security strategy. This article has been indexed from Cyware News – Latest…
Cybercriminals are Targeting Elections in India With Influence Campaigns
Around 16 different independent hacktivist groups are targeting Indian elections, including Anon Black Flag Indonesia, Anonymous Bangladesh, and Morocco Black Cyber Army, among others. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Chinese Hackers Hide on Military and Government Networks for Six Years
Bitdefender researchers who discovered the threat group report that its operations align with Chinese geo-political interests, focusing on intelligence collection and espionage. This article has been indexed from Cyware News – Latest Cyber News Read the original article: Chinese Hackers…