Category: EN

Rhysida Ransomware demands 20 BTC from British Library

Last month, the British Library Computer Network fell victim to a ransomware attack, purportedly carried out by the Rhysida Ransomware, a newly identified malware variant. The perpetrators are now demanding a ransom of 20 bitcoins to decrypt the compromised database…

Segmentation proves crucial for fast response to security incidents

In this Help Net Security video, Steve Winterfeld, Advisory CISO at Akamai, discusses the recent surge of ransomware attacks in the U.S. and how it relates to microsegmentation. Recovery after a security breach happens 11 hours faster with segmentation. For…

The hidden obstacles to integrating AI into your business

A mere 14% of organizations globally are fully prepared to deploy and leverage AI-powered technologies, according to Cisco. The report highlights companies’ preparedness to utilize and deploy AI, showcasing critical gaps across key business pillars and infrastructures that pose serious…

Organizations’ serious commitment to software risk management pays off

There has been a significant decrease in vulnerabilities found in target applications – from 97% in 2020 to 83% in 2022 – an encouraging sign that code reviews, automated testing and continuous integration are helping to reduce common programming errors,…

Blockchain Breakthroughs: Transforming Industries

Blockchain technology is like a revolutionary wave that has been sweeping across the digital world over the past few years. It has provided numerous benefits… The post Blockchain Breakthroughs: Transforming Industries appeared first on Security Zap. This article has been…

Kaspersky’s Advanced Persistent Threats Predictions for 2024

New botnets, more AI in spearphishing and increases in hack-for-hire business are some of Kaspersky’s security predictions. Get extensive APT mitigation tips, too. This article has been indexed from Security | TechRepublic Read the original article: Kaspersky’s Advanced Persistent Threats…

What Healthcare Cybersecurity Leaders Should Know About the FDA’s Section 524B Guidelines

New cybersecurity regulations from the FDA outline specific steps that medical device companies must take in order to get their devices approved for market. This article has been indexed from Dark Reading Read the original article: What Healthcare Cybersecurity Leaders…

Scattered Spider ransomware gang falls under government agency scrutiny

Ransomware group Scattered Spider aka Octo Tempest are masters at social engineering tactics like SIM swapping. This article has been indexed from Malwarebytes Read the original article: Scattered Spider ransomware gang falls under government agency scrutiny

CyberTalk Series: MSP and MSSP Cybersecurity Compliance Challenges in 2023 and Goals for 2024 with Kimberly Simon

Our industry is way more complex than meets the eye. MSPs and MSSPs are not just managing their clients’ cybersecurity programs, The post CyberTalk Series: MSP and MSSP Cybersecurity Compliance Challenges in 2023 and Goals for 2024 with Kimberly Simon…

DEF CON 31 – Panel: ‘Hack the Future – Why Congress & White House Support AI Red Teaming’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…

Malware Uses Trigonometry to Track Mouse Strokes

The latest LummaC2 infostealer version includes a novel anti-sandbox trick to avoid detonating when no human mouse movements are detected. This article has been indexed from Dark Reading Read the original article: Malware Uses Trigonometry to Track Mouse Strokes

Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Dark Reading Read the original article: Lasso Security Emerges From Stealth With $6M Seed Funding for Gen…

Canadian government impacted by data breaches of two of its contractors

The Canadian government discloses a data breach after threat actors hacked two of its contractors.  The Canadian government declared that two of its contractors,Brookfield Global Relocation Services (BGRS) and SIRVA Worldwide Relocation & Moving Services, have been hacked, resulting in…

Protecting Kids on Social Media Act: Amended and Still Problematic

< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> Senators who believe that children and teens must be shielded from social media have updated the problematic Protecting Kids on Social Media Act, though it remains an…

Amid Military Buildup, China Deploys Mustang Panda in the Philippines

China pairs cyber and kinetic attacks in the South Pacific as it continues to wrangle control of the South China Sea. This article has been indexed from Dark Reading Read the original article: Amid Military Buildup, China Deploys Mustang Panda…

Facebook Breaks Up Its Ethical AI Watchdog Group

The post Facebook Breaks Up Its Ethical AI Watchdog Group appeared first on Facecrooks. In recent years, Facebook has increasingly relied on artificial intelligence to handle everything from suggesting friends to detecting scams. However, while the social media giant is…

Cisco Live is the time to jump into the future. Together.

Cisco Live Melbourne is right around the corner. I couldn’t be more excited to spend time with Cisco customers and partners at this energizing event December 5-8, 2023. This article has been indexed from Cisco Blogs Read the original article: Cisco…

MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people’s data stolen

Real-life impact of buggy software laid bare – plus: Avast tries to profit from being caught up in attacks Quick show of hands: whose data hasn’t been stolen in the mass exploitation of Progress Software’s vulnerable MOVEit file transfer application?…

CISA Launches Pilot Program to Address Critical Infrastructure Threats

CISA expects to extend this program to include up to 100 critical infrastructure entities in its first year. This article has been indexed from Dark Reading Read the original article: CISA Launches Pilot Program to Address Critical Infrastructure Threats

Thousands of new honeypots deployed across Israel to catch hackers

On October 7, Hamas launched an unprecedented terrorist attack on Israel, killing more than 1,200 people with hundreds taken hostage. The attack prompted a deadly response from the Israel Defense Forces, which has reportedly left more than 10,000 people dead…

Cisco Transportation at Smart City Expo World Congress (SCEWC) 2023

Cisco recently attended Smart City Expo World Congress in Barcelona, Spain where 25,000 attendees from 800 cities came together with a common purpose to moving cities towards a better future. Cisco’s belief that that technology holds the promise of transforming…

Automating your way out of an AppSec staffing shortage

If you’re like most companies, you might be struggling to hire and retain skilled application security staff. According to a 2023 study by the Information Systems Security Association (ISSA), 71% of companies feel they are negatively impacted by a shortage…

2024: The Year Microsoft’s AI-Driven Zero Trust Vision Delivers

Microsoft’s vision for zero trust security is galvanized around generative AI and reflects how identity and network access must constantly improve to counter complex cyberattacks. This article has been indexed from Security News | VentureBeat Read the original article: 2024:…

Data stolen on Canadian federal employees in third party hack may go back 24 years

Data involves military, RCMP and public servants moved to new posts held by two relocatio This article has been indexed from IT World Canada Read the original article: Data stolen on Canadian federal employees in third party hack may go…

Rhysida ransomware gang is auctioning data stolen from the British Library

The Rhysida ransomware group claimed responsibility for the recent cyberattack on the British Library that has caused a major IT outage. The Rhysida ransomware gang added the British Library to the list of victims on its Tor leak site. The…

LummaC2 v4.0 Malware Stealing Data with Trigonometry to Detect Human Users

By Deeba Ahmed LummaC2 is back as LummaC2 v4.0. This is a post from HackRead.com Read the original post: LummaC2 v4.0 Malware Stealing Data with Trigonometry to Detect Human Users This article has been indexed from Hackread – Latest Cybersecurity…

Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens

By Waqas The database was leaked in September 2023; however, it is still accessible to individuals with forum access. This is a post from HackRead.com Read the original post: Hacker Leaks Vaccination Records of Over 2 Million Turkish Citizens This…

Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive Down Cyber Risk

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from CISA Blog Read the original article: Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive…

‘Not consistently candid’: The cryptic phrase that ended Sam Altman’s tenure at OpenAI

‘Not Consistently Candid’: Decoding the cryptic phrase that led to Sam Altman’s OpenAI exit and its implications on AI startup leadership and OpenAI’s future direction. This article has been indexed from Security News | VentureBeat Read the original article: ‘Not…

Celebrating ten years of the Microsoft Bug Bounty program and more than $60M awarded

This year marks the tenth anniversary of the Microsoft Bug Bounty Program, an essential part of our proactive strategy to protect customers from security threats. Since its inception in 2013, Microsoft has awarded more than $60 million to thousands of…

Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

A WIRED analysis of leaked police documents verifies that a secretive government program is allowing federal, state, and local law enforcement to access phone records of Americans who are not suspected of a crime. This article has been indexed from…

Saudi Arabia Arms Public Sector With Google Cloud Services

Chronicle CyberShield will be offered as a managed service with security monitoring and Mandiant incident response included. This article has been indexed from Dark Reading Read the original article: Saudi Arabia Arms Public Sector With Google Cloud Services

Ukraine fires top cybersecurity officials

The Ukrainian government has fired two of its most senior cybersecurity officials following accusations of alleged embezzlement. Yurii Shchyhol, head of Ukraine’s Ukraine’s State Special Communications Service of Ukraine, or SSSCIP, and his deputy Victor Zhora (pictured), who served as…

Hybrid Work for Government: Resiliency in Emergency Situations

Learn about the importance of maintaining operational resilience and the need for adaptable technology in emergency situations. This article has been indexed from Cisco Blogs Read the original article: Hybrid Work for Government: Resiliency in Emergency Situations

Former infosec COO pleads guilty to attacking hospitals to drum up business

Admits to taking phones used for ‘code blue’ emergencies offline and more An Atlanta tech company’s former COO has pleaded guilty to a 2018 incident in which he deliberately launched online attacks on two hospitals, later citing the incidents in…

Microsoft Announces Launch of Customizable AI-Powered Digital Avatar

Microsoft has recently announced the launch of its text-to-speech avatars on its Azure AI platform, which will enable businesses to design customized digital humans driven by natural language AI. With the new avatars, word input may be used to initiate…

Stay safe while shopping online on Black Friday and Cyber Monday

The holiday season is upon us, and with it comes the excitement of Black Friday and Cyber Monday. These annual shopping extravaganzas have transitioned from in-store chaos to virtual shopping sprees, offering consumers incredible deals from the comfort of their…

15 benefits of outsourcing your cybersecurity operations

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Security Resources and Information from TechTarget Read the original article: 15 benefits of outsourcing your cybersecurity operations

What to do if the phone is hacked or becomes espionage target

When you discover that your device has been compromised, it’s important not to panic. Such incidents can happen to anyone, and taking swift action within a couple of hours can help mitigate potential risks to your personal information. The first…

Details Emerge Of Surprise Board Coup That Ousted CEO Sam Altman At OpenAI

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from News ≈ Packet Storm Read the original article: Details Emerge Of Surprise Board Coup That Ousted CEO…

Most OpenAI Staff Threaten To Quit After Microsoft Hires Sam Altman

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from News ≈ Packet Storm Read the original article: Most OpenAI Staff Threaten To Quit After Microsoft Hires…

DEF CON 31 Packet Hacking Village – Pete Hay’s ‘The Importance Of Arts And Crafts In ThreatOps’

Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…

Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers

Researchers have found numerous security vulnerabilities in Google Workspace that risk breaches. While the vulnerabilities… Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This article…

CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations

New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations. The post CISA Releases Cybersecurity Guidance for Healthcare, Public Health Organizations appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…

FCC’s Got New Rules for SIM-Swap and Port-Out Fraud

Too many times: Federal Communications Commission shuts stable door after horse bolted. But chairwoman Jessica Rosenworcel (pictured) was hoping it would save us. The post FCC’s Got New Rules for SIM-Swap and Port-Out Fraud appeared first on Security Boulevard. This…

CISA to Provide Cybersecurity Services to Critical Infrastructure Entities

The federal government’s top cybersecurity agency wants to become the managed services provider for commercial critical infrastructure entities, which have become an increasing target of cybercriminals. The Cybersecurity and Infrastructure Security Agency (CISA) is piloting a program that will enable…

NetSupport RAT Infections on the Rise – Targeting Government and Business Sectors

Threat actors are targeting the education, government and business services sectors with a remote access trojan called NetSupport RAT. “The delivery mechanisms for the NetSupport RAT encompass fraudulent updates, drive-by downloads, utilization of malware loaders (such as GHOSTPULSE), and various forms of…

READYgg Onboards 15 Million Web2 Players into Web3 in Partnership with Aptos Labs

By Owais Sultan Millions of players will enter web3 gaming thanks to a new partnership between READYgg and Aptos Labs realized… This is a post from HackRead.com Read the original post: READYgg Onboards 15 Million Web2 Players into Web3 in…

Operationalize cyber risk quantification for smart security

Organizations constantly face new tactics from cyber criminals who aim to compromise their most valuable assets. Yet despite evolving techniques, many security leaders still rely on subjective terms, such as low, medium and high, to communicate and manage cyber risk.…

Sam Altman’s AI ‘mission continues’ at Microsoft, future of OpenAI and ChatGPT uncertain

In a rollercoaster ride of a weekend for generative AI darling OpenAI, co-founders Sam Altman and Greg Brockman are now at Microsoft and OpenAI is grappling with how to move forward. This article has been indexed from Latest stories for…

Morgan Stanley Fined $6.5 Million for Exposing Customer Information

Morgan Stanley agrees to pay $6.5 million for exposing personal information through negligent data-security practices. The post Morgan Stanley Fined $6.5 Million for Exposing Customer Information appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read…

XDR Cybersecurity: Technologies and Best Practices

The implementation of an XDR strategy can significantly strengthen an organization’s cybersecurity framework. The post XDR Cybersecurity: Technologies and Best Practices appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: XDR Cybersecurity:…

Product Walkthrough: Silverfort’s Unified Identity Protection Platform

In this article, we will provide a brief overview of Silverfort’s platform, the first (and currently only) unified identity protection platform on the market. Silverfort’s patented technology aims to protect organizations from identity-based attacks by integrating with existing identity and…

DarkGate and PikaBot Malware Resurrect QakBot’s Tactics in New Phishing Attacks

Phishing campaigns delivering malware families such as DarkGate and PikaBot are following the same tactics previously used in attacks leveraging the now-defunct QakBot trojan. “These include hijacked email threads as the initial infection, URLs with unique patterns that limit user…

Akamai EdgeWorkers and Uniform: Personalize Web Pages at Scale Without Flicker

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from Blog Read the original article: Akamai EdgeWorkers and Uniform: Personalize Web Pages at Scale Without Flicker

LummaC2 Stealer’s New Anti-Sandbox Technique? Trigonometry

New research by Outpost24 has revealed that malware developers are using sandbox evasion techniques to avoid exposing malicious behaviour inside a sandbox where malware is analysed by security researches. Outpost24’s threat intelligence team, KrakenLabs, discovered that malware developers are using trigonometry to…

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

Johnson Controls has patched a critical vulnerability that can be exploited to take complete control of Frick industrial refrigeration products.  The post Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products appeared first on SecurityWeek. This article has been indexed…

Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing

Microsoft hired Sam Altman and another architect of OpenAI for a new venture after their sudden departures shocked the artificial intelligence world. The post Microsoft Hires Sam Altman and OpenAI’s New CEO Vows to Investigate His Firing appeared first on…

Morgan Stanley Ordered to Pay $6.5 Million for Exposing Customer Information

Morgan Stanley agrees to pay $6.5 million for exposing personal information through negligent data-security practices. The post Morgan Stanley Ordered to Pay $6.5 Million for Exposing Customer Information appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS…

Maximizing Data Security: Why Simply Factory Resetting Your Android Phone Won’t Suffice Before Selling

    In today’s tech landscape, concerns about smartphone data privacy are increasingly prevalent. While many may not possess highly sensitive information, the thought of unauthorized access to personal data remains unsettling. Despite following common safety practices online, uncertainties persist…

Fortify Your Online Business – Security Tips for Starting an e-Commerce Website

By Owais Sultan E-commerce is a lucrative business, but it requires hard work and robust cybersecurity. This is a post from HackRead.com Read the original post: Fortify Your Online Business – Security Tips for Starting an e-Commerce Website This article…

Yamaha Ransomware Attack: Employees Personal Information Exposed

A ransomware attack targeted Yamaha Motor Co., Ltd., resulting in a partial disclosure of the personal information maintained by the company. Notably, a third party gained unauthorized access to one of the servers run by Yamaha Motor Philippines, Inc. (YMPH),…

Hackers accessed sensitive health data of Welltok patients

Hackers accessed the personal data of more than a million people by exploiting a security vulnerability in a file transfer tool used by Welltok, the healthcare platform owned by Virgin Pulse. Welltok, a Denver-based patient engagement company that works with…

Russia-linked APT29 group exploited WinRAR 0day in attacks against embassies

Russia-linked cyberespionage group APT29 has been observed leveraging the CVE-2023-38831 vulnerability in WinRAR in recent attacks. The Ukrainian National Security and Defense Council (NDSC) reported that APT29 (aka SVR group, Cozy Bear, Nobelium, Midnight Blizzard, and The Dukes) has been exploiting the CVE-2023-38831 vulnerability in…

Konni Campaign Distributed Via Malicious Document

FortiGuard Labs exposes the KONNI campaign’s distribution of using a counterfeit Russian military operation document. Read more on the details of the attack chain.        This article has been indexed from Fortinet Threat Research Blog Read the original article: Konni…

Adopting CNAPP as a Bridge Between DevOps and Cloud-Native Security

A CNAPP can infuse security into DevOps workflows while paying close attention to the unique needs of cloud-native applications. The post Adopting CNAPP as a Bridge Between DevOps and Cloud-Native Security appeared first on Security Boulevard. This article has been…

Threat Intelligence with Sandbox Analysis: Security Analyst Guide – 2024

Threat intelligence (TI) is critical to organizations’ cybersecurity infrastructure, allowing them to keep track of the evolving threat landscape and ensure timely detection. However, TI Solutions’ information frequently lacks the specifics required for thorough security measures. One way to address…

Lasso Security emerges from stealth to wrangle LLM security

LLMs are rife with security issues: jailbreaking, data poisoning, insufficient data validation. How startup Lasso Security aims to help. This article has been indexed from Security News | VentureBeat Read the original article: Lasso Security emerges from stealth to wrangle…

Inside OpenAI’s chaotic weekend: The Sam Altman dismissal to Emmett Shear’s appointment

A shocking weekend at OpenAI: CEO Sam Altman fired, president Greg Brockman resigns, Emmett Shear appointed new CEO, and spurned Altman hired by Microsoft. This article has been indexed from Security News | VentureBeat Read the original article: Inside OpenAI’s…

Intel Released Urgent Patch For Reptar Vulnerability In Its CPUs

Intel recently released a critical security fix for a newly discovered vulnerability affecting its CPUs.… Intel Released Urgent Patch For Reptar Vulnerability In Its CPUs on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This…

Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra Zero-Day

Months after ensuring that the patch actually works, Google has now disclosed more details about… Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra Zero-Day on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses. This article…

New “Agent Tesla” Variant: Unusual “ZPAQ” Archive Format Delivers Malware

A new variant of Agent Tesla uses the uncommon compression format ZPAQ to steal information from approximately 40 web browsers and various email clients. But what exactly is this file compression format? What advantage does it provide to threat actors?…

Cybersecurity, Legal, and Financial Experts Share Their Reactions to the SEC’s Latest Cyber Disclosure Regulations | Kovrr Blog

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Cybersecurity, Legal, and Financial Experts Share Their Reactions to the SEC’s Latest Cyber Disclosure Regulations | Kovrr Blog appeared first on Security Boulevard. This article has…

Yamaha Motor Confirms Data Breach Following Ransomware Attack

Yamaha Motor discloses ransomware attack impacting the personal information of its Philippines subsidiary’s employees. The post Yamaha Motor Confirms Data Breach Following Ransomware Attack appeared first on SecurityWeek. This article has been indexed from SecurityWeek RSS Feed Read the original…

5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms

It’s crucial to thoroughly assess the risk profiles of various SSE platforms and weigh their suitability against their organization’s risk tolerance before adopting SSE. The post 5 Steps to Assessing Risk Profiles of Third-Party SSE Platforms appeared first on SecurityWeek.…