Undoubtedly, our industry needs to create more initiatives to attract a more diverse group of professionals—including women—to STEM-focused careers like cybersecurity. While we’ve collectively made some progress on this front, a great deal of work still needs to be done…
HPE to acquire Axis Security to deliver a unified SASE offering
Hewlett Packard Enterprise has agreed to buy cloud security services provider Axis Security, its third acquistion since January, to deliver a unified secure access service edge (SASE) offering. The acquisition is aimed at incorporating the Axis security service edge (SSE)…
Dubai’s Crypto Industry Introduces New Licensing Regulations
The crypto industry in Dubai is witnessing a huge breakthrough since the jurisdiction has recently come up with its new crypto regulatory framework, apparently providing individuals with a concrete licensing regime for their digital asset issues and service vendors. The…
A GoAnywhere MFT hack Exposes Hatch Bank’s Data Breach
Hackers exploited a zero-day vulnerability in Hatch Bank’s internal file transfer software, allowing access to thousands of Social Security numbers from customers, according to Hatch Bank, a digital-first bank that provides infrastructure for fintech companies offering their brand credit…
Crypto Scammer Monkey Drainer Shuts Down Criminal Operations
Cyber threats are not new in the crypto space. The industry has been witnessing advanced cyber security attacks since its inception and even recorded more during the 2022 crypto winter, especially in the DeFi Sector. According to Yahoo Finance, the…
For Your Mid to Large-Sized Firm, Here Are Four Best Cybersecurity Practices
As technology advances and becomes more sophisticated, cybercriminals continue to look for new ways to take advantage of enterprises. A cyber attack could result in financial loss, loss of reputation, and legal repercussions, among other catastrophic and permanent harms.…
Digital Resignation is Initial Stage of Safeguarding Privacy Online
Several internet businesses gather and use our personal information in exchange for access to their digital goods and services. With the use of that data, they can forecast and affect our behavior in the future. Recommendation algorithms, targeted marketing,…
Browser Security report reveals major online security threats
LayerX has published its annual browser security report in which the company highlights the most prominent browser security risks of 2022. The report includes predictions and recommendations for 2023 as well. The […] Thank you for being a Ghacks reader.…
Beware of Bot Malware: Understanding the Dangers and How to Protect Your Computer
How Bot Malware Spreads and Infects Your Computer Bot malware, also known as botnet malware, is a type of malicious software designed to create a network of infected computers or “bots” that can be remotely controlled by a hacker. These…
Best Ways To Change Your Password On A Chromebook
Passwords are the keys to our security on the internet, and thus mustn’t be taken for granted. Thanks to browsers’ options, our passwords can be easily saved, without further need to type […] Thank you for being a Ghacks reader.…
Stay Ahead of the Game: How AI Can Help You Avoid Cybersecurity Traps
I have never been a victim of cyber threats, but from what I’ve heard, the effects are devastating. Cybersecurity officers and consultants work tirelessly to implement security strategies to fight hackers. Artificial […] Thank you for being a Ghacks reader.…
Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Google Cloud Platform allows data exfiltration without a (forensic) trace Attackers can exfiltrate company data stored in Google Cloud Platform (GCP) storage buckets without leaving…
Cyberattack on British Retailer WH Smith Exposes Employees` Data
Threat actors breached WH Smith, the 1,700 locations UK retailer, and exposed data belonging to current and former employees. WH Smith has more than 12,500 employees and reported a revenue of $1.67 billion in 2022. What Kind of Data Was…
Chinese Hackers Are Using a New Backdoor to Deploy Malware
This year, the Chinese cyberespionage group Mustang Panda began deploying a new custom backdoor named ‘MQsTTang’ in attacks. This advanced persistent threat (APT), also known as TA416 and Bronze President, targets organizations worldwide with customized versions of PlugX malware. In January…
How Royal Ransomware Could Wreak Havoc on the U.S. Digital Economy
Earlier this year, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released an advisory regarding the Royal Ransomware gang. The Royal Ransomware group first appeared in the United States in September 2022—the U.S. Health and Human Services Cybersecurity Coordination Center…
Scanning Attack: What It Is and How to Protect Your Organization Against It?
A scanning attack is a method used by threat actors to identify vulnerabilities in a network or system. Scanning attacks typically involve using automated tools to scan for open ports, vulnerabilities, and other weaknesses that can be exploited to gain…
LBB – 39,288 breached accounts
In August 2022, customer data of the Indian shopping site "LBB" (Little Black Book) was posted to a popular hacking forum. The data contained over 3M records with 39k unique email addresses alongside IP and physical addresses, names and device…
Cyber Security Management System (CSMS) for the Automotive Industry
How to use Bitwarden passwords on the go
Bitwarden is a popular password management service. It is available as a web-version, as desktop applications, mobile apps and as browser extensions. Since it is cloud-based, passwords and other data stored in […] Thank you for being a Ghacks reader.…
Play Ransomware gang has begun to leak data stolen from City of Oakland
The Play ransomware gang has finally begun to leak the data stolen from the City of Oakland in a recent attack. The Play ransomware gang has begun to leak data they have stolen from the City of Oakland (California) in…
RADIUS server authentication: Old but still relevant
The content of this post is solely the responsibility of the author. AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. A radius server uses a network protocol for…
Security Affairs newsletter Round 409 by Pierluigi Paganini
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.…
Akamai acquires Ondat to strengthen its cloud computing offerings
Akamai Technologies reached a definitive agreement to acquire Ondat, a cloud-based storage technology provider with a Kubernetes-native platform for running stateful applications anywhere at scale. Ondat’s technology delivers persistent storage directly onto any Kubernetes cluster for running business-critical, stateful applications…
Snowflake and AWS expand partnership to drive customer-focused innovation
Snowflake and Amazon Web Services (AWS) have unveiled a multi-year expansion of their partnership, with Snowflake growing its AWS spend and both companies jointly contributing millions of dollars to support go-to-market efforts. The expansion of the collaboration will take a…
Russia Bans Messengers, Including WhatsApp, Telegram, And More
The regulations prohibiting the use of numerous international private messaging services in the Russian government and state entities went into effect today, according to Roskomnadzor, a Russian internet regulatory organization. Parts 8 to 10 of Article 10 of the “On…
IT Security News Daily Summary 2023-03-04
FiXS, a new ATM malware that is targeting Mexican banks PayPal Sued Over Data Breach that Impacted 35,000 users BidenCash leaks 2.1M stolen credit/debit cards Trezor Users: Target of a Major Cryptocurrency Wallet Phishing Campaign TPM 2.0 Library Vulnerabilities May…
FiXS, a new ATM malware that is targeting Mexican banks
Researchers at Metabase Q discovered a new ATM malware, dubbed FiXS, that was employed in attacks against Mexican banks since February 2023. Researchers at Metabase Q recently spotted a new ATM malware, dubbed FiXS, that is currently targeting Mexican banks. The name…