Australians have been cautioned about a recent wave of scam websites falsely advertising significant Centrelink payments. These sites promise financial boosts, sometimes hundreds or thousands of dollars, to low-income residents and seniors, exploiting people facing financial challenges. Fraudsters create…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Unofficial Patches Published for New Windows Themes Zero-Day Exploit
Free unofficial fixes are now available for a new zero-day flaw in Windows Themes that allows hackers to remotely harvest a target’s NTLM credentials. NTLM has been extensively exploited in NTLM relay attacks, in which threat actors force susceptible…
Zero-Trust Log Intelligence: Safeguarding Data with Secure Access
Over the years, zero trust has become a popular model adopted by organisations due to a growing need to ensure confidential information is kept safe, an aspect that organisations view as paramount in cybersecurity. Zero-trust is a vital security…
Avoiding Social Media Scams When Recovering a Locked Gmail Account
Losing access to your Gmail account can be a frightening experience, especially given that Gmail is deeply integrated into the online lives of more than 2.5 billion users globally. Unfortunately, the popularity of Gmail has also attracted scammers who…
When and Why to Consider a Data Removal Service
With the risk of data misuse and breaches increasing daily, individuals will be driven to seek reliable methods for securing their online privacy in 2024 to manage these risks. A growing number of privacy solutions are available online now,…
Webflow Sites Employed to Trick Users Into Sharing Login Details
Security experts have warned of an upsurge in phishing pages built with Webflow, a website builder tool, as attackers continue to use legitimate services such as Microsoft Sway and Cloudflare. The malicious campaign targets login credentials for multiple corporate…
Amazon Identified Internet domains Exploited by Russian APT29
The leading advanced persistent threat group in Russia has been phishing thousands of targets in businesses, government agencies, and military institutions. APT29 (also known as Midnight Blizzard, Nobelium, and Cozy Bear) is one of the world’s most prominent threat…
Prometei Botnet: The Persistent Threat Targeting Global Systems
The Prometei botnet, active since at least 2016, continues to pose a persistent threat worldwide by exploiting unpatched software vulnerabilities. First identified in 2020, Prometei has since infected over 10,000 systems across diverse regions, including Brazil, Indonesia, Turkey, and…
India’s New SMS Traceability Rules to Combat Fraud Begin November 1, 2024
Beginning November 1, 2024, Indian telecom providers Airtel, Jio, and Vi will follow a new set of SMS traceability and monitoring guidelines mandated by the Telecom Regulatory Authority of India (TRAI). Aimed at combating cybercrime, these measures seek to…
The Evolution of Phishing Emails: From Simple Scams to Sophisticated Cyber Threats
Phishing emails have undergone significant changes over the past few decades. Once simple and easy to detect, these scams have now evolved into a sophisticated cyber threat, targeting even the most tech-savvy individuals and organizations. Understanding the development of…
NEW Qilin Ransomware Variant Emerges with Improved Evasion Techniques
A much more potent version of the Qilin ransomware has been found, according to cybersecurity experts, showing a new and revamped kind that is ready to attack core systems using advanced encryption along with improved stealth techniques. A Rebranding…
Embargo Ransomware Uses Custom Rust-Based Tools for Advanced Defense Evasion
Researchers at ESET claim that Embargo ransomware is using custom Rust-based tools to overcome cybersecurity defences built by vendors such as Microsoft and IBM. An instance of this new toolkit was observed during a ransomware incident targeting US companies…
UnitedHealth Claims Data of 100 Million Siphoned in Change Healthcare Breach
UnitedHealth has acknowledged for the first time that over 100 million people’s personal details and healthcare data were stolen during the Change Healthcare ransomware assault, making it the largest healthcare data breach in recent years. During a congressional hearing…
Energy Sector Faces Heightened Supply Chain Risks Amid Growing Dependence on IT and Software Vendors
The energy industry is experiencing a sharp increase in supply chain risks, largely driven by its growing reliance on external vendors. According to a recent report, two-thirds of security breaches in this sector now originate from software and IT…
UnitedHealth Confirms 100M Affected in Record-Breaking Change Healthcare Hack
Several hundred million people’s personal information was compromised in a hack of UnitedHealth’s (UNH.N) tech unit Change in February, according to data published by the U.S. health department on its website. That makes it the largest healthcare data breach…
Microsoft: Healthcare Sector Sees 300% Surge in Ransomware Assaults
A Microsoft investigation published earlier this week revealed that ransomware attacks on the healthcare sector are rising and threatening lives. The report, which uses both internal corporate data and external data, shows a 300% spike in ransomware attacks on…
Think You’re Safe? Cyberattackers Are Exploiting Flaws in Record Time
There has been unprecedented exploitation by attackers of vulnerabilities in the software, Mandiant announced. According to the newly released report of the Mandiant cybersecurity firm, after an analysis of 138 exploits published in 2023, on average, in five days…
Massive Data Breach in Mexican Health Care Sector Exposes 5.3 Million Users’ Data
In a significant data breach, Cybernews researchers discovered a 500GB unprotected database from a Mexican health care company on August 26, 2024, exposing sensitive details of approximately 5.3 million people. Information in the leak included names, CURP identification numbers,…
Security Defenses Crippled by Embargo Ransomware
There is a new gang known as Embargo ransomware that specializes in ransomware-as-a-service (RaaS). According to a study by ESET researchers published Wednesday, the Embargo ransomware group is a relatively young and undeveloped ransomware gang. It uses a custom…
CISA Proposes New Security Measures to Protect U.S. Personal and Government Data
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has proposed a series of stringent security requirements to safeguard American personal data and sensitive government information from potential adversarial states. The initiative aims to prevent foreign entities from exploiting data…