Sophos security researchers have identified a new malware, dubbed EDRKillShifter, used by the RansomHub ransomware group to disable Endpoint Detection and Response (EDR) systems in attacks leveraging Bring Your Own Vulnerable Driver (BYOVD) techniques. This method involves deploying a…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Here’s What Businesses Can Learn From a $2 Million Ransomware Attack SEC Settlement
Business leaders and security teams can learn a lot from the recent $2.1 million settlement reached between the Securities and Exchange Commission and R.R. Donnelly & Sons Co. regarding a ransomware assault. The settlement brought RRD’s negligence to light…
Zero-Trust Security: The Critical Role of Trust And Human Integrity
Zero-trust security, a framework built on the principle of “never trust, always verify,” has transformed how organisations protect their data. However, as vital as the technical safeguards in this system are, there’s an often-overlooked aspect: the human element. The…
The Rise of Manual Techniques in Ransomware Attacks: A Growing Threat
A recent report by CrowdStrike observes on a disturbing trend: the increasing use of manual techniques in ransomware attacks. This shift towards hands-on-keyboard activities is not only making these attacks more sophisticated but also more challenging to detect and mitigate. The…
Massive Data Breach Exposes Social Security Numbers of 2.9 Billion People
A significant data breach has reportedly compromised the personal information of 2.9 billion people, potentially affecting the majority of Americans. A hacking group known as USDoD claims to have stolen this data, which includes highly sensitive information such as…
Major Data Breach at FlightAware Exposes Pilots and Users’ Information
A popular flight tracking website accidentally exposed names, addresses, aircraft owned, pilot status, and tracked flights, as well as user data. There was a surprise in the inbox of many users of FlightAware, a popular flight tracking application, on…
The Rise of Malvertising: How Scammers Target Google Products with Malicious Search Ads
Cybersecurity keeps evolving, and so do threats. One such threat is malvertising, it exploits the tools made for enhancing our digital threats. A recent campaign has surfaced, targeting Google products through malicious search ads, displaying the persistence and sophistication of…
Russian Disinformation Network Struggles to Survive Crackdown
The Russian disinformation network, known as Doppelgänger, is facing difficulties as it attempts to secure its operations in response to increased efforts to shut it down. According to a recent report by the Bavarian State Office for the Protection…
Pro-Palestine Outfit Takes Responsibility for Hacking Donald Trump-Elon Musk Interview
During a conversation between billionaire Elon Musk and Republican presidential candidate Donald Trump on Musk’s social media platform X, technical issues occurred that Musk claimed were caused by a DDoS attack. The discussion was significant since it was Trump’s…
Ransomware Attack on the Washington Times Leads to a Dark Web Data Auction
In a countdown clock that showed that the auction would begin in seven days, the Rhysida cartel promoted an online auction that promised to sell Washington Times’ unique data. The auction was set to start within seven days of…
Navigating AI and GenAI: Balancing Opportunities, Risks, and Organizational Readiness
The rapid integration of AI and GenAI technologies within organizations has created a complex landscape, filled with both promising opportunities and significant challenges. While the potential benefits of these technologies are evident, many companies find themselves struggling with AI…
National Public Data Breach Exposes Millions: Threat of Identity Theft Looms
Data breaches continue to be a persistent issue without a simple solution, as evidenced by the recent breach of the background-check service National Public Data. This incident highlights the escalating dangers and complexity of such breaches. After months of…
Cyber Attack Disrupts Housing Services Across Greater Manchester
A scathing cyber attack has disrupted housing services in three Greater Manchester boroughs, leaving thousands of residents at risk of a phishing scam. The breach, which affected the software company Locata, has caused the temporary closure of housing websites for…
Should Americans Share The Social Security Number? Experts Explain the Pros and Cons
The initial Social Security numbers were most likely issued in late 1936, and they were intended to be used solely by the US federal government to manage retirement and disability insurance payouts. However, in the 1960s, the use of…
The Hidden Threat: Vulnerable App on Google Pixel Devices Puts Millions at Risk
A flaw was discovered in Google Pixel devices, raising concerns among users and experts alike. This blog delves into the details of this vulnerability, its implications, and the steps being taken to mitigate the risk. The Discovery A pre-installed app…
Paris 2024 Olympics Faced Over 140 Cyberattacks, No Disruptions Reported
During the Paris 2024 Olympics, French authorities reported over 140 cyberattacks, but none of these incidents disrupted the sporting events. The French government’s cybersecurity agency, Anssi, maintained a high state of alert throughout the games, anticipating potential threats to…
Vendor Reliance and M&A Surge Contribute to Heightened Ransomware Threat
In 2024, threat actors are likely to evolve tactics to exploit the consolidation of businesses and technologies. The mid-year 2024 cyber risk report released by Resilience Group indicates that mergers and acquisitions (M&As) are becoming more popular as well…
Critical Security Flaw Discovered in Ivanti Virtual Traffic Manager
Ivanti, a leading company in network and security solutions, has issued urgent security updates to address a critical vulnerability in its Virtual Traffic Manager (vTM). The flaw, identified as CVE-2024-7593, carries an alarming severity with a CVSS score of…
Ukraine Faces New Phishing Campaign Targeting Government Computers, Warns CERT
The CERT-UA (Computer Emergency Response Team of Ukraine) has issued a warning about a sophisticated phishing campaign targeting Ukrainian government computers. This campaign, which began in July 2024, has already compromised over 100 government systems, posing a significant threat to…
Massive Data Leak Exposes Sensitive Information for Millions
A significant data breach has compromised the personal information of millions of individuals across the United States, United Kingdom, and Canada. The leaked data, obtained from a company called National Public Data, includes highly sensitive information such as names,…