Ransomware operations are experiencing a decline in profitability due to various factors such as increased cyber resilience of organizations, the availability of decryptors, and more frequent law enforcement actions. This article has been indexed from Cyware News – Latest Cyber…
Tag: Cyware News – Latest Cyber News
Scattered Spider Group a Unique Challenge for Cyber Cops, FBI Leader Says
Identified by analysts in 2022, the hackers use social engineering to lure users into giving up their login credentials or one-time password codes to bypass multifactor authentication. This article has been indexed from Cyware News – Latest Cyber News Read…
Hackers Exploit LiteSpeed Cache Flaw to Create WordPress Admins
WPScan observed in April increased exploitation activity against WordPress sites with versions of the plugin older than 5.7.0.1, which are vulnerable to a high-severity (8.8) unauthenticated cross-site scripting flaw tracked as CVE-2023-40000. This article has been indexed from Cyware News…
Over 50,000 Tinyproxy Servers Vulnerable to Critical RCE Flaw
A critical remote code execution (RCE) flaw, CVE-2023-49606, was found affecting nearly 52,000 Tinyproxy servers. This vulnerability was disclosed by Cisco Talos in December 2023, impacting versions 1.11.1 and 1.10.0 of Tinyproxy. This article has been indexed from Cyware News…
Law Enforcement Agencies Identified LockBit Ransomware Admin and Sanctioned Him
The FBI, UK National Crime Agency, and Europol have unmasked the identity of the admin of the LockBit ransomware operation, aka ‘LockBitSupp’ and ‘putinkrab’, and issued sanctions against him. This article has been indexed from Cyware News – Latest Cyber…
AT&T Splits Cybersecurity Services Business, Launches LevelBlue
AT&T has split its cybersecurity services business to form a new company called LevelBlue. It includes AT&T’s managed security services business, cybersecurity consulting business, and assets from the acquisition of AlienVault in 2018. This article has been indexed from Cyware…
Germany Recalls Ambassador to Russia Over Cyberattacks
Germany has recalled its ambassador to Russia in response to alleged Moscow-backed cyberattacks targeting various sectors in Germany, including defense, aerospace, and IT companies, as well as the German Social Democratic Party. This article has been indexed from Cyware News…
Report: Only 45% of Organizations Use MFA to Protect Against Fraud
A report by Ping Identity highlighted the pressing need for enhanced identity protection strategies, as 97% of organizations struggle with identity verification, and 48% lack confidence in defending against AI-related attacks. This article has been indexed from Cyware News –…
White House in Talks With Industry to Build Legal Framework for Software Liability
The White House is engaging with the tech industry to establish a legal framework for software liability as part of a broader cybersecurity strategy, aiming to incentivize software developers to create products without exploitable security flaws. This article has been…
DBIR: Supply Chain Breaches up 68% Year Over Year
According to Verizon’s latest Data Breach Investigations Report (DBIR), supply chain breaches increased by 68% year-over-year, primarily due to software vulnerabilities exploited in ransomware and extortion attacks. This article has been indexed from Cyware News – Latest Cyber News Read…
Synopsys to Sell its Software Integrity Business to Clearlake Capital and Francisco Partners
After the transaction, the business will operate independently as an application security testing software provider, with the current management team expected to lead the new entity. This article has been indexed from Cyware News – Latest Cyber News Read the…
Dangerous Scammers From the Yahoo Boys Group Operate Openly on Social Media
The Yahoo Boys, a group of scammers primarily based in West Africa, openly operate on various social media platforms like Facebook, WhatsApp, and Telegram, engaging in fraudulent activities that range from romance fraud to business email compromise. This article has…
US Sets Sights on Partnerships to Counter Cyberthreats, Secure AI in New Global Cyber Strategy
The new strategy of the U.S. government aims to defend against cyberattacks on critical infrastructure, prevent surveillance misuses, and promote digital solidarity among global partners. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Krebs, Luber Added to Cyber Safety Review Board
The Cyber Safety Review Board (CSRB) has added four new members, including Chris Krebs, former Director of the CISA, and David Luber, head of the NSA’s Cybersecurity Directorate. This article has been indexed from Cyware News – Latest Cyber News…
Global Fraud Prevention Leader BioCatch Valued at $1.3bn in Permira Takeover
The acquisition will involve Permira buying out shares primarily from Bain Capital Tech Opportunities and Maverick Ventures, while existing shareholders Sapphire Ventures and Macquarie Capital will also increase their stakes in BioCatch. This article has been indexed from Cyware News…
Ransomware Activity is Back on Track Despite Law Enforcement Efforts
According to Corvus Insurance, ransomware activity surged in the first quarter of 2024, marking a 21% increase over the same period in 2023, despite disruptions to major ransomware groups like LockBit and ALPHV/BlackCat. This article has been indexed from Cyware…
Novel TunnelVision Attack Against Impacts Virtually All VPN Apps Through DHCP Server Manipulation
The TunnelVision attack is a newly discovered method that can compromise the security of most Virtual Private Network (VPN) applications by diverting traffic away from the encrypted tunnel, exposing it to potential interception. This article has been indexed from Cyware…
Mastodon Delays Firm Fix to Solve Link Preview DDoS Issue
Mastodon delayed a firm fix for link preview DDoS issues, pushing it back to version 4.4.0 from the expected 4.3.0 release. The issue arises from the decentralized nature of Mastodon, where link previews generate excessive traffic on host servers. This…
WordPress Plugin Exploit Impacts Over 90,000 Websites
The vulnerability, which has a CVSS score of 9.8, is a SQL injection flaw that allows attackers to execute unauthorized SQL queries and potentially compromise the integrity and confidentiality of the WordPress database. This article has been indexed from Cyware…
Citrix Addresses High-Severity NetScaler Servers Flaw
Citrix appears to have quietly addressed a vulnerability in its NetScaler ADC and Gateway appliances that gave remote, unauthenticated attackers a way to obtain potentially sensitive information from the memory of affected systems. This article has been indexed from Cyware…