Latest Cybersecurity News and Articles
06 April 2023
According to the new policy, starting in early 2024, Google Play users will have better control over their data since every store listing will display links in the "Data deletion" area, allowing them to ask for their accounts and data to be deleted.
06 April 2023
Just three days after Twitter released a portion of its source code online including its recommendation algorithm, a researcher found that attackers could manipulate the software to effectively silence specific accounts on the social media platform.
06 April 2023
A report from Kasperksy notes that phishers sell all types of phishing material and services to interested buyers, including ready-made kits, fake pages, subscriptions to tools, guides, and technical support.
06 April 2023
Two of the currently most threatening malware are Emotet and SocGholish. Android droppers usually come disguised as benign apps, available on third-party app stores or even on Google Play. MacOS malware is not common, but the threat can't be ignored.
06 April 2023
Attack chains mounted by ARCHIPELAGO involve the use of phishing emails containing malicious links that, when clicked by the recipients, redirect to fake login pages that are designed to harvest credentials.
06 April 2023
A coordinated international law enforcement operation has dismantled Genesis Market, an illegal online marketplace that specialized in the sale of stolen credentials associated with email, bank accounts, and social media platforms.
Coinciding with the infrastructure seizure, the major crackdown, which involved authorities from 17 countries, culminated in 119 arrests and 208 property searches in
06 April 2023
An experiment by a Forcepoint staffer does, to some extent, highlight how the code-suggesting unreliable chatbot, built by OpenAI and pushed by Microsoft, could be used to cut some corners in malware development or automate the process.
06 April 2023
Kaspersky attributed the 3CX supply chain attack to the North Korean Lazarus APT group, owing to the deployment of the Gopuram and AppleJeus backdoors used by the threat actor. Attackers deployed Gopuram on machines mostly belonging to cryptocurrency companies in Brazil, Germany, Italy, and France.
06 April 2023
The UK government continues to adjust its cyber response to the growing threat posed by nation-state adversaries, in line with its latest National Cyber Strategy (NCS), published in December 2022.
06 April 2023
The activity leverages SEO poisoning techniques to entice users searching for "WhatsApp web" to rogue domains hosting the malware, Palo Alto Networks Unit 42 said in a new report published today.
06 April 2023
Trustwave SpiderLabs laids bare a new malware, dubbed Rilide, that can steal cryptocurrency by abusing multiple Chromium-based browsers, such as Google Chrome, Opera, Microsoft Edge, and Brave. Experts recommend remaining vigilant when opening emails from unknown and untrusted sources.
05 April 2023
Google is enacting a new data deletion policy for Android apps that allow account creation to also offer users with a setting to delete their accounts in an attempt to provide more transparency and control over their data.
"For apps that enable app account creation, developers will soon need to provide an option to initiate account and data deletion from within the app and online," Bethel
05 April 2023
Researchers at Sysdig highlight that the new Proxyjacking attack, which is much like cryptojacking, is abusing the infamous Log4j vulnerability to gain initial access to victims’ systems. On a broader scale, researchers note that a modest compromise of 100 IPs can enable attackers to make a profit of nearly $1,000 per month.
05 April 2023
A new ransomware strain, named Rorschach, was unveiled by Check Point Research. The ransomware boasts an advanced level of customization and fast encryption, which sets it apart from other strains. Furthermore, an in-depth examination of Rorschach's source code indicates similarities with the Babuk ransomware family. Its attacks have been reported in Asia, Europe, and the Middle East.
05 April 2023
A security vulnerability in the Elementor Pro website builder plugin for WordPress is under active exploitation by a threat actor. An authenticated user can take advantage of this to take full control over a WordPress site having WooCommerce enabled. The bug in the plugin, roughly deployed on over 12 million sites, impacts versions 3.11.6 and earlier.
05 April 2023
EXECUTIVE SUMMARY: Small businesses are facing an increasing number of demands, and need innovative solutions to stay competitive in today’s fast-paced digital landscape. Technological advancements, like those in the field of artificial intelligence (AI), are providing small businesses with the tools that they need to tackle tough challenges. Artificial intelligence-based tools and technologies can streamline […]
The post Supercharge your small business with these 15 AI tools appeared first on CyberTalk.
05 April 2023
It has been more than a year since Apache released details on a critical vulnerability in Log4j, however threat actors are still exploiting it.
05 April 2023
It has been more than a year since Apache released details on a critical vulnerability in Log4j, however threat actors are still exploiting it.
05 April 2023
Western Digital announced that a third party had accessed some of its systems at the end of March and has implemented incident response efforts.
05 April 2023
A security researcher found a series of vulnerabilities with the Nexx brand of smart garage openers. He says he could remotely find garages to target, and then open them across the internet.