Latest Cybersecurity News and Articles

---

Florida Hospital Begins Breach Notification Post-Attack

Tallahassee Memorial HealthCare says its investigation into the February incident determined that an "unauthorized person" had gained access to its computer network and obtained certain files from its systems between January 26 and February 2.

---

STYX Marketplace emerged in Dark Web focused on Financial Fraud

The STYX marketplace was launched at the beginning of 2023. This discovery illustrates the post-pandemic menace of cyber-enabled financial crime and the threat it poses to financial institutions and their customers.

---

Spain's most dangerous and elusive hacker now in police custody

The hacker is considered to be responsible for multiple high-profile cyberattacks and for creating a search engine called Udyat (the eye of Horus) dedicated to selling stolen sensitive information in large numbers.

---

Notorious Genesis Market cybercrime forum seized in international law enforcement operation

The FBI-led effort known as “Operation Cookie Monster” took down a notorious cybercrime marketplace known for selling compromised credentials and biometric data for digital fraudsters to carry out attacks or commit identity theft.

---

Australia: TAFE data breach uncovered by SA Police

TAFE South Australia has revealed a data breach that was discovered when SA Police seized “devices containing electronic scanned copies of TAFE SA student identification forms”.

---

CISA honors Emergency Communications Month

CISA kicks off Emergency Communications Month to highlight the critical role emergency communications plays in keeping connected during a disaster.

---

Alcohol Recovery Startups Monument and Tempest Shared Patients' Private Data With Advertisers

In its disclosure, the companies confirmed their use of website trackers, which are small snippets of code that share with tech giants information about visitors to their websites and are often used for analytics and advertising.

---

CryptoClippy: New Clipper Malware Targeting Portuguese Cryptocurrency Users

Portuguese users are being targeted by a new malware codenamed CryptoClippy that's capable of stealing cryptocurrency as part of a malvertising campaign. The activity leverages SEO poisoning techniques to entice users searching for "WhatsApp web" to rogue domains hosting the malware, Palo Alto Networks Unit 42 said in a new report published today.  CryptoClippy, a C-based executable, is a type

---

Ukraine and the global stage: Terrorism, cyber espionage & TikTok

In Episode 15 of the Cybersecurity & Geopolitical Podcast from Security magazine, hosts Ian Thornton-Trump and Philip Ingram discuss current developments in the Russian invasion of Ukraine, geopolitical shifts in global intelligence, and app-based data collection.

---

Typhon Reborn V2 Features Enhanced Anti-Analysis and Evasion Capabilities

Typhon Reborn V2 includes significant updates to its codebase and improved capabilities. The new version features additional anti-analysis and anti-virtual machine (VM) capabilities to evade detection and make analysis more difficult.

---

Trace3 acquires Set Solutions to boost cybersecurity capabilities

Trace3’s acquisition of Set Solutions is a continuation of the company’s strategic expansion plan. The investment allows the combined companies to deepen cybersecurity capabilities to drive success for commercial and enterprise clients.

---

Malicious Campaign Downs npm Registry With Hundreds of Thousands of Spam Packages

Security experts have urged the npm registry to deploy anti-bot technology after revealing that the open-source repository has suffered intermittent denial of service (DoS) outages over the past month.

---

Hackers Using Self-Extracting Archives Exploit for Stealthy Backdoor Attacks

An unknown threat actor used a malicious self-extracting archive (SFX) file in an attempt to establish persistent backdoor access to a victim's environment, new findings from CrowdStrike show. SFX files are capable of extracting the data contained within them without the need for dedicated software to display the file contents. It achieves this by including a decompressor stub, a piece of code

---

Push Security raises $15M to help SaaS users lower their online vulnerability

The Series A funding is being led by GV (Google Ventures), with participation from Decibel and several angels, including Dug Song, former CEO at Duo Security, and Tray.io CEO Rich Waldron.

---

Google TAG Warns of North Korean-linked ARCHIPELAGO Cyberattacks

A North Korean government-backed threat actor has been linked to attacks targeting government and military personnel, think tanks, policy makers, academics, and researchers in South Korea and the U.S. Google's Threat Analysis Group (TAG) is tracking the cluster under the name ARCHIPELAGO, which it said is a subset of another threat group tracked by Mandiant under the name APT43. The tech giant

---

New Proxyjacking Attack Hijacks Systems to Collect Profits via Proxyware Services

Instead of the typical cryptojacking or backdoor payload, the attacker installed an agent that turned the compromised account into a proxy server, allowing the attacker to sell the IP to a proxyware service and collect the profit.

---

International sting takes down online marketplace of stolen identities

Operation led by FBI and Dutch police with involvement of UK National Crime Agency takes Genesis Market offlineA criminal online marketplace selling millions of stolen identities for as little as 56p has been taken down in an international crackdown.The sting, led by the FBI and Dutch police with the involvement of law enforcement agencies across 18 countries, including the UK’s National Crime Agency (NCA), took Genesis Market offline on Tuesday evening. Continue reading...

---

Protect Your Company: Ransomware Prevention Made Easy

Every year hundreds of millions of malware attacks occur worldwide, and every year businesses deal with the impact of viruses, worms, keyloggers, and ransomware. Malware is a pernicious threat and the biggest driver for businesses to look for cybersecurity solutions.  Naturally, businesses want to find products that will stop malware in its tracks, and so they search for solutions to do that.

---

How Strategic Investors Can Help Cybersecurity Startups

Cybersecurity startups face rising pressures during this economic uncertainty, but strategic investors can help them succeed in providing tech that defends against cyberattacks.

---

Database Misconfiguration Leads to Leakage of 600,000 Records From Online Marketplace

Security researcher Jeremiah Fowler found 600,000 “customer support attachments” related to website Z2U, which included images of individuals holding credit cards, passports and other ID documents.