Latest Cybersecurity News and Articles
04 April 2023
The threat actor known as Arid Viper has been observed using refreshed variants of its malware toolkit in its attacks targeting Palestinian entities since September 2022.
Symantec, which is tracking the group under its insect-themed moniker Mantis, said the adversary is "going to great lengths to maintain a persistent presence on targeted networks."
Also known by the names APT-C-23 and Desert
04 April 2023
Collaboration sits at the essence of SaaS applications. The word, or some form of it, appears in the top two headlines on Google Workspace’s homepage. It can be found six times on Microsoft 365’s homepage, three times on Box, and once on Workday. Visit nearly any SaaS site, and odds are ‘collaboration’ will appear as part of the app’s key selling point.
By sitting on the cloud, content within
04 April 2023
The Chief Digital and Artificial Intelligence Office (CDAO) Directorate for Digital Services (DDS), Craig Martell, unveiled the website last Thursday. It will help DoD organizations, vendors, and researchers understand how to conduct a bug bounty.
04 April 2023
The QNAP vulnerabilities affect the operating systems: QTS, QuTS hero, QuTScloud, and QVP (QVR Pro appliances). These operating system versions have already been updated.
04 April 2023
Britain’s newly created offensive hacking unit, the National Cyber Force, has said it is engaged daily in operations to disrupt terrorist groups, distributors of child sexual abuse material, and military opponents of the UK.
04 April 2023
A new ransomware group with two victims listed on its leak site has been observed making million-dollar ransom demands. The group, called Money Message, has listed an Asian airline, which has revenue close to $1 billion, as one of its victims. Adversaries have shared a screenshot of the accessed file system as proof of the breach.
04 April 2023
To strengthen their cybersecurity posture, companies must spend valuable resources on maintaining or updating systems, hiring and training staff, and implementing security software — resources and options that many don’t have readily available.
04 April 2023
Hackers are adding malicious functionality to WinRAR self-extracting archives that contain harmless decoy files, allowing them to plant backdoors without triggering the security agent on the target system.
04 April 2023
With a small payroll and tight staffing constraints, smaller businesses are unlikely to have a mature security posture that could otherwise deflect social engineering scams.
04 April 2023
Upon realizing that session resumption led to the inability to properly check revocation status, Cloudflare responded by first disabling session resumption for all mTLS connections. This blocked the vulnerability immediately.
04 April 2023
Google’s TAG shared details on zero-day and n-day vulnerabilities affecting Android and iOS devices that are under exploitation by highly-targeted spyware campaigns. It didn’t reveal the spyware vendors involved or identify the number of victims targeted in this campaign. Organizations are suggested to leverage the IOCs shared by Google and other security agencies to strengthen their security posture.
04 April 2023
A Chinese state-sponsored threat group has been linked to a unique malware, dubbed Mélofée, targeting Linux servers. The threat group’s infrastructure overlaps mostly with Winnti. Researchers observed another AlienReverse implant being used during the campaign.
04 April 2023
Microsoft has announced plans to automatically block embedded files with "dangerous extensions" in OneNote following reports that the note-taking service is being increasingly abused for malware delivery.
Up until now, users were shown a dialog warning them that opening such attachments could harm their computer and data, but it was possible to dismiss the prompt and open the files.
That's going
03 April 2023
The adversary behind the supply chain attack targeting 3CX deployed a second-stage implant specifically singling out a small number of cryptocurrency companies.
Russian cybersecurity firm Kaspersky, which has been internally tracking the versatile backdoor under the name Gopuram since 2020, said it observed an increase in the number of infections in March 2023 coinciding with the 3CX breach.
03 April 2023
By Dr. Ken Knapton, CIO Progrexion. Credit card fraud continues to be a significant concern for both consumers and businesses. Not only can it result in significant financial losses, but it can also damage the reputation and trust of companies affected by credit card fraud. In a Forbes Advisor poll, 33% of small business owners […]
The post Credit card fraud: Why should you care? appeared first on CyberTalk.
03 April 2023
With digitized systems, secure authentication has become a priority. Research found that insecure authentication is a primary cause of data breaches.
03 April 2023
Security leaders were surveyed on the use of personal devices for work-related tasks, balancing corporate security and employee privacy.
03 April 2023
John Clifton Davies, a 60-year-old con man from the United Kingdom who fled the country in 2015 before being sentenced to 12 years in prison for fraud, has enjoyed a successful life abroad swindling technology startups by pretending to be a billionaire investor. Davies' newest invention appears to be "CodesToYou," which purports to be a "full cycle software development company" based in the U.K.
03 April 2023
An update released to the “My services” dashboard on March 20 resulted in the data breach, Service NSW chief executive officer Greg Wells said in an email to affected customers shared with AAP on Monday.
03 April 2023
A recent report by Women in CyberSecurity
on the state of inclusion of women in cybersecurity shows 68% cite leadership as a source of exclusion.