Latest Cybersecurity News and Articles

---

Microsoft OneNote Starts Blocking Dangerous File Extensions

Just like other Office applications, OneNote has been abused for malware delivery, especially since OneNote documents allow attackers to attach files that would be executed with few warnings to the user.

---

Outsourcer Capita Claims to Have Contained "Cyber Incident"

Business process outsourcing giant Capita claimed today that a “cyber incident” it experienced on Friday has been largely contained, with services in the process of being restored.

---

Endpoint security: Challenges, solutions and best practices

By Anas Baig, product manager and cyber security expert with Securiti. Doing business in the public sphere leaves entities open to malicious attacks. A study conducted by the Ponemon Institute highlights how almost 70% of organizations have been affected by malicious attacks at least once. Many of those companies suffered more than one incident. Ransomware […] The post Endpoint security: Challenges, solutions and best practices appeared first on CyberTalk.

---

Lumen falls victim to 2 ransomware attacks

In a recent Securities and Exchange Commission filing, Lumen Technologies, Inc. reported it was the victim of two ransomware attacks.

---

Managing the risks of unstructured data growth

Much of the data in the cloud is unstructured and highly vulnerable to cyber threats. Unstructured data can include anything from emails and FedEx receipts to sensor data and social media feeds.

---

New Money Message Ransomware Demands Million-Dollar Ransoms

The new ransomware strain was first reported by a victim on the BleepingComputer forums on March 28, 2023, with Zscaler's ThreatLabz soon after sharing information on Twitter.

---

Bank of England Warns of Potential Cyberattacks on Financial System

The Bank of England has issued a stern warning to banks, insurers, and market infrastructure companies to take immediate steps to bolster their defenses against a potential major cyberattack.

---

Western Digital Hit by Network Security Breach Disrupting Critical Services

While Western Digital did not reveal the exact services that are impacted, the My Cloud status page shows that cloud, proxy, web, authentication, emails, and push notification services are down.

---

Chinese E-Commerce Giant Pinduoduo Allegedly Spys on Users

"E-commerce giant Pinduoduo has taken violations of privacy and data security to the next level," CNN reported, citing multiple cybersecurity experts from Asia, Europe, and the United States.

---

Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN Service

The most noteworthy capabilities of OpcJacker include keylogging, taking screenshots, stealing sensitive data from browsers, loading additional modules, and replacing cryptocurrency addresses in the clipboard for hijacking purposes.

---

German Police Raid DDoS-Friendly Host ‘FlyHosting’ – Krebs on Security

News of a raid on FlyHosting first surfaced Thursday in a Telegram chat channel that is frequented by people interested or involved in the DDoS-for-hire industry, where a user by the name Dstatcc broke the news to Fly Hosting customers.

---

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a "number of the company's systems." Following the discovery of the hack, Western Digital said it has initiated incident response efforts and enlisted

---

Fake Ransomware Gang Targets U.S. Organizations With Empty Data Leak Threats

Fake extortionists are piggybacking on data breaches and ransomware incidents, threatening U.S. companies with publishing or selling allegedly stolen data unless they get paid.

---

Italian Watchdog Bans OpenAI's ChatGPT Over Data Protection Concerns

The Italian data protection watchdog, Garante per la Protezione dei Dati Personali (aka Garante), has imposed a temporary ban of OpenAI's ChatGPT service in the country, citing data protection concerns. To that end, it has ordered the company to stop processing users' data with immediate effect, stating it intends to investigate the company over whether it's unlawfully processing such data in

---

"It's The Service Accounts, Stupid": Why Do PAM Deployments Take (almost) Forever To Complete

Privileged Access Management (PAM) solutions are regarded as the common practice to prevent identity threats to administrative accounts. In theory, the PAM concept makes absolute sense: place admin credentials in a vault, rotate their passwords, and closely monitor their sessions. However, the harsh reality is that the vast majority of PAM projects either become a years-long project, or even

---

Jefferson County Schools hit with ransomware attack

Out of an abundance of caution, all network systems have been taken down to investigate thoroughly. These networks will be reconnected once all traces of malware are gone.

---

UK Regulator Calls for HIV Data Protection Improvement

The UK’s Information Commissioner’s Office (ICO) has called for “serious improvements” to data protection processes for organizations handling information on HIV sufferers, after reprimanding an NHS body.

---

New Tactical Octopus Attack Campaign Targets US Entities with Malware Bundled in Tax-Themed Documents

As the tax deadline on April 15 approaches in the US, threat actors are ramping up tax-related phishing scams to US-based victims to infect systems with stealthy malware.

---

DISH slapped with multiple lawsuits after ransomware cyber attack

These class action lawsuits, filed across different states, allege that DISH "overstated" its operational efficiency while having a deficient cybersecurity and IT infrastructure.

---

TikTok Attorney: China Can’t Get U.S. Data Under Plan

Under intense scrutiny from Washington that could lead to a potential ban, the top attorney for TikTok and its Chinese parent company ByteDance defended the social media platform’s plan to safeguard U.S. user data from China.