Latest Cybersecurity News and Articles
31 March 2023
Pål (Paul) has more than 30 years of experience from the IT industry and has worked with both domestic and international clients on a local and global scale. Pål has a very broad competence base that covers everything from general security, to datacenter security, to cloud security services and development. For the past 10 years, […]
The post Artificial intelligence: A double-edged sword for technology & ethics appeared first on CyberTalk.
31 March 2023
U.S. healthcare giant Blue Shield of California confirmed more than 63,000 customers may have been affected by a recent ransomware attack.
31 March 2023
It has been a year since CIRCIA was signed into law by President Biden and security leaders are sharing their thoughts on the legislation.
31 March 2023
Authorities in Germany this week seized Internet servers that powered FlyHosting, a dark web service that catered to cybercriminals operating DDoS-for-hire services. Fly Hosting first advertised on cybercrime forums in November 2022, saying it was a Germany-based hosting firm that was open for business to anyone looking for a reliable place to host malware, botnet controllers, or DDoS-for-hire infrastructure.
31 March 2023
In a data breach notification letter sent yesterday to impacted individuals, the Canadian finance giant informs that hackers breached its systems in early December 2022 but did not detect the breach until February 13th, 2023.
31 March 2023
An Azure Active Directory (AAD) misconfiguration by Microsoft in one of its own cloud-hosted applications could have allowed miscreants to subvert the IT giant's Bing search engine – even changing search results.
31 March 2023
Acoalition of 11 countries committed on Thursday to counter the misuse of commercial spyware, a step toward building an international agreement to curb technology deployed by authoritarian countries to spy on dissidents and journalists.
31 March 2023
The leaked documents, referred to as The Vulkan Files, were obtained by a whistleblower and analyzed by Mandiant in collaboration with several major media outlets in Europe and the United States.
31 March 2023
Soon after Latitude Financial revealed it suffered a cyberattack, DXC Technology quietly published a note on its website stating its global network and customer support networks were not compromised.
31 March 2023
While hack-for-hire groups may advertise, they aren’t usually helping clients get a cryptocurrency payout. And you can’t sign up for a subscription service. It’s more than likely that hack-for-hire clients have a specific target and goal in mind.
31 March 2023
EXECUTIVE SUMMARY: On Wednesday, cyber security threat intelligence analysts uncovered a supply chain attack targeting the communications software provider 3CX and the company’s customers. 3CX is a VoIP IPBX software development firm whose 3CX phone system is used by more than 600,000 enterprises around the world, with 12 million daily users. The company’s client list […]
The post Malicious supply chain attack hits 3CX Desktop App appeared first on CyberTalk.
31 March 2023
Officials noted that the Washington County Sheriff's Office had its app, finance system, and jail networks disrupted by a ransomware attack between February 21 and early March, with the attack claimed by LockBit on February 27.
31 March 2023
Almost a year after the crisis began, a senior White House official told reporters today that the United States plans to provide $25 million in cybersecurity assistance to help Costa Rica strengthen its digital infrastructure.
31 March 2023
In early 2020, Formbook was rebranded as Xloader, and the operators behind it moved to a malware-as-a-service (MaaS) business model, renting C2 infrastructure to customers.
31 March 2023
The advanced persistent threat (APT) actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of an ongoing cyber espionage campaign.
"TA473 since at least February 2023 has continuously leveraged an unpatched Zimbra vulnerability in publicly facing webmail portals that allows them to gain access to the email mailboxes of government entities in Europe," Proofpoint
31 March 2023
New studies by NCC Group and Barracuda Networks show threat actors are increasing ransomware exploits, with consumer goods and services receiving the brunt of attacks and a large percentage of victims being hit multiple times.
31 March 2023
To defend against RedGolf attacks, organizations are recommended to apply patches regularly, monitor access to external facing network devices, track and block identified C2 infrastructure, and configure IDS/IPS to monitor for malware detections.
31 March 2023
The crime group created over 100 fake "phishing" sites targeting users in France, Spain, Poland, the Czech Republic, Portugal, and other European countries, enticing them with products below market prices.
31 March 2023
Exposed personal information, the company says, includes names, addresses, phone numbers, email addresses, birth dates, driver’s license numbers, Social Security numbers, and employment positions.
31 March 2023
An executive order was signed by President Biden prohibiting the use of commercial spyware that pose risks to national security or human rights.