Latest Cybersecurity News and Articles
31 March 2023
It appears that domain registrars and certificate-issuing authorities are becoming less effective at preventing fraudsters from obtaining and using legitimate certificates to enhance their phishing success rates.
31 March 2023
The data breach at Nebu has affected Nederlandse Spoorwegen (NS), VodafoneZiggo, ArboNed, Heineken, International Film Festival Rotterdam, the Dutch Golf Federation, CZ (insurance firm), Trevvel, and the Dutch Rental Commission (Huurcommissie).
31 March 2023
The Cyber Police of Ukraine, in collaboration with law enforcement officials from Czechia, has arrested several members of a cybercriminal gang that set up phishing sites to target European users.
Two of the apprehended affiliates are believed to be organizers, with 10 others detained in other territories across the European Union.
The suspects are alleged to have created more than 100 phishing
31 March 2023
The San Jose, California-based networking giant said its proposed buy of Lightspin will allow clients to identify and address key cloud security risks without the hassle of extensive configuration requirements.
31 March 2023
Organizations rely on Incident response to ensure they are immediately aware of security incidents, allowing for quick action to minimize damage. They also aim to avoid follow on attacks or future related incidents.
The SANS Institute provides research and education on information security. In the upcoming webinar, we’ll outline, in detail, six components of a SANS incident response plan,
31 March 2023
Almost a month after attending a concert at Cornell University featuring the Beach Bunny band on January 28, several Ithaca College students’ credit and debit card information was breached and varying amounts of money were stolen.
31 March 2023
DataDome has raised a total of $81 million in VC funding since launching in 2015 with software to help businesses deal with bots and online fraud activity. The company said the new funding would be used on market expansion and R&D activities.
31 March 2023
The flaws in question were abused as part of several exploit chains in two separate highly-targeted campaigns targeting Android and iOS users, as Google's Threat Analysis Group (TAG) recently revealed.
31 March 2023
The hackers said they were able to enter the colonel’s military accounts and found information about his subordinates, the movement of troops, and documents related to Russian military equipment.
31 March 2023
Enterprise communications software maker 3CX on Thursday confirmed that multiple versions of its desktop app for Windows and macOS are affected by a supply chain attack.
The version numbers include 18.12.407 and 18.12.416 for Windows and 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 for macOS.
The company said it's engaging the services of Google-owned Mandiant to review the incident. In the
31 March 2023
An APT group known in the security industry as Winter Vivern has been exploiting a vulnerability in the Zimbra Collaboration software to gain access to mailboxes from government agencies in several European countries.
31 March 2023
According to a guidance document published earlier today, applicants seeking approval for new medical devices must submit a plan designed to “monitor, identify and address” possible cybersecurity issues associated with them.
31 March 2023
Researchers from Orca Security discovered the cross-site scripting (XSS) flaw — which they dubbed Super FabriXss — in December and reported it to Microsoft, which issued a fix for it in March's round of Patch Tuesday updates.
31 March 2023
Votiro is revolutionizing file security and safety by expanding its disarming with enhanced data detection and analytics capabilities and making them easily accessible as a browser- and cloud-based services.
31 March 2023
The vulnerabilities include remote code execution, cross-site request forgery (CSRF), authentication bypass, cross-site scripting (XSS), command injection, backdoor access, file disclosure, and session hijacking issues.
30 March 2023
In this interview, CyberTalk speaks with Deloitte’s U.S. Cyber & Strategic Risk Leader, Deborah (Deb) Golden. We’re honored and thrilled to be able to highlight her during Women’s History Month 2023! Let’s dive in! With more than 27 years in the industry, Deb currently leads one of Deloitte’s largest growth and business transformation offering portfolios […]
The post Leading with a growth mindset through grit, resilience and insatiable curiosity appeared first on CyberTalk.
30 March 2023
EXECUTIVE SUMMARY: When it comes to digital transformations, artificial intelligence and machine learning capabilities present tremendous opportunities. At the same time, they also expand the threat surface that CISOs and cyber risk professionals have to govern. To successfully navigate this new landscape, organizations need to adopt a holistic approach to risk management. The reality is […]
The post Why red team exercises for AI should be on CISO radars appeared first on CyberTalk.
30 March 2023
Are you a crypto user addicted to Tor? Tor browser users across the world are under attack with trojanized versions of Tor browser installers, especially those in Russia and nearby regions. These infected browsers were being promoted as "security-strengthened" versions of the browser. Kaspersky warned against the most common mistake - downloading and running Tor from a third-party store.
30 March 2023
A new phishing campaign has surfaced to drop Remcos RAT and Formbook malware through DBatLoader malware loader, revealed Zscaler researchers. The campaign is aimed at compromising systems in Europe. Actors also leverage a multi-layered obfuscated HTML file and OneNote attachments to propagate the DBatLoader payload.
30 March 2023
AI allows you to craft very believable ‘spear-phishing’ emails and other written communication with very little effort, especially compared to what you have to do before.