Latest Cybersecurity News and Articles
29 March 2023
The company did not reveal the spyware vendors involved but said one of the campaigns used a link directing targets to a landing page identical to one Google revealed in November 2022 from Spanish spyware firm Variston IT.
29 March 2023
Euler Finance was hacked on March 13, 2023, and around $197 million worth of cryptocurrency was stolen, including $135.8 million stETH, $33.8 million USDC, $18.5 million WBTC, and $8.7 million DAI.
29 March 2023
Tracked as CVE-2022-47986, the vulnerability makes it possible for unauthenticated threat actors to remotely execute malicious code by sending specially crafted calls to an outdated programming interface.
29 March 2023
An unknown Chinese state-sponsored hacking group has been linked to a novel piece of malware aimed at Linux servers.
French cybersecurity firm ExaTrack, which found three samples of the previously documented malicious software that date back to early 2022, dubbed it Mélofée.
One of the artifacts is designed to drop a kernel-mode rootkit that's based on an open source project referred to as
29 March 2023
The protocol is good for cybercriminals in that it lets attackers cut back on phishing webpage hosting costs and its distributed nature makes it near impossible to delete files.
29 March 2023
Proofpoint analysts uncovered variants of the IcedID banking Trojan—Lite, and Forked—that focus on additional payload and bot delivery, respectively. According to experts, the initial developers of Emotet and IcedID operators have worked together on the Lite version. Meanwhile, the new threat group TA581 was observed using the Forked version. All in all, at least three threat actors exploited the new variants of IcedID.
29 March 2023
Successful digital skimming attacks are often the result of misconfigurations or lack of security controls within a merchant’s environment, which threat actors exploit to deploy the malicious skimming code.
29 March 2023
The emergence of smart mobility services and applications has led to a sharp increase in the use of APIs in the automotive industry. However, this increased reliance on APIs has also made them one of the most common attack vectors. According to Gartner, APIs account for 90% of the web application attack surface areas.
With no surprise, similar trends are emerging also in the smart mobility
29 March 2023
Malware analysis is an essential part of security researcher's work. But working with malicious samples can be dangerous — it requires specialized tools to record their activity, and a secure environment to prevent unintended damage.
However, manual lab setup and configuration can prove to be a laborious and time-consuming process.
In this article, we'll look at 4 ways to create a reverse
29 March 2023
The company exposed credentials to the Salesforce Marketing Cloud, a provider of digital marketing automation and analytics software and services. Cybernews has reached out to the car manufacturer, and the dataset has been secured.
29 March 2023
Threat actors target OT and IoT devices because they are the most difficult to patch. Researchers also said botnets have expanded their capabilities, targeting internet of things (IoT) devices to conduct lateral movement in enterprise networks.
29 March 2023
North Dakota’s EduTech division will develop examples of cybersecurity and computer science plans that administrators and teachers can use to assist schools in developing their plans.
29 March 2023
Trojanized Tor installations are typically promoted as "security-strengthened" versions of the official vendor, Tor Project, or pushed to users in countries where Tor is prohibited, making it harder to download the official version.
29 March 2023
APT43 has shifted its targets, and the malware it uses, in campaigns over the years in response to the demands of the North Korean government and the cyberespionage activities it requires of the group, according to Mandiant.
29 March 2023
Trojanized installers for the TOR anonymity browser are being used to target users in Russia and Eastern Europe with clipper malware designed to siphon cryptocurrencies since September 2022.
"Clipboard injectors [...] can be silent for years, show no network activity or any other signs of presence until the disastrous day when they replace a crypto wallet address," Vitaly Kamluk, director of
29 March 2023
The first vendor to acknowledge the impact of the WiFi protocol flaw is Cisco, admitting that the attacks outlined in the paper may be successful against Cisco Wireless Access Point products and Cisco Meraki products with wireless capabilities.
29 March 2023
While Crown Resorts confirmed that it is being extorted by Clop, who claims to have stolen data from its networks, it says there is no evidence of the data breach impacting customers.
29 March 2023
A new North Korean nation-state cyber operator has been attributed to a series of campaigns orchestrated to gather strategic intelligence that aligns with Pyongyang's geopolitical interests since 2018.
Google-owned Mandiant, which is tracking the activity cluster under the moniker APT43, said the group's motives are both espionage- and financially-motivated, leveraging techniques like credential
28 March 2023
EXECUTIVE SUMMARY: Artificial intelligence is rapidly altering how we live and how we work. Its impact on the job market is no exception. Survey results released by job search website ZipRecruiter show that 62% of job seekers are concerned that artificial intelligence could not only affect jobs, but derail careers. A new U.S. White House […]
The post How AI is changing the job market: Who’s most and least at-risk appeared first on CyberTalk.
28 March 2023
BetterHelp is facing at least three proposed class action lawsuits after earlier this month settling allegations with the FTC that it violated users' privacy by sharing identifying information with social media platforms including Facebook.