Latest Cybersecurity News and Articles


Operation Tainted Love: New Cyberespionage Campaign by Chinese

27 March 2023
A Chinese cyber-espionage campaign, named Operation Tainted Love—associated with Operation Soft Cell—has been found hitting telecommunications providers in the Middle East since Q1 2023. Operation Soft Cell relies heavily on a custom credential theft malware, mim221.

REF2924 Brings a New Weapon NAPLISTENER to the Table

27 March 2023
The REF2924 threat cluster was observed dropping a previously-unseen malware, dubbed NAPLISTENER, on entities in Southeast and South Asia. The malware evades network-based forms of detection. Actors target Microsoft Exchange Servers exposed to the internet to deploy several backdoors, including SIESTAGRAPH, DOORME, and ShadowPad.

J.P. Morgan to utulize biometric-based payments

27 March 2023
A new biometric payment system will be rolled out by J.P. Morgan including palm and face identification for payment authentication in-store. 

AI and the future of work: Strategies for boldly leading through uncertainty

27 March 2023
EXECUTIVE SUMMARY Replacement by robots? The idea of robots dominating the world is a common sci-fi trope that elicits an almost involuntary eye-roll from most of us. However, as technology continues to advance at lightning speed, the prospect of being replaced by robots is no longer so distant. For some employees, it’s becoming an increasingly […] The post AI and the future of work: Strategies for boldly leading through uncertainty appeared first on CyberTalk.

Pwn2Own Vancouver 2023 awarded $1,035,000 and a Tesla for 27 0-days

27 March 2023
On the third day, contestants were awarded $185,000 after demonstrating 5 zero-day exploits targeting the Ubuntu Desktop, Windows 11, and the VMware Workstation software.

Twitter says source code was leaked on GitHub, now it’s trying to find the culprit

27 March 2023
Parts of Twitter’s source code were recently leaked online via GitHub, the New York Times reports, but were taken down after the social media platform filed a DMCA request.

51% of users admit to resetting forgotten passwords once a month

27 March 2023
Research highlights current shifts in identity management including passwordless authentication and personally identifiable information ownership.

New BEC Attack Tactics Enable Fake Asset Purchases

27 March 2023
Instead of sending fake invoices or money transfer requests, attackers attempt to ‘purchase’ high-value goods such as construction materials, agricultural supplies, IT hardware, and solar energy products.

Report shows top transport cyber threats in EU

27 March 2023
A new report by the European Union Agency for Cybersecurity reveals ransomware attacks are the most prominent threat facing the transport sector.

20-Year-Old BreachForums Founder Faces Up to 5 Years in Prison

27 March 2023
Conor Brian Fitzpatrick, the 20-year-old founder and the administrator of the now-defunct BreachForums has been formally charged in the U.S. with conspiracy to commit access device fraud. If proven guilty, Fitzpatrick, who went by the online moniker "pompompurin," faces a maximum penalty of up to five years in prison. He was arrested on March 15, 2023. "Cybercrime victimizes and steals financial

Bitter APT Targets Chinese Nuclear Energy Organizations With Spoofed Emails

27 March 2023
In the new campaign found by Intezer, Bitter sends emails pretending to be from the Embassy of Kyrgyzstan in Beijing to various Chinese nuclear energy companies and academics related to that field.

How artificial intelligence is revolutionizing cyber security

27 March 2023
EXECUTIVE SUMMARY: In recent years, artificial intelligence (AI) has become one of the most sure-fire and strategic tools available for cyber security professionals. Due to the increasing sophistication of cyber attacks, cyber security experts have broadly turned to AI in order to enhance abilities to detect and prevent cyber threats. As it stands, nearly 50% […] The post How artificial intelligence is revolutionizing cyber security appeared first on CyberTalk.

The FBI's BreachForums bust is causing 'chaos in the cybercrime underground'

27 March 2023
On March 16, 2022, about a month after the FBI took down a popular online forum for buying and selling stolen data known as RaidForums, another criminal marketplace quickly sprung up to take its place.

Inaudible Ultrasound Attack can Stealthily Control Your Phone, Smart Speaker

27 March 2023
American university researchers have developed a novel attack called "Near-Ultrasound Inaudible Trojan" (NUIT) that can launch silent attacks against devices powered by voice assistants, like smartphones, smart speakers, and other IoTs.

Susan Ferensic named WMDD Assistant Director at FBI

27 March 2023
Susan Ferensic has been named as the assistant director of the Weapons of Mass Destruction Directorate (WMDD) at FBI Headquarters.

CISA Ships ‘Untitled Goose Tool’ to Hunt for Microsoft Azure Cloud Infections

27 March 2023
Azure network defenders can use the tool to export and review sign-in audit logs and activity alerts from a range of Azure and Microsoft Defender environments to pinpoint signs of suspicious activity.

Hackers Attack Wisconsin Court System Computer Network

27 March 2023
The attack has not resulted in the breach of any data and court operations are continuing as usual statewide, state Supreme Court Chief Justice Annette Ziegler said in a statement.

Cinoshi: More than a Sophisticated Malware-as-a-Service

27 March 2023
Cyble Research and Intelligence Labs uncovered a new Malware-as-a-Service (MaaS) platform called Cinoshi. Its arsenal includes a stealer, botnet, clipper, and cryptominer. The stealer collects cards, cookies, and credentials from popular browsers including Chromium, Edge, and Gecko. In addition to paid services, the platform also offers a web panel to control malicious activities for free.

UK: Hospital trust dealing with aftermath of cyberattack

27 March 2023
A hospital was hit by a cyberattack - but the full extent of the breach is still unknown. Walsall Healthcare NHS Trust has urged people to "remain vigilant around any suspicious activity" in the wake of the incident.

Ransomware attack disrupts Tennessee city

27 March 2023
"The City and its Information Systems Department (IS) are working with law enforcement to investigate as well as technical specialists experienced in cyber recovery services to restore services as quickly as possible," said city officials.