Latest Cybersecurity News and Articles

---

AWS Introduces Global Condition Context Keys to Improve EC2 Security

The new keys allow the creation of policies that can limit the use of role credentials to only the location from where they originated, reducing the risk of credential exfiltration.

---

Black Basta, Killnet, LockBit groups targeting healthcare in force

Threat groups behind Killnet and Black Basta ransomware are targeting the healthcare sector and other critical infrastructure industries in force, according to Microsoft and the HHS Cybersecurity Coordination Center (HC3).

---

From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022

As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple. While this figure represents a decrease from the year before, when a staggering 81 zero-days were weaponized, it still represents a significant uptick in recent years of threat actors leveraging unknown security flaws to their advantage. The 

---

Google Cloud joins FS-ISAC’s critical providers program to share threat intel

The Financial Services Information Sharing and Analysis Center (FS-ISAC) said Google Cloud joined its critical providers program, as part of a larger industry effort to bolster supply chain security in the financial services sector.

---

Google flags apps made by popular Chinese e-commerce giant as malware

On Monday, Google announced that it had flagged several apps made by a Chinese e-commerce giant as malware, alerting users who had them installed, and suspended the company’s official app.

---

Shouldering the Increasingly Heavy Cloud Shared-Responsibility Model

As business and the world in general grow more complex, the shared responsibility between cloud customers and cloud providers becomes, well, cloudier. This is especially true when it comes to security and compliance.

---

CISA kicks off ransomware vulnerability pilot to help spot ransomware-exploitable flaws

CISA initiated the RVWP by notifying 93 organizations identified as running instances of Microsoft Exchange Service with a vulnerability called "ProxyNotShell," widely exploited by ransomware actors.

---

Update: Dish Network updates on ransomware attack

Dish Network stated it reinstated the ability of customers of its Boost Mobile brand to access account information as it provided an update on its bid to recover from a cyberattack in February.

---

Scammers can slip fake texts into legitimate SMS threads. Will a government crackdown stop them?

Last month, the Australian government announced plans to fight SMS-based scams by implementing an SMS sender ID registry. Under this system, organizations that want to SMS customers will first have to register their sender ID with a government body.

---

Hackers Steal Over $1.6 Million in Crypto from General Bytes Bitcoin ATMs Using Zero-Day Flaw

Bitcoin ATM maker General Bytes disclosed that unidentified threat actors stole cryptocurrency from hot wallets by exploiting a zero-day security flaw in its software. "The attacker was able to upload his own java application remotely via the master service interface used by terminals to upload videos and run it using 'batm' user privileges," the company said in an advisory published over the

---

QBot Paves the Way for BlackBasta Ransomware

ReliaQuest studied a security breach incident by Black Basta ransomware wherein criminals gained entry into the network, and rapidly escalated their privileges, with the use of QBot. The attackers executed the malware via HTML Smuggling, an attack strategy QBot has been observed implementing previously in December 2022. 

---

NCSC launches flagship new services to help millions of small organisations stay safe online

New online tools for small organisations to help find and fix any cyber security issues.

---

Microsoft Teams goes 3D: Meet your animated avatar

EXECUTIVE SUMMARY: Sometimes, there are valid reasons to turn your camera off during a Zoom or Teams meeting. For example, you might be in an environment that could prove distracting for other participants, you might have a small child who’s trying to climb on your chair or along your leg, or perhaps someone else who […] The post Microsoft Teams goes 3D: Meet your animated avatar appeared first on CyberTalk.

---

TeamTNT Allegedly Connected to SCARLETEEL Decoy Attack

The SCARLETEEL sophisticated hacking operation, which targets Kubernetes hosted on Amazon to steal confidential proprietary data, also suspect to have a TeamTNT touch. Despite all the similarities, researchers could not connect the two malware with full confidence. According to them, it is possible that another group is simply copying the tactics.

---

Killnet Aggressively Targets Healthcare Organizations

KillNet, a cybercriminal collective with ties to Russia, was spotted targeting Microsoft Azure-hosted healthcare apps for more than three months. The highest number of these attacks were launched in February, targeting hospitals, pharma, life science, healthcare insurance, and health services in more than 25 states.

---

TikTok banned from U.K. government devices

The U.K. bans TikTok on government devices in line with similar restrictions made in the U.S. and Canadian governments and the European Commission.

---

After Data Breaches, Lawsuits Hit Two Arkansas Hospitals

Since January, four lawsuits have been filed against both Howard Memorial Hospital of Nashville and against the Mena Hospital Commission, which operates as the Mena Regional Health System.

---

Google Pixel flaw allowed recovery of redacted, cropped images

An 'Acropalypse' flaw in Google Pixel's Markup tool made it possible to partially recover edited or redacted screenshots and images, including those that have been cropped or had their contents masked, for the past five years.

---

SEC issues new cybersecurity requirements for risk management

The SEC has issued new cybersecurity risk management requirements. The requirements will apply to sectors collectively labeled as "Market Entities".

---

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Google Ads

"DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families," Check Point said in a report published last week.