Latest Cybersecurity News and Articles

---

Kali Linux 2023.1 released – and so is Kali Purple!

OffSec (formerly Offensive Security) released Kali Linux 2023.1, the latest version of its popular penetration testing and digital forensics platform, accompanied by a technical preview of Kali Purple, a “one-stop shop for blue and purple teams.”

---

UK’s Largest State Boarding School Announces ‘Sophisticated Cyberattack’

Wymondham is working with the National Cyber Security Centre (NCSC) “to ensure an appropriate response,” and has notified the Department for Education, said Jonathan Taylor, the chief executive of its parent company, Sapientia Education Trust.

---

Brand Names in Finance, Telecom, Tech Lead Successful Phishing Lures

According to an analysis by Cloudflare, credential-seeking cyberattackers garnered the most phishing success by impersonating the brands of telecommunications firms, financial institutions, and popular technology companies in 2022.

---

Security Firm Rubrik Says Hackers Used Fortra GoAnywhere Zero-Day to Steal Internal Data

Silicon Valley–based data security company Rubrik has come forward as the latest victim of the Fortra GoAnywhere zero-day vulnerability, which has been linked to hacks targeting a hospital chain and a bank.

---

Ransomware gang exploits now-patched Windows vulnerability

Criminals are exploiting a Microsoft SmartScreen bug to deliver Magniber ransomware, potentially infecting hundreds of thousands of devices, without raising any security red flags, according to Google's Threat Analysis Group (TAG).

---

Organizations need to re-examine their approach to BEC protection

According to a report by IRONSCALES and Osterman Research, 93% of organizations experienced one or more of the BEC attack variants in the previous 12 months, with 62% facing three or more attack variants.

---

Microsoft fixes Outlook zero-day used by Russian hackers since April 2022

The vulnerability (CVE-2023-23397) was reported by CERT-UA, and it's a critical Outlook elevation of privilege security flaw exploitable without user interaction in low-complexity attacks.

---

PlugX Exploits Flaws in Remote Control Software

Researchers from AhnLab have observed some unidentified threat actors use PlugX to exploit well-known flaws in remote desktop software to get complete control over the infected system. Several other threats, including the Sliver backdoor, Gh0st RAT, and XMRig coinminer, have abused the bugs in previous attacks. To prevent such threats, organizations are suggested to regularly review and update their security posture, and keep all the software updated.

---

New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining

Cybersecurity researchers have discovered the first-ever illicit cryptocurrency mining campaign used to mint Dero since the start of February 2023. "The novel Dero cryptojacking operation concentrates on locating Kubernetes clusters with anonymous access enabled on a Kubernetes API and listening on non-standard ports accessible from the internet," CrowdStrike said in a new report shared with The

---

Shift to secure-by-design must start at university level, CISA director says

The transition to secure-by-design will require a major shift in how technology products are developed, Jen Easterly said, and that will include changes in the code used to develop software.

---

The Different Methods and Stages of Penetration Testing

The stakes could not be higher for cyber defenders. With the vast amounts of sensitive information, intellectual property, and financial data at risk, the consequences of a data breach can be devastating. According to a report released by Ponemon institute, the cost of data breaches has reached an all-time high, averaging $4.35 million in 2022. Vulnerabilities in web applications are often the

---

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

Eight of the 80 bugs are rated Critical, 71 are rated Important, and one is rated Moderate in severity. The updates are in addition to 29 flaws the tech giant fixed in its Chromium-based Edge browser in recent weeks.

---

Tick APT Targeted High-Value Customers of East Asian Data-Loss Prevention Company

A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention (DLP) company that caters to government and military entities. "The attackers compromised the DLP company's internal update servers to deliver malware inside the software developer's network, and trojanized installers of legitimate tools used by the company, which

---

Dark Pink Deploys KamiKakaBot to Target Government Entities in South Asian Countries

Cybercriminals, purportedly of Asia-Pacific origin, have launched attacks aimed at government and military organizations in Southeast Asian countries. According to EclecticIQ, Dark Pink APT is behind the campaign and attempts to cripple systems via a custom malware dubbed KamiKakaBot. There are used to execute arbitrary commands and pilfer sensitive data from users.

---

Adobe Warns of ‘Very Limited Attacks’ Exploiting ColdFusion Zero-Day

In all, Adobe released patches for a whopping 106 vulnerabilities in a wide range of products, some serious enough to expose both Windows and macOS users to remote code execution attacks.

---

Emotet, QSnatch Malware Dominate Malicious DNS Traffic

An analysis of trillions of DNS requests by Akamai showed a shocking amount of malicious traffic inside enterprise networks, with threats using DNS as a sort of malicious Autobahn.

---

SAP releases security updates fixing five critical vulnerabilities

Software vendor SAP has released security updates for 19 vulnerabilities, five rated as critical, meaning that administrators should apply them as soon as possible to mitigate the associated risks.

---

Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack

Microsoft's Patch Tuesday update for March 2023 is rolling out with remediations for a set of 80 security flaws, two of which have come under active exploitation in the wild. Eight of the 80 bugs are rated Critical, 71 are rated Important, and one is rated Moderate in severity. The updates are in addition to 29 flaws the tech giant fixed in its Chromium-based Edge browser in recent weeks. The

---

Two U.S. Men Charged in 2022 Hacking of DEA Portal

Two U.S. men have been charged with hacking into a U.S. Drug Enforcement Agency (DEA) online portal that taps into 16 different federal law enforcement databases. Both are alleged to be part of a larger criminal organization that specializes in using fake emergency data requests from compromised police and government email accounts to publicly threaten and extort their victims.

---

10 of the best places to find AI talent for your business

EXECUTIVE SUMMARY: Investing in AI? Don’t forget to invest in AI talent. In the modern business world, Artificial Intelligence (AI) tools are like powerful and versatile Swiss Army knives. As a Swiss Army knife offers a wide range of capabilities that can be adapted to a variety of situations, AI tools provide enterprises with a […] The post 10 of the best places to find AI talent for your business appeared first on CyberTalk.