Latest Cybersecurity News and Articles

---

UK's schoolgirl cyber security champions joined by undeclared war star at prestigious awards night

Winning teams from the National Cyber Security Centre’s 2023 CyberFirst Girls Competition attend prize-giving ceremony in Belfast.

---

DEV-1101 Offers Phishing Kit for High-Volume AiTM Campaigns

Microsoft Threat Intelligence stumbled across an open source adversary-in-the-middle (AiTM) phishing kit that furthers the ability of hackers to launch organized attacks and also scale it. The threat actor behind the kit is being tracked under the moniker DEV-1101. The kit’s features include setting up landing pages impersonating Microsoft Office and Outlook platforms. It can let attackers manage campaigns from mobile devices and even bypass CAPTCHA barriers.

---

2022 saw a 61% increase in the rate of phishing attacks

A 2022 SaaS report by SaaS Alerts analyzed new threat vectors, key areas of concern and potential security gaps in SaaS applications. 

---

Users question corporate data responsibility & privacy

The Corporate Data Responsibility Survey 2022 from KPMG found disparate views on data privacy between U.S. users and corporations.

---

Antwan D. Banks hired as NMFTA Director of Enterprise Security

Antwan D. Banks has been hired as Director of Enterprise Security for the National Motor Freight Traffic Association to defend trucking cybersecurity.

---

Microsoft Warns of Large-Scale Use of Phishing Kits to Send Millions of Emails Daily

An open-source adversary-in-the-middle (AiTM) phishing kit has found a number of takers in the cybercrime world for its ability to orchestrate attacks at scale. Microsoft is tracking the threat actor behind the kit under the moniker DEV-1101.

---

Siemens Addresses Over 90 Vulnerabilities for ICS Patch Tuesday

Siemens has released only seven new advisories, but they describe a total of 92 vulnerabilities. However, a vast majority are introduced by the use of third-party components rather than being specific to Siemens products.

---

Hospital in Brussels latest victim in spate of European healthcare cyberattacks

Ambulances were diverted from the Centre Hospitalier Universitaire (CHU) Saint-Pierre this weekend following the attack in the early hours of Friday morning. Details about the attack and the perpetrators have not yet been disclosed.

---

Financial services DDoS resilience starts with understanding attack surface

The recent attack on Danish Bank shows what can happen when organizations need more awareness of vulnerabilities and evolving DDoS attack surface. 

---

CISA now warns critical infrastructure of ransomware-vulnerable devices

"As part of RVWP, CISA leverages existing authorities and technology to proactively identify information systems that contain security vulnerabilities commonly associated with ransomware attacks," the cybersecurity agency said.

---

Grip Security Receives Investment from The Syndicate Group

The Boston, MA, and Tel Aviv, Israel-based SaaS security company unifying discovery, access control, and data governance, received an investment from The Syndicate Group. The amount of the deal was not disclosed.

---

LockBit Claims it Stole SpaceX Schematics From Parts Supplier, Threatens to Leak Them

Ransomware gang Lockbit has boasted it broke into Maximum Industries, which makes parts for SpaceX, and stole 3,000 proprietary schematics developed by Elon Musk's rocketeers.

---

88% of breached passwords are 12 characters or less

A recent study of 800 million breached passwords found that 88% of passwords used in successful cyberattacks were 12 characters or less.

---

New Fake ChatGPT Chrome Extension Stealing Facebook Ad Accounts with Thousands of Installs

A Chrome Extension offering quick access to fake ChatGPT functionality was found to be hijacking Facebook accounts and installing hidden account backdoors. Notably, the Facebook app “backdoor” gives the threat actors super-admin permissions.

---

Increasing infrastructure security by reducing complexity

By Deryck Mitchelson, Field CISO EMEA, Check Point Software Technologies. Cyber complexity can impede efforts to secure systems. In particular, cyber security complexity increases risks, drives high costs, and can result in sub-par decision-making. By pursuing a simplification agenda, leaders can build true cyber security resilience. Reducing complexity means focusing on operational overlap, on duplication and […] The post Increasing infrastructure security by reducing complexity appeared first on CyberTalk.

---

Counting ICS Vulnerabilities: Examining Variations in Numbers Reported by Security Firms

Reports published in the past couple of months by various industrial cybersecurity companies provide different numbers when it comes to the vulnerabilities discovered in industrial control system (ICS) products in 2022.

---

Pro-Russian Hackers Blackmail Ukrainian Developer of S.T.A.L.K.E.R. 2 Game

GSC Game World says it has been enduring cyberattacks for ‘more than a year’ and that hackers demand Russia-friendly changes to the game or else they’ll leak tons of the game’s development materials.

---

GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks

A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into a botnet. "GoBruteforcer chose a Classless Inter-Domain Routing (CIDR) block for scanning the network during the attack, and it targeted all IP addresses within that CIDR range," Palo Alto Networks Unit 42 researchers said. "The threat actor

---

GitHub 2FA plan adds SMS, account lockout safeguards

GitHub has added SMS support and fresh account lockout prevention features to its phased rollout plans as it prepares to implement a 2FA requirement for accounts beginning Monday.

---

The Prolificacy of LockBit Ransomware

Today, the LockBit ransomware is the most active and successful cybercrime organization in the world. Attributed to a Russian Threat Actor, LockBit has stepped out from the shadows of the Conti ransomware group, who were disbanded in early 2022. LockBit ransomware was first discovered in September 2019 and was previously known as ABCD ransomware because of the ".abcd virus" extension first