Latest Cybersecurity News and Articles

---

David Dunn named Chief Information Security Officer at Kroll

David Dunn has been appointed as Kroll’s Chief Information Security Officer (CISO). Dunn succeeds Wayne Peterson, who recently retired.

---

Android’s March 2023 Updates Patch Over 50 Vulnerabilities

The most severe of the patched vulnerabilities are two remote code execution (RCE) flaws in the System component, both of which were addressed as part of the 2023-03-01 security patch level.

---

Exploitation of Critical Vulnerability in End-of-Life VMware Product Ongoing

Tracked as CVE-2021-39144 (CVSS score of 9.8), the issue was disclosed in October 2022, when VMware announced patches for it, although the affected product had reached end-of-life (EOL) status in January 2022.

---

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies, and other sectors. "The threat actors behind the campaign are targeting Facebook business accounts by using Google ads and fake Facebook profiles that promote things like games, adult content, and cracked software, etc. to lure

---

Brazilian Conglomerate Andrade Gutierrez Suffers 3TB Data Breach

Hackers have stolen several terabytes of corporate and employee information from controversial Brazilian multi-national Andrade Gutierrez, in a raid the firm reportedly still hasn’t acknowledged.

---

Legislation introduced to protect personally identifiable health data

The UPHOLD Privacy Act was introduced to the Senate to prevent companies from profiting off of identifiable health data for advertising purposes. 

---

Hacker Claims to Sell 160GB Trove of Stolen Confidential Data From Acer

The list of stolen data included confidential slides and presentations, technical manuals, Windows Imaging Format files, binaries of various types, backend infrastructure data, product model documentation, and information about various devices.

---

Two-Thirds of European Firms Have Started Zero Trust

Over two-thirds of European organizations have begun developing a zero trust strategy, up from around a quarter in 2020, according to Forrester. The analyst house said a further 15% were planning to adopt zero trust tech.

---

Sandbox Blockchain Game Breached to Send Emails Linking to Malware

The Sandbox blockchain game is warnings its community that a security incident caused some users to receive fraudulent emails impersonating the game, trying to infect them with malware.

---

Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

A suspected Pakistan-aligned advanced persistent threat (APT) group known as Transparent Tribe has been linked to an ongoing cyber espionage campaign targeting Indian and Pakistani Android users with a backdoor called CapraRAT. "Transparent Tribe distributed the Android CapraRAT backdoor via trojanized secure messaging and calling apps branded as MeetsApp and MeetUp," ESET said in a report

---

RansomHouse Ransomware Attack Hit Hospital Clinic de Barcelona

“The hospital’s press department said that all written work was being done on paper and that the hospital was diverting new urgent cases to other hospitals in the city,” states the Associated Press.

---

Why Healthcare Can't Afford to Ignore Digital Identity

Investing in digital identity can improve security, increase clinical productivity, and boost healthcare's bottom line. — by Gus Malezis, CEO of Imprivata Digitalization has created immeasurable opportunities for businesses over the past two decades. But the growth of hybrid work and expansion of Internet of Things (IoT) has outpaced traditional 'castle and moat' cybersecurity, introducing

---

Ransomware Roundup – Sirattacker and ALC Ransomware

Sirattacker is one of the latest Chaos ransomware variants. It was first released in the middle of February 2023. ALC is a recently reported ransomware. It is known for a message aimed at “Russia and its counterpart” in its ransom note.

---

Almost Half of Industrial Sector Computers Affected By Malware in 2022

Two out of every five (40.6%) operational technology (OT) computers used in industrial settings have been affected by malware in 2022. The data comes from a report published earlier today by security researchers at Kaspersky.

---

Old Windows ‘Mock Folders’ UAC bypass used to drop malware

A new phishing campaign targets organizations in Eastern European countries with the Remcos RAT malware with aid from an old Windows User Account Control bypass discovered over two years ago.

---

The Role of Marketing and PR in Incident Response

Clear communication is essential. Communication strategies differ before and after a cyber incident. The way a company approaches both is as important as incident mitigation itself.

---

Vulnerability in DJI drones may reveal pilot’s location

The researchers informed DJI of the 16 detected vulnerabilities prior to releasing the information to the public. In the course of the responsible disclosure process, the manufacturer has fixed these issues.

---

Suprbay.org, The Pirate Bay Web Forum Down amid Cyberattack

The official forum of The Pirate Bay is the latest victim of an apparent cyberattack that forced its site to remain offline for several days. The forum allows users to request torrent reseeding and report malware found in torrent files.

---

Scammers Pose as ChatGPT in New Phishing Scam

Bitdefender researchers have discovered a new phishing scam in which cybercriminals are redirecting unsuspecting users to a fake ChatGPT version. The primary targets were found in Ireland, Australia, Germany, Denmark, and the Netherlands.

---

Microsoft and MITRE developed a tool to prepare security teams for attacks on ML systems

A new plug-in, created by Microsoft and MITRE, integrates various open-source software tools to aid cybersecurity professionals in bolstering their defenses against attacks on machine learning (ML) systems.