Latest Cybersecurity News and Articles
28 February 2023
A hacker group, dubbed Clasiopa by the analysts at Broadcom company Symantec, is reportedly launching attacks against organizations in the materials research sector. The group boasts a unique toolset, including the custom Atharvan backdoor. Criminals have also used modified versions of the publicly available Lilith RAT and the Thumbsender hacking tool in this attack.
28 February 2023
Liat Doron is the Vice President of Learning and Training at Check Point Software Technologies. In this exclusive CyberTalk.org interview, Check Point’s Vice President of Learning and Training, Liat Doron, discusses her extraordinary career, leadership opportunities, leadership learning, and how to leverage new educational opportunities to meet evolving business and cyber security needs. Please share […]
The post CISO learning and training: Key insights for security leaders appeared first on CyberTalk.
28 February 2023
Three different cybercriminal groups claimed access to internal networks at communications giant T-Mobile in more than 100 separate incidents throughout 2022, new data suggests. In each case, the goal of the attackers was the same: Phish T-Mobile employees for access to internal company tools, and then convert that access into a cybercrime service that could be hired to divert any T-Mobile user's text messages and phone calls to another device.
28 February 2023
The RIG Exploit Kit is undergoing its most successful period, attempting roughly 2,000 intrusions daily and succeeding in about 30% of cases, the highest ratio in the service's long operational history.
28 February 2023
The threat actors claim to have obtained 19,444 unique records from an Activision Azure database and are offering it for free. The leaked data contains names, phone numbers, job titles, locations, and email addresses of Activision employees.
28 February 2023
The strategy, created by the Office of the National Cyber Director (ONCD), also gives high-level authorization to law enforcement and intelligence agencies to hack into foreign networks to prevent attacks or to retaliate against APT campaigns.
28 February 2023
The vulnerability is tracked as CVE-2023-26009 in the Houzez plugin and CVE-2023-26540 in the theme. The vendor was informed about the security hole and patched it with the release of versions 2.6.4 (plugin) and 2.7.2 (theme).
28 February 2023
Doug Clare has been appointed Head of Cyber Strategy at ISS Corporate Solutions, Inc. Clare has more than 25 years of cyber risk experience.
28 February 2023
The head of the CISA called the status quo in cybersecurity today “unsustainable,” saying companies, consumers, and government must collectively shift their expectations to make software and hardware manufacturers responsible for insecure products.
28 February 2023
Romanian cybersecurity company Bitdefender has released a free decryptor for a new ransomware strain known as MortalKombat.
MortalKombat is a new ransomware strain that emerged in January 2023. It's based on commodity ransomware dubbed Xorist and has been observed in attacks targeting entities in the U.S., the Philippines, the U.K., and Turkey.
Xorist, detected since 2010, is distributed as a
28 February 2023
A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar.
"It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool," CYFIRMA said in a new report.
Some of the notable features include establishing a reverse shell
28 February 2023
Resecurity identified one of the largest investment fraud networks by size and volume of operations defrauding users from Australia, Canada, China, Colombia, the EU, India, Singapore, Malaysia, UAE, Saudi Arabia, Mexico, the US, and other regions.
28 February 2023
The Series D round was co-led by Lightspeed Venture Partners and Greenoaks Capital Partners, with participation from angel investors including Starbucks owner Howard Schultz and French business magnate Bernard Arnault.
28 February 2023
Threat analysts at CYFIRMA claim that this new framework was created by former Lockbit 3.0 affiliates who are experts in anti-analysis and defense evasion, offering a robust solution in exchange for a subscription fee.
28 February 2023
On the one-year anniversary of Russia’s war against Ukraine, the US Department of the Treasury announced a new set of sanctions against tens of entities that are allegedly helping the Kremlin, including its cyber operations.
28 February 2023
The activity, which was detected by the BlackBerry Research and Intelligence Team on February 20, 2023, is also said to encompass Ecuador, Chile, and Spain, suggesting a slow expansion of the hacking group's victimology footprint.
28 February 2023
Nearly 200,000 new mobile banking Trojans emerged in 2022 — a 100% increase from the year before and the biggest acceleration of mobile malware development seen in the last six years.
28 February 2023
A cyberattack on Pipefitters Local 537, a Boston-based labor union’s health fund, resulted in the loss of $6.4 million, but it does not appear that the personal information of members was stolen or compromised, union officials said.
28 February 2023
As digital transformation takes hold and businesses become increasingly reliant on digital services, it has become more important than ever to secure applications and APIs (Application Programming Interfaces). With that said, application security and API security are two critical components of a comprehensive security strategy. By utilizing these practices, organizations can protect themselves
28 February 2023
India recorded a total virus count of 37,697,022, which was over 4,18,000 viruses per day in Q4 of 2022, a new report showed on Monday. According to Fortinet, India alone accounted for 5.81% of the global virus count deducted in the previous quarter.