Latest Cybersecurity News and Articles
28 February 2023
News Corp, the mass media and publishing giant, revealed a data breach that affected the personal data and PHI of several employees. The compromised data include names, SSNs, driver's license numbers, passport and financial data, and medical and health insurance information. The breach has affected multiple news arms of the publishing conglomerate, including the New York Post, The Wall Street Journal, and other U.K. news operations.
28 February 2023
The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries in Colombia.
The activity, which was detected by the BlackBerry Research and Intelligence Team on February 20, 2023, is also said to encompass Ecuador, Chile, and Spain, suggesting a slow expansion of the hacking group's victimology footprint.
Targeted entities include health, financial, law
28 February 2023
Vouched announced $6.3 million financing led by BHG VC and SpringRock Ventures, as well as prior investors Darrell Cavens and Mark Vadon. Vouched’s expansion plans build upon the company’s rapid growth over the past year.
28 February 2023
The service is investigating a major ransomware attack that has compromised some of its most sensitive information, including law enforcement materials, and the personal information of employees, and potential targets of federal investigations.
28 February 2023
ESET researchers uncovered a connection between the North Korean Lazarus APT group and WinorDLL64 - a new backdoor associated with the Wslink malware downloader. Wslink, primarily a malicious loader, can be leveraged by the attacker for lateral movement as well. WinorDLL64 is a fully-featured backdoor implant that can exfiltrate, overwrite, and delete files for file manipulation.
28 February 2023
Cyber attack risks faced by businesses across states and reported data breaches are relative to the respective state governments’ cybersecurity investment, according to Network Assured.
28 February 2023
Password management software firm LastPass says one of its DevOps engineers had a personal home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud storage resources.
28 February 2023
The Australian government on Monday said it planned to overhaul its cybersecurity rules and set up an agency to oversee government investment in the field and help coordinate responses to hacker attacks.
28 February 2023
Tracked as CVE-2022-36537 (CVSS score: 7.5), the issue impacts ZK Framework versions 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, and 8.6.4.1, and allows threat actors to retrieve sensitive information via specially crafted requests.
28 February 2023
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation.
Tracked as CVE-2022-36537 (CVSS score: 7.5), the issue impacts ZK Framework versions 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, and 8.6.4.1, and allows threat actors to retrieve sensitive
28 February 2023
A malicious version of Final Cut Pro that largely went unnoticed by antivirus engines is being used by cybercriminals to mine cryptocurrency on macOS systems. There have been dozens of uploads from 2019 and 2021 that were injected with a malicious payload to surreptitiously mine cryptocurrency. Despite an earlier iteration being a known quantity to the security community, most of the security products from different vendors could not detect malicious applications.
28 February 2023
LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted password vaults, said it happened as a result of the same adversary launching a second attack on its systems.
The company said one of its DevOps engineers had their personal home computer breached and infected with a keylogger as part of a sustained cyber attack that exfiltrated
27 February 2023
By Zac Amos, Features Editor, Rehack.com. Pursuing data center optimization is an excellent way to remain competitive in an increasingly crowded marketplace. Taking the right steps can reduce costs, minimize risks, and help the facility maintain productivity. These five tips offer an excellent start. 1. Create a digital twin of the data center One of the challenging […]
The post 5 tips to optimize your data center appeared first on CyberTalk.
27 February 2023
EXECUTIVE SUMMARY: Russia’s invasion of Ukraine marked the unexpected escalation of an eight-year conflict that began with Russia’s annexation of Crimea in 2014. This illegal annexation represented the first time that a European state had seized a foreign territory since World War II. Ukraine was once a cornerstone of the Soviet Union, representing the second-most […]
The post The war in Eastern Europe: One year later appeared first on CyberTalk.
27 February 2023
An unidentified group of ransomware hackers, dubbed Nevada Group, has targeted the computer networks of almost 5,000 victims across the U.S. and Europe. Hackers ask for two Bitcoins (which is around $50,000) and their ransom notes are publicly visible. The CISA has released a simple workaround to nullify the attack, allowing some of the victims to regain their data.
27 February 2023
Bitdefender disclosed an active malware campaign targeting Facebook and YouTube users with S1deload Stealer, using adult themes as bait. The new information stealer compromises user credentials and exploits system resources to mine BEAM cryptocurrency. The malware has the ability to propagate its malicious links to a compromised user’s followers. Between July and December 2022, about 600 individuals fell victim to it.
27 February 2023
A survey of 100 committee members analyzed third-party risk. Eighty-four percent of respondents said that risk “misses” resulted in disruptions.
27 February 2023
The attackers are usually careful to do nothing with the phishing domain until they are ready to initiate a vishing call to a potential victim. And when the attack or call is complete, they disable the website tied to the domain.
27 February 2023
TA569 leverages many types of injections, traffic distribution systems (TDS), and payloads including, but not limited to, SocGholish. In addition to serving as an initial access broker, these injects imply it may be running a pay-per-install service.
27 February 2023
Over the last few days, scammers have been sending out phishing emails that disguise bogus URLs with something called Slinks—shortened Linkedin URLs. Now, they're being used in a scam based on Amazon's popular Prime membership.